Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6333303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6333303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: ifBNEmACBZ+1Sipy9rO6MrRKVBrbu8TVkg0dLX8gZo0=
Subject key identifier: 71:2C:8C:59:E2:B5:5E:23:55:81:A6:8B:2B:13:AE:54:BC:22:CB:85
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 5B53084D2B7CBB9F18845A734C0EB0A4A4A4A6B0
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6333303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:58:00 +0000
ROA not before: Tue 03 Dec 2024 20:53:00 +0000
ROA not after: Tue 02 Dec 2025 20:58:00 +0000
asID: 4761
IP address blocks: 2400:8b00:c30::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 17 Jun 2025 18:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:53:08:4d:2b:7c:bb:9f:18:84:5a:73:4c:0e:b0:a4:a4:a4:a6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:53:00 2024 GMT
Not After : Dec 2 20:58:00 2025 GMT
Subject: CN=712C8C59E2B55E235581A68B2B13AE54BC22CB85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:89:d6:21:f1:cb:bc:fe:b6:34:86:4e:3b:
2d:aa:e4:8b:4c:4b:e3:0a:10:20:33:8c:ac:95:f1:
55:32:f3:ed:84:22:26:9b:1e:1b:2f:e4:83:5d:75:
9d:fe:8e:68:c8:16:56:c1:0b:23:37:32:f7:65:da:
a4:71:89:09:58:7f:31:50:df:f4:d1:0f:3a:00:b6:
2d:73:03:f6:c1:ec:6a:ae:01:e0:43:47:62:2d:04:
27:13:0f:1c:e3:ab:7e:76:c7:66:ad:0b:cf:29:b2:
f3:d3:50:86:e1:ec:03:54:18:29:7f:2e:12:87:72:
ee:3b:f7:b6:5b:b2:c4:9c:4b:54:7b:77:a0:18:30:
24:47:a7:dd:d3:39:62:9f:10:13:d9:d8:e9:4a:c3:
ad:a6:2c:c5:53:a8:e1:5b:66:36:22:6a:85:f4:6f:
a1:0b:f1:01:7c:c7:f9:81:71:e3:5a:d9:3e:f8:75:
8a:d8:9e:6c:a4:e1:37:95:0e:d2:c9:a0:e8:9b:54:
b4:25:69:85:f0:c3:9e:75:61:4a:40:c6:d4:66:6e:
03:85:8a:fe:f3:24:b1:4b:39:24:51:92:c5:8b:50:
f1:5a:87:77:09:dc:bb:f7:6c:37:97:12:05:e6:8e:
bd:8d:a4:74:87:d2:a2:06:78:1a:bc:c5:74:51:7a:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2C:8C:59:E2:B5:5E:23:55:81:A6:8B:2B:13:AE:54:BC:22:CB:85
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6333303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:c30::/44
Signature Algorithm: sha256WithRSAEncryption
86:97:fe:b9:9c:52:54:15:b0:18:4c:78:04:7c:58:9f:89:f8:
12:a4:ce:68:8b:4f:4f:ef:42:a9:1e:e8:d5:f3:f7:aa:1e:71:
af:a8:41:c0:6a:91:00:94:4f:0e:28:5a:ee:73:d5:ed:a9:62:
2e:98:3a:6f:fb:93:b9:fe:f7:27:5b:3b:7a:03:a5:cf:b6:ab:
f7:aa:3a:bb:32:2c:d0:20:d6:f6:2d:93:cb:9e:8b:42:2b:9f:
3a:3a:be:00:bd:bc:20:3f:ff:f0:e4:c3:be:96:03:15:ad:a8:
c8:1e:9c:12:d6:af:05:f9:a6:e0:08:4a:d8:68:83:b0:4a:93:
79:f1:84:40:af:7c:b3:9f:b4:b5:82:42:17:99:63:6e:0f:2c:
a9:5e:dd:e1:8b:0a:f5:e2:a4:c9:4b:91:9a:31:25:fd:5e:fa:
a8:0e:3c:25:41:a5:a8:4f:ef:02:19:9f:83:0e:5c:f8:50:8a:
3b:02:db:fc:c9:97:cd:7d:2b:45:a1:91:66:e6:4a:30:e1:d6:
f7:65:ac:a2:2c:ef:24:a2:22:3a:45:35:65:cf:e4:4b:92:1a:
b4:45:8d:e1:0e:a0:9e:0b:ab:fe:85:5e:71:82:17:7f:cd:5c:
4f:9f:a0:da:f7:75:3c:f5:7d:94:fa:bd:54:c1:6e:c8:77:12:
8b:f3:b1:d2
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUW1MITSt8u58YhFpzTA6wpKSkprAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMyMDUzMDBaFw0yNTEyMDIyMDU4MDBaMDMxMTAvBgNV
BAMTKDcxMkM4QzU5RTJCNTVFMjM1NTgxQTY4QjJCMTNBRTU0QkMyMkNCODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNxYnWIfHLvP62NIZOOy2q5ItM
S+MKECAzjKyV8VUy8+2EIiabHhsv5INddZ3+jmjIFlbBCyM3Mvdl2qRxiQlYfzFQ
3/TRDzoAti1zA/bB7GquAeBDR2ItBCcTDxzjq352x2atC88psvPTUIbh7ANUGCl/
LhKHcu4797ZbssScS1R7d6AYMCRHp93TOWKfEBPZ2OlKw62mLMVTqOFbZjYiaoX0
b6EL8QF8x/mBceNa2T74dYrYnmyk4TeVDtLJoOibVLQlaYXww551YUpAxtRmbgOF
iv7zJLFLOSRRksWLUPFah3cJ3Lv3bDeXEgXmjr2NpHSH0qIGeBq8xXRReoulAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUcSyMWeK1XiNVgaaLKxOuVLwiy4UwHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYzZlZWY5LTcxM2MtNGU2Yi1i
MmJjLTRjMDQ1Mjg5MDM0NS8wLzMyMzQzMDMwM2EzODYyMzAzMDNhNjMzMzMwM2Ez
YTJmMzQzNDJkMzQzNDIwM2QzZTIwMzQzNzM2MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkAIsADDAw
DQYJKoZIhvcNAQELBQADggEBAIaX/rmcUlQVsBhMeAR8WJ+J+BKkzmiLT0/vQqke
6NXz96oeca+oQcBqkQCUTw4oWu5z1e2pYi6YOm/7k7n+9ydbO3oDpc+2q/eqOrsy
LNAg1vYtk8uei0Irnzo6vgC9vCA///Dkw76WAxWtqMgenBLWrwX5puAISthog7BK
k3nxhECvfLOftLWCQheZY24PLKle3eGLCvXipMlLkZoxJf1e+qgOPCVBpahP7wIZ
n4MOXPhQijsC2/zJl819K0WhkWbmSjDh1vdlrKIs7ySiIjpFNWXP5EuSGrRFjeEO
oJ4Lq/6FXnGCF3/NXE+foNr3dTz1fZT6vVTBbsh3EovzsdI=
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:23:59 2025 by rpki-client