Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6339303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6339303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: DZuTtM3UjReYtiZyJNZjW/UPhShTwlKrPS0FaIUFR8g=
Subject key identifier: AB:9A:46:D3:8E:AF:DB:74:E9:D9:72:E2:63:E8:8A:B0:05:EE:4C:EE
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 26D9FA6A0CBF1C761587E10EA85CF63EA16369B5
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6339303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:58:27 +0000
ROA not before: Tue 03 Dec 2024 20:53:27 +0000
ROA not after: Tue 02 Dec 2025 20:58:27 +0000
asID: 4761
IP address blocks: 2400:8b00:c90::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 15 Jun 2025 13:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d9:fa:6a:0c:bf:1c:76:15:87:e1:0e:a8:5c:f6:3e:a1:63:69:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:53:27 2024 GMT
Not After : Dec 2 20:58:27 2025 GMT
Subject: CN=AB9A46D38EAFDB74E9D972E263E88AB005EE4CEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:63:ea:0f:37:5f:4d:1e:72:dc:8c:fa:ef:
c2:04:7d:32:0b:24:9b:db:65:c0:44:7e:a9:94:23:
88:b2:4b:d9:5c:b4:f9:b8:ef:22:70:c7:a3:77:38:
9e:2c:ae:69:a1:a4:29:5e:0b:35:73:a9:63:39:fc:
1a:0f:51:fb:8c:5d:e6:1d:fd:a9:92:58:c4:b4:45:
83:00:b5:cb:bf:eb:52:12:68:6a:63:6c:20:39:a3:
e2:a7:b3:a1:2d:5c:f4:62:51:a0:7c:81:51:60:71:
f9:75:9f:0b:4b:db:77:70:e0:88:f8:21:aa:1e:13:
6b:da:0a:6a:d7:24:89:2a:30:f1:cb:49:cb:6e:95:
a8:85:87:e8:6a:95:80:15:0e:96:73:8d:e4:1c:f1:
a9:96:8b:20:2d:38:07:54:d6:6d:ac:ec:c7:6b:bf:
79:93:9f:9d:17:68:3e:ee:29:54:af:0e:af:a5:a4:
42:0c:9a:55:4c:55:a8:7e:55:9e:95:f0:ab:93:13:
0b:9b:b2:7c:86:1f:01:31:dd:88:1f:f9:88:37:ee:
b1:09:65:73:65:da:2b:c6:bf:fc:f4:0c:f9:73:26:
1b:c0:8b:24:a0:25:96:47:d6:9d:9b:6b:29:da:a0:
1b:54:fc:b7:66:b9:de:49:fe:81:30:f7:c4:f7:bb:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9A:46:D3:8E:AF:DB:74:E9:D9:72:E2:63:E8:8A:B0:05:EE:4C:EE
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6339303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:c90::/44
Signature Algorithm: sha256WithRSAEncryption
05:b8:15:a8:5b:c0:29:3f:87:a1:e9:dd:a2:0b:6e:2d:4b:e0:
de:29:55:1b:dc:86:63:cc:f7:65:a7:39:d9:b9:1a:c5:b6:5f:
9a:6f:51:f5:e9:f5:35:49:d0:7d:2f:e1:8b:0b:41:06:5f:b9:
3d:38:78:44:53:e1:68:28:12:d9:09:30:ee:6f:e4:c7:62:f4:
c3:af:b5:9c:89:00:1d:b3:d1:e3:0e:89:f4:cc:07:14:ce:ae:
bd:01:75:76:b5:9d:7f:b9:d7:33:4c:2f:a2:ed:f4:f8:28:a9:
b3:19:2a:fd:e7:7a:82:dd:0c:69:2e:a7:f2:31:87:5d:5a:58:
56:34:2f:6c:ce:b8:c0:d6:76:fb:b4:83:86:f6:26:ae:6c:a8:
1c:02:4a:2a:de:67:80:7a:f9:46:bb:3b:f8:40:fa:57:af:93:
73:49:07:40:53:2e:f6:14:40:98:c6:b6:2e:2e:5e:0c:67:f4:
90:56:1b:69:74:96:14:d9:f4:21:9e:55:d7:33:65:84:bb:c6:
c6:5d:60:77:dc:4c:73:2b:ad:a9:f1:f4:50:de:f9:0e:2b:d2:
ba:0a:d0:c3:33:36:bd:08:1e:7e:b0:12:b0:fd:19:ca:cc:fc:
c0:29:9a:da:a6:3d:ac:84:a3:e0:58:29:64:b9:bb:6e:33:ce:
89:71:65:e5
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUJtn6agy/HHYVh+EOqFz2PqFjabUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMyMDUzMjdaFw0yNTEyMDIyMDU4MjdaMDMxMTAvBgNV
BAMTKEFCOUE0NkQzOEVBRkRCNzRFOUQ5NzJFMjYzRTg4QUIwMDVFRTRDRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbGPqDzdfTR5y3Iz678IEfTIL
JJvbZcBEfqmUI4iyS9lctPm47yJwx6N3OJ4srmmhpCleCzVzqWM5/BoPUfuMXeYd
/amSWMS0RYMAtcu/61ISaGpjbCA5o+Kns6EtXPRiUaB8gVFgcfl1nwtL23dw4Ij4
IaoeE2vaCmrXJIkqMPHLSctulaiFh+hqlYAVDpZzjeQc8amWiyAtOAdU1m2s7Mdr
v3mTn50XaD7uKVSvDq+lpEIMmlVMVah+VZ6V8KuTEwubsnyGHwEx3Ygf+Yg37rEJ
ZXNl2ivGv/z0DPlzJhvAiySgJZZH1p2baynaoBtU/Ldmud5J/oEw98T3uzlHAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUq5pG046v23Tp2XLiY+iKsAXuTO4wHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYzZlZWY5LTcxM2MtNGU2Yi1i
MmJjLTRjMDQ1Mjg5MDM0NS8wLzMyMzQzMDMwM2EzODYyMzAzMDNhNjMzOTMwM2Ez
YTJmMzQzNDJkMzQzNDIwM2QzZTIwMzQzNzM2MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkAIsADJAw
DQYJKoZIhvcNAQELBQADggEBAAW4FahbwCk/h6Hp3aILbi1L4N4pVRvchmPM92Wn
Odm5GsW2X5pvUfXp9TVJ0H0v4YsLQQZfuT04eERT4WgoEtkJMO5v5Mdi9MOvtZyJ
AB2z0eMOifTMBxTOrr0BdXa1nX+51zNML6Lt9PgoqbMZKv3neoLdDGkup/Ixh11a
WFY0L2zOuMDWdvu0g4b2Jq5sqBwCSireZ4B6+Ua7O/hA+levk3NJB0BTLvYUQJjG
ti4uXgxn9JBWG2l0lhTZ9CGeVdczZYS7xsZdYHfcTHMrranx9FDe+Q4r0roK0MMz
Nr0IHn6wErD9GcrM/MApmtqmPayEo+BYKWS5u24zzolxZeU=
-----END CERTIFICATE-----
Generated at Tue Jun 17 09:39:20 2025 by rpki-client