Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6431303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6431303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: ndJ2ISU8MrYOCDOVT492+H7o7Y2enXdwMwl4TBlOq7o=
Subject key identifier: D3:D6:30:87:92:FB:25:9A:2D:6B:39:A1:84:8C:5D:E1:81:7D:59:FB
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 035AE23A9950588826E9A588EDFB1A189A033776
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6431303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:59:51 +0000
ROA not before: Tue 03 Dec 2024 20:54:51 +0000
ROA not after: Tue 02 Dec 2025 20:59:51 +0000
asID: 4761
IP address blocks: 2400:8b00:d10::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 15 Jun 2025 13:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5a:e2:3a:99:50:58:88:26:e9:a5:88:ed:fb:1a:18:9a:03:37:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:54:51 2024 GMT
Not After : Dec 2 20:59:51 2025 GMT
Subject: CN=D3D6308792FB259A2D6B39A1848C5DE1817D59FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:2f:11:5d:ad:12:83:ce:8d:b9:d1:f6:b5:
c7:c8:51:46:74:b1:73:cc:db:51:96:b3:b9:71:fe:
03:74:54:5e:63:7d:df:7e:b8:ca:5d:ea:40:1a:0d:
04:fc:6d:15:3b:a1:5b:41:7d:f8:3f:cb:da:d1:ab:
eb:4d:15:bb:49:2c:43:7f:56:68:0f:d6:87:85:5e:
0b:55:e0:44:21:35:72:59:bf:71:b7:e3:4a:41:13:
86:2f:91:81:f9:43:34:b6:96:a3:10:77:6d:5b:b2:
a2:b9:65:41:91:26:2f:af:45:61:d4:83:91:31:76:
a4:be:52:3f:e2:fb:d1:8e:71:e7:d2:ab:31:da:de:
57:db:3c:fd:25:fc:42:71:0b:30:4f:6c:05:1f:66:
3c:30:62:98:b7:2a:da:c1:ef:7a:b3:9c:80:e4:54:
42:56:51:e6:74:72:1c:7f:58:d3:ae:b4:05:27:07:
ad:d2:12:9d:54:0d:41:3a:e1:b6:0b:a6:67:93:5a:
88:ee:c4:9f:3c:1d:f1:92:1f:98:0c:fb:54:f4:4c:
40:b3:d0:cc:56:81:ca:6d:3f:69:53:98:26:5d:35:
c0:91:3f:c0:4a:7e:74:61:70:bd:b0:9e:65:2c:a1:
92:bb:0b:6a:c2:15:96:a0:e8:4d:93:9e:fd:e6:92:
38:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D6:30:87:92:FB:25:9A:2D:6B:39:A1:84:8C:5D:E1:81:7D:59:FB
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6431303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:d10::/44
Signature Algorithm: sha256WithRSAEncryption
33:07:a0:47:f3:9d:83:5a:01:1a:20:fc:3e:32:57:9f:38:9f:
14:80:78:c4:55:d1:8c:fb:98:c2:0a:4e:6e:ac:32:48:0e:bb:
46:b6:e2:10:2b:9b:e3:e8:51:39:a5:8a:ce:a1:e7:bb:d0:12:
c6:d1:7d:70:1b:17:55:e4:8d:3f:21:03:ab:ae:d6:88:94:8f:
9d:b4:09:b4:f9:e7:f8:f2:84:03:9e:94:1a:d1:14:14:1b:36:
b1:ab:89:4d:56:df:5c:3b:5d:65:40:c3:df:e7:d6:3e:8f:61:
50:a8:df:5c:69:c7:b5:6d:89:b3:5d:2a:c7:0a:a7:83:1e:3b:
5c:72:f2:61:b2:3b:5a:04:37:4a:c2:46:58:dd:ea:e2:ea:22:
b3:fe:22:e8:2e:2f:4d:81:91:35:4b:65:ef:2b:01:fe:a4:94:
af:b9:2d:08:e8:fb:d2:4b:a2:ab:6e:33:3c:7d:e8:29:01:c3:
fe:d1:57:50:9b:01:43:8c:7c:38:3d:32:88:d4:3f:60:8e:d5:
46:bb:fd:b8:7e:75:1b:13:4c:48:a1:e7:bc:69:c2:65:d5:e2:
ac:99:1f:67:39:2a:49:c1:fb:b4:5b:d0:2f:c0:df:21:a1:ba:
0e:a9:9c:37:5a:4d:e0:17:f4:94:50:9b:39:05:d6:d5:2e:3a:
83:53:31:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:54:42 2025 by rpki-client