Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6432303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6432303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: YVyB6EoUZgBuLQHsL1OP8p8n+IfCaeHqH2jn3nibMo0=
Subject key identifier: 05:2B:22:FB:03:0B:AB:D7:90:DC:D9:24:D9:4D:65:CA:0B:59:83:96
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 2B4B7094D8A928CF7942547663A3F3AB6FC847B4
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6432303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 21:00:01 +0000
ROA not before: Tue 03 Dec 2024 20:55:01 +0000
ROA not after: Tue 02 Dec 2025 21:00:01 +0000
asID: 4761
IP address blocks: 2400:8b00:d20::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 15 Jun 2025 13:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:4b:70:94:d8:a9:28:cf:79:42:54:76:63:a3:f3:ab:6f:c8:47:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:55:01 2024 GMT
Not After : Dec 2 21:00:01 2025 GMT
Subject: CN=052B22FB030BABD790DCD924D94D65CA0B598396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:b2:e3:23:30:d8:30:75:88:63:ac:df:0c:
1c:f3:1e:2f:bb:c1:a6:05:2a:ea:16:e0:eb:0c:53:
2b:0a:cb:49:8a:a0:09:a5:ab:6f:36:4d:1d:a2:e7:
98:8a:9d:29:2a:a7:6a:18:4c:52:0e:14:5d:81:59:
49:f2:e9:1b:19:a2:a0:e6:79:f3:f6:9d:66:1d:e1:
56:ef:9c:a2:a4:ee:87:a7:fd:8e:d2:b2:1e:c9:12:
62:40:c3:75:4b:5a:be:07:2e:b1:ed:d3:57:8f:8b:
ff:71:ae:64:4e:3e:37:bb:0e:5e:f8:f9:bb:8e:5d:
1d:16:b5:d4:f7:85:7d:f0:6b:51:66:80:5f:3c:18:
6a:93:d6:1e:9d:08:23:16:80:d1:73:6f:71:85:c0:
51:b9:30:28:e5:18:47:21:a4:f2:72:dd:a9:f2:ef:
27:d0:99:9c:e7:34:b3:5a:14:84:c6:28:e3:15:ce:
b1:3f:1a:d6:45:8e:c0:23:b8:d7:c8:8a:d9:d8:01:
4f:13:d7:74:31:36:0e:3c:22:5e:59:7d:5b:2e:56:
03:22:ae:a8:5f:a8:18:97:84:c7:19:88:0c:29:d5:
83:fe:74:d3:f1:98:79:e4:7a:97:49:27:b8:3a:57:
47:ec:bb:ce:7a:ca:ce:31:35:c1:d4:38:15:fd:65:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2B:22:FB:03:0B:AB:D7:90:DC:D9:24:D9:4D:65:CA:0B:59:83:96
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6432303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:d20::/44
Signature Algorithm: sha256WithRSAEncryption
1f:1e:7c:d5:84:ec:17:ec:76:15:15:02:f9:6d:80:8a:3e:d6:
c3:be:0f:fd:4b:fc:78:39:c6:bc:53:1e:ee:55:67:1d:27:20:
3b:6a:4e:1d:04:ec:7f:59:24:69:1c:15:23:1d:a9:92:6d:fc:
c0:56:26:23:80:1e:19:98:48:20:70:f7:a1:25:3a:f9:86:62:
47:fd:ae:30:96:b1:72:25:55:5d:11:c2:ef:00:3d:71:3c:1a:
15:96:b0:b1:e4:8d:52:ac:60:a4:60:bc:7c:21:de:66:7e:6e:
10:db:96:35:38:aa:a6:88:e8:c5:8b:26:e2:c0:ce:71:df:97:
61:13:30:25:87:4b:40:72:aa:ee:11:72:a9:9e:bd:fd:21:b5:
97:13:93:1e:b5:2a:da:ad:ba:10:02:cb:d0:a5:ab:4a:84:9d:
5d:de:4d:72:ed:72:1a:8e:ce:cd:4c:44:65:74:92:4f:34:9b:
27:b7:a4:89:1b:fe:30:87:09:a0:4f:52:e2:c2:f9:35:07:52:
60:b6:aa:0d:b8:2d:2b:f9:3b:45:5e:30:63:48:91:15:82:cd:
08:e8:72:37:c8:b6:3b:9e:60:3e:d2:91:6e:bf:0e:22:5e:8c:
dc:7b:73:40:63:08:1e:80:24:8a:61:29:3a:1e:19:7a:50:2c:
9c:66:28:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:30:59 2025 by rpki-client