Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/10/32332e3133392e34312e302f32342d3234203d3e20333935333332.roa
File: 32332e3133392e34312e302f32342d3234203d3e20333935333332.roa (raw, json)
Hash identifier: xru5gQF1iz7HveFX4EQTe8xD4P5vfOqrTSjEXwBkER4=
Subject key identifier: 4F:F3:4A:9F:41:35:09:8B:72:34:B6:38:FB:C6:B6:22:9D:25:C9:3A
Certificate issuer: /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial: 5D7246BE844F38C216EBC6FB9FD105F18E695F4C
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access: rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access: rsync://rpki.co/repo/AS945/10/32332e3133392e34312e302f32342d3234203d3e20333935333332.roa
Signing time: Mon 10 Apr 2023 03:31:28 +0000
ROA not before: Mon 10 Apr 2023 03:26:28 +0000
ROA not after: Mon 08 Apr 2024 03:31:28 +0000
asID: 395332
IP address blocks: 23.139.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:72:46:be:84:4f:38:c2:16:eb:c6:fb:9f:d1:05:f1:8e:69:5f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Validity
Not Before: Apr 10 03:26:28 2023 GMT
Not After : Apr 8 03:31:28 2024 GMT
Subject: CN=4FF34A9F4135098B7234B638FBC6B6229D25C93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:68:57:84:bf:9f:45:7b:43:df:c9:46:95:
47:9e:3b:90:1f:48:85:c5:bc:74:be:42:a5:eb:df:
87:87:16:9a:2b:23:ee:6f:da:ad:b8:0b:70:84:6b:
9d:89:0d:f3:67:5c:9e:76:e5:cc:d2:e2:0b:3b:be:
16:0d:ed:4e:4f:bf:76:9e:f8:ca:28:e7:09:b0:e0:
48:62:f8:96:28:eb:90:35:0b:1f:44:8d:da:ab:33:
78:30:cd:4b:8a:f4:9e:ac:b3:85:a2:6c:e1:48:3e:
5c:5a:0a:81:e4:e5:0b:fc:05:e3:cc:cf:6a:79:3e:
ce:df:7e:2b:b7:38:7e:4a:34:f1:8e:5c:67:3e:35:
1c:a3:8b:30:fe:3c:b8:f6:76:c6:fd:f0:59:fd:7e:
cd:95:b9:a9:5d:63:81:b6:2e:25:7f:8c:55:40:48:
81:3d:1f:9a:39:64:93:4b:73:bf:8a:0f:f0:a3:9b:
11:3a:68:d1:56:f0:84:25:66:bb:48:87:58:b7:67:
c4:22:65:df:14:82:3f:5e:64:c6:7b:74:f7:35:e1:
e7:a1:e8:ee:47:7a:ec:9c:d3:c3:e3:73:37:d7:dc:
b8:9d:d8:bc:d1:a3:d9:b3:3b:8e:49:e8:d6:31:7b:
53:b8:f9:a2:2a:c8:41:da:d5:f2:d3:1d:a9:ed:33:
40:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F3:4A:9F:41:35:09:8B:72:34:B6:38:FB:C6:B6:22:9D:25:C9:3A
X509v3 Authority Key Identifier:
keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/10/32332e3133392e34312e302f32342d3234203d3e20333935333332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.139.41.0/24
Signature Algorithm: sha256WithRSAEncryption
05:4a:3c:a5:50:59:a4:0c:d0:81:e5:71:ca:c1:e1:05:68:aa:
db:18:25:5f:b6:cc:1a:b8:7d:04:5d:02:70:8e:61:25:86:1e:
b4:a4:72:b7:36:82:d0:fc:4e:5d:11:47:95:87:ee:ee:e6:10:
2a:ba:d3:ef:d9:d7:d9:d1:57:75:a5:03:da:28:76:4e:c4:eb:
2b:ef:a5:53:d1:35:e1:ae:1c:d5:13:f3:19:0c:e1:2d:21:b5:
d2:72:43:fc:7d:71:e1:af:11:45:ad:5b:cd:25:e6:29:ab:10:
bf:fd:46:b7:89:bf:71:55:d3:02:33:ed:51:92:21:60:50:0f:
d8:40:95:39:25:ba:16:60:c9:40:36:f8:30:ed:75:91:b9:6b:
f0:44:1f:76:c9:c2:cf:85:56:5a:21:41:e7:aa:7c:96:19:9d:
25:79:89:94:bb:fb:93:f9:5d:9e:18:22:3e:23:b1:8f:d5:3e:
74:00:10:7b:be:0c:4d:eb:0a:bf:e2:08:5c:e3:80:62:0e:df:
fe:3a:8f:c7:94:02:87:3e:bc:68:de:27:bf:52:4d:89:0f:8e:
b3:d1:a9:73:6c:2c:1e:42:2f:4e:87:3a:e0:68:8e:95:d7:e4:
10:a8:b7:75:3b:9a:81:2a:0f:27:db:b0:cf:4a:5c:37:25:8a:
12:37:e6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 06:11:59 2023 by rpki-client on console-fra.rpki-client.org