Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/12/3130342e33372e34332e302f32342d3234203d3e20393435.roa
File: 3130342e33372e34332e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier: Sy4zoqgw089kTmwjUhrb29zfTTzbn7sGtuEa8qlWPO4=
Subject key identifier: 9E:9E:9B:B5:67:6A:A7:D2:66:18:01:E8:D7:E2:3D:9C:FE:EC:D8:A1
Certificate issuer: /CN=338A77CF88DD64F23FBC649EBD286448F9071586
Certificate serial: 5106C2E44BA001987EB0CB1D714CB5B7A1B091D9
Authority key identifier: 33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86
Authority info access: rsync://rpki.co/repo/August/12/338A77CF88DD64F23FBC649EBD286448F9071586.cer
Subject info access: rsync://rpki.co/repo/AS945/12/3130342e33372e34332e302f32342d3234203d3e20393435.roa
Signing time: Mon 10 Apr 2023 06:55:08 +0000
ROA not before: Mon 10 Apr 2023 06:50:08 +0000
ROA not after: Mon 08 Apr 2024 06:55:08 +0000
asID: 945
IP address blocks: 104.37.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:06:c2:e4:4b:a0:01:98:7e:b0:cb:1d:71:4c:b5:b7:a1:b0:91:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338A77CF88DD64F23FBC649EBD286448F9071586
Validity
Not Before: Apr 10 06:50:08 2023 GMT
Not After : Apr 8 06:55:08 2024 GMT
Subject: CN=9E9E9BB5676AA7D2661801E8D7E23D9CFEECD8A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:4f:24:5b:f4:ab:e5:2e:8f:84:b8:98:1a:
ba:7e:97:60:6d:8c:17:f2:3b:dd:57:63:bf:08:1e:
4e:88:32:ab:1f:c3:3d:50:30:5c:fb:6a:03:0c:0f:
1d:2d:bd:03:97:e9:df:99:5b:f5:24:ee:ee:22:60:
a7:48:2f:66:59:c6:40:f1:39:13:4d:f6:d8:f8:51:
97:b4:ad:95:4e:82:c6:75:c5:5a:42:a2:17:7f:9d:
e5:47:c4:d5:80:6d:cd:3d:8c:47:6d:35:bd:70:1a:
82:33:ea:db:86:d1:71:a6:b5:ee:21:9c:64:30:2b:
a1:91:86:98:5d:45:20:cd:4b:13:ca:93:6e:2d:3e:
21:29:0a:26:9c:98:29:3c:18:0a:12:3e:bc:1f:c2:
30:df:eb:75:76:a6:1f:36:f8:c8:29:17:44:26:13:
c1:13:da:57:7b:17:30:c7:62:b3:c1:b6:f9:42:50:
74:44:f3:b3:5a:69:eb:15:e9:8b:02:03:8c:44:96:
24:bc:a4:e9:a4:12:d6:38:a7:00:9c:21:72:e7:90:
74:4e:b5:6b:f2:0f:45:4a:6b:8b:01:08:ee:05:be:
e5:56:a6:e7:7c:49:65:f5:4e:2a:64:95:52:a1:8d:
b8:6a:cd:11:28:7e:04:33:f8:2e:d3:06:7a:95:bf:
a4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9E:9B:B5:67:6A:A7:D2:66:18:01:E8:D7:E2:3D:9C:FE:EC:D8:A1
X509v3 Authority Key Identifier:
keyid:33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/12/338A77CF88DD64F23FBC649EBD286448F9071586.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/12/338A77CF88DD64F23FBC649EBD286448F9071586.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/12/3130342e33372e34332e302f32342d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.37.43.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a4:ce:d7:b3:1d:4e:e6:48:60:31:8b:72:6c:c6:d6:cb:f1:
a3:a5:c5:57:7d:18:22:64:0d:43:0b:ec:27:8e:cd:bf:7e:43:
0a:07:9b:a3:eb:2b:1a:c5:48:e9:68:29:63:6f:27:ba:06:c3:
1d:2f:d0:d7:82:7a:74:3f:c6:69:f8:c1:d5:39:77:60:bc:e2:
74:27:2e:6d:9d:27:22:e1:1b:8b:e6:ee:08:b4:b4:17:33:58:
06:a7:cc:1d:a4:6b:91:42:80:f9:09:e9:d8:1a:3c:09:13:51:
73:3f:b8:87:c5:87:10:8e:c1:15:59:4b:51:2b:af:8a:70:5b:
c0:e4:28:60:f4:58:62:33:3f:32:bb:90:50:da:e3:64:cb:a8:
e1:6e:68:13:56:cc:4d:ac:a8:bf:a9:17:4b:ee:a7:1a:45:e7:
0e:38:57:0d:dc:e1:59:a7:98:7b:87:6f:70:31:32:19:7e:c4:
4a:8b:6c:e3:0b:4f:20:5a:6a:f1:c3:a8:f3:b4:af:47:0a:8b:
35:3b:4f:82:bf:28:a1:ae:c0:73:60:0e:11:a0:cf:77:56:2b:
1b:1f:08:6f:07:39:3f:91:5e:62:d4:0a:fd:99:34:cf:50:08:
1b:c1:18:9f:71:47:3f:9a:66:11:ad:a6:ef:b4:88:ce:ac:83:
47:b0:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:23 2023 by rpki-client on console-ams.rpki-client.org