Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS1239.roa
File: AS1239.roa (raw, json)
Hash identifier: ltxMkQnKasOlXhjgZfrA6QfEFJaYTjxuec8Z4aorPmM=
Subject key identifier: 90:3A:2A:FB:67:AC:BE:BB:6D:07:D4:E0:B1:EE:4A:B1:4A:56:1A:3E
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 1300C04ABF7DB0BB19E02E66D8E187649A66D3EC
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS1239.roa
Signing time: Sun 10 Sep 2023 12:07:18 +0000
ROA not before: Sun 10 Sep 2023 12:02:18 +0000
ROA not after: Sun 08 Sep 2024 12:07:18 +0000
asID: 1239
IP address blocks: 2a06:9f87::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 25 Mar 2024 02:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:00:c0:4a:bf:7d:b0:bb:19:e0:2e:66:d8:e1:87:64:9a:66:d3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Sep 10 12:02:18 2023 GMT
Not After : Sep 8 12:07:18 2024 GMT
Subject: CN=903A2AFB67ACBEBB6D07D4E0B1EE4AB14A561A3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:63:79:33:2f:a2:71:63:c3:f0:eb:cb:43:
60:6b:a5:b4:f8:fc:c0:1e:ea:67:1d:7f:86:c2:a0:
d5:b5:12:43:7f:56:37:ef:f4:51:62:a3:8e:ae:b4:
ce:db:ba:4b:76:b0:3f:f9:14:3e:ae:a7:db:ea:ff:
11:07:57:d2:a1:6d:b5:98:91:f6:89:ea:15:d9:a2:
d8:d9:a3:8b:a8:2f:c2:3c:3d:81:f3:13:22:19:e9:
90:2f:00:ee:70:cc:96:aa:6e:15:83:a1:98:57:e8:
c5:d9:c4:e4:a2:b0:e6:c2:ad:b6:d7:83:4f:a1:93:
19:84:23:88:cf:dc:b9:bd:eb:f3:16:95:e2:50:39:
2a:1c:2d:d2:94:9e:26:cf:e0:30:a4:e3:df:45:fc:
f4:d3:8b:db:a7:ab:4e:ad:d4:86:83:50:d0:f7:5d:
38:4e:c6:ac:54:bb:53:a9:34:bf:2a:a9:74:f3:1b:
04:3c:a6:6c:0d:67:3a:de:e3:42:9d:8a:57:ad:8f:
72:32:b4:b3:a3:7d:52:05:e7:46:9b:cb:ff:02:c2:
aa:cb:06:e8:52:7b:27:be:3e:7d:a6:22:de:19:77:
46:52:db:07:df:d1:64:08:f9:55:72:c0:e2:f2:ad:
28:cb:a9:c3:15:1f:e4:e0:f4:0a:2a:ec:17:83:d4:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3A:2A:FB:67:AC:BE:BB:6D:07:D4:E0:B1:EE:4A:B1:4A:56:1A:3E
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS1239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f87::/32
Signature Algorithm: sha256WithRSAEncryption
5c:a2:26:a1:ea:25:91:64:30:d5:93:e3:46:2d:51:09:bb:0b:
8a:13:34:e6:d6:94:b1:15:9f:4c:1a:88:10:17:3c:b0:b2:08:
b9:d0:ac:85:e2:1c:dc:45:05:7e:57:e9:ff:3f:a1:71:9c:93:
08:be:c9:e6:c9:d8:26:fc:18:3e:dc:4b:02:ce:01:28:4c:81:
dd:80:d8:16:f0:72:77:61:b6:62:ca:b4:2d:da:d6:dc:36:c1:
cf:0c:8d:81:e6:dc:bc:52:40:d3:7d:7f:fa:bb:59:28:35:e8:
6f:17:98:75:43:49:ea:5f:aa:d0:2f:8b:ed:a0:91:ac:2f:f6:
6b:9e:28:83:86:23:1f:36:37:d6:04:24:0d:bf:d9:c0:77:eb:
fd:ff:d8:42:62:11:21:68:f7:c8:d0:41:3d:68:75:84:fe:4d:
e8:6c:7d:49:75:60:bf:64:0f:4a:7f:24:80:ae:d2:b9:6d:5d:
f0:94:d4:10:eb:81:aa:c4:6c:5e:d2:41:3e:1e:18:11:c0:ae:
6e:32:b2:5f:aa:e6:e8:dd:18:5a:bb:cd:59:ca:52:76:d8:54:
cb:1b:32:44:79:9a:86:ba:ba:47:27:81:88:74:49:8b:ba:79:
20:d2:21:0d:ae:91:28:c7:aa:ad:e2:db:ef:bb:47:f0:66:3b:
a9:9d:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org