Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206981.roa
File: AS206981.roa (raw, json)
Hash identifier: tMXxTkAe/kprLRz96oLiP/2PYoympw5tDdd9ARt2OSE=
Subject key identifier: 66:C8:49:12:66:3B:88:68:08:D2:A9:66:BC:68:52:10:06:10:4D:20
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 3CA3A46A75C6BA900A2C973941BA41D80627E8B4
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206981.roa
Signing time: Sun 05 Nov 2023 04:07:12 +0000
ROA not before: Sun 05 Nov 2023 04:02:12 +0000
ROA not after: Sun 03 Nov 2024 04:07:12 +0000
asID: 206981
IP address blocks: 2a0a:6040:4200::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 25 Mar 2024 01:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:a3:a4:6a:75:c6:ba:90:0a:2c:97:39:41:ba:41:d8:06:27:e8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Nov 5 04:02:12 2023 GMT
Not After : Nov 3 04:07:12 2024 GMT
Subject: CN=66C84912663B886808D2A966BC68521006104D20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:7f:63:15:e7:28:a5:9a:83:d2:5d:27:05:
c7:f7:98:5f:87:95:7d:c6:1f:9c:85:85:24:bd:7b:
e2:cf:11:0d:f1:bb:96:5e:44:36:3a:45:9e:30:6f:
48:04:5b:4c:6d:2c:14:ab:c0:38:f6:7e:63:d2:3d:
0a:80:a7:94:b4:03:77:8e:cc:3d:8b:e2:41:02:e6:
44:c9:b5:c1:7c:b9:56:f1:ff:90:98:bb:e7:d5:4c:
7a:e1:87:bb:ee:4e:2e:98:90:8a:b1:11:cf:9e:02:
df:54:dd:3e:ed:31:66:62:25:99:59:1c:9b:aa:36:
fe:95:8d:5d:50:51:3b:3d:e5:d2:a0:1c:d5:5e:f3:
1c:ef:e4:d5:9f:5e:32:16:8b:11:41:dc:84:e9:ce:
2a:e3:95:44:c5:0c:5c:15:56:56:a2:0e:d7:f8:13:
e3:e4:83:64:ad:e7:55:50:8f:c9:3f:c7:bf:6f:d3:
5e:4b:76:ca:18:42:84:a2:d4:67:67:e0:70:9c:07:
3a:65:82:d5:c5:c3:c8:49:26:f9:09:01:58:70:e5:
e8:4b:00:bf:6e:87:b8:6b:3c:19:e8:8d:03:79:17:
84:17:47:45:c0:46:ed:ce:3c:29:2a:12:75:e6:16:
1f:2d:4d:4d:cb:fa:63:b3:c1:39:b9:b8:98:7a:67:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C8:49:12:66:3B:88:68:08:D2:A9:66:BC:68:52:10:06:10:4D:20
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:4200::/40
Signature Algorithm: sha256WithRSAEncryption
20:52:5e:21:8f:cd:cd:c3:5b:39:52:45:ef:c1:21:59:89:a0:
dc:a4:81:5d:1e:f7:78:64:13:00:d8:48:85:03:ac:7c:45:cf:
d8:3d:a2:29:69:16:3b:8d:35:36:2c:06:e2:2c:b5:6b:8c:7c:
fb:73:b2:4a:c5:ee:3a:c3:6a:a4:75:e8:8d:b0:f2:ce:bf:55:
e5:50:de:0d:a4:8a:13:f2:2d:8a:50:d5:84:80:0c:c1:8b:09:
8f:55:ed:85:4c:96:7d:4e:db:07:51:0a:f2:25:2a:c4:49:6b:
f6:f4:6b:3c:e6:6d:2e:f7:17:e3:a4:10:95:e3:dc:aa:ac:4e:
03:e7:65:a9:1c:e7:df:f2:15:cf:52:c0:e9:5c:e8:d9:aa:c9:
e8:79:2f:91:89:1e:c3:56:3d:a4:20:71:f3:e6:5e:ff:5d:50:
61:71:c9:04:a8:e3:c6:f4:0b:d4:7f:63:77:3c:cb:36:c9:ec:
27:1d:89:fa:82:5b:f0:b8:3b:d1:61:5c:e5:7f:ac:12:49:17:
74:f0:d4:1c:01:6e:ec:a2:05:fe:d5:1b:79:8a:31:06:bb:86:
33:5d:f7:45:58:c9:3a:54:08:9e:f4:3a:16:f1:33:90:da:27:
6b:06:40:3b:c1:2a:7a:7b:92:58:77:46:8e:1a:76:84:55:e0:
ea:ce:3e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 04:10:47 2024 by rpki-client on console-fra.rpki-client.org