Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e2038313030.roa
File: 3231362e3134362e32342e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier: yVWxValJEpVHMlHxrP5N7j9j+oSXykE/uEs21h12r6U=
Subject key identifier: 4A:42:42:E0:43:D2:B4:05:FE:87:DE:AB:F9:AC:A3:19:4D:2B:AE:EB
Certificate issuer: /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial: 089D59BB2F570E288CC1B908F6DDDEA66B46CEFA
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e2038313030.roa
Signing time: Thu 08 Jun 2023 22:12:49 +0000
ROA not before: Thu 08 Jun 2023 22:07:49 +0000
ROA not after: Thu 06 Jun 2024 22:12:49 +0000
asID: 8100
IP address blocks: 216.146.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:9d:59:bb:2f:57:0e:28:8c:c1:b9:08:f6:dd:de:a6:6b:46:ce:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Validity
Not Before: Jun 8 22:07:49 2023 GMT
Not After : Jun 6 22:12:49 2024 GMT
Subject: CN=4A4242E043D2B405FE87DEABF9ACA3194D2BAEEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:09:1d:c8:52:37:5c:da:11:61:dc:32:bc:
8e:d6:37:85:43:91:82:22:5f:68:98:04:22:0a:b1:
e4:93:ed:56:4e:44:a6:58:41:18:82:02:12:7f:dc:
a0:5c:13:23:da:fc:a6:e1:91:13:b8:7b:9b:64:35:
b0:42:d6:61:46:4a:be:55:9f:24:de:5d:bd:83:7c:
d8:dd:83:79:c7:1b:54:b5:50:07:45:b8:23:35:93:
23:6d:8c:19:c5:ed:36:5c:95:88:38:be:1c:86:5b:
2e:f7:1b:a5:62:64:9e:20:ac:e6:aa:ed:c0:f3:f9:
97:55:d4:75:db:4c:96:08:25:2c:8b:3c:08:84:d3:
30:45:91:79:8b:b6:79:61:b2:17:23:ee:88:12:06:
98:d1:da:15:e8:4a:68:d1:23:f1:c4:67:b5:d4:d3:
55:20:58:0c:56:25:f3:01:0f:85:e9:80:a1:0e:89:
9d:0a:2e:d1:80:1f:10:fa:92:56:29:8a:4a:7c:62:
54:9d:47:75:d3:14:0f:c9:12:52:61:06:89:45:c9:
9c:b0:1d:94:cb:b9:64:98:3d:cc:ed:d4:f9:87:44:
e0:f3:96:70:0b:2e:7e:05:de:6e:6d:55:5b:a3:c6:
47:e3:6d:bc:6b:04:2d:c5:a3:32:27:17:48:93:96:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:42:E0:43:D2:B4:05:FE:87:DE:AB:F9:AC:A3:19:4D:2B:AE:EB
X509v3 Authority Key Identifier:
keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3231362e3134362e32342e302f32342d3234203d3e2038313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:90:cc:37:44:bb:c5:10:55:28:43:66:56:85:bc:54:be:e4:
5c:d9:64:d4:ab:f2:82:e9:53:f3:6d:dc:ba:52:cd:e2:bc:9f:
eb:f0:a6:21:06:fd:32:0a:c8:3b:86:cb:30:f7:04:a6:3f:66:
cd:76:d8:47:c0:c9:7d:6a:70:04:a7:4c:90:46:30:1b:22:d7:
a3:3d:0c:39:5b:eb:21:e0:06:33:a2:16:4e:91:c3:aa:ee:a7:
bc:e4:af:41:a3:49:21:26:f0:25:7f:6f:28:0f:95:21:80:91:
0f:ee:c2:ac:3a:eb:e3:38:ba:54:46:e1:ce:9c:5e:3e:db:ce:
e5:91:82:83:a5:73:2e:bb:20:d9:cc:5e:f1:bb:1e:2c:a9:9f:
bc:fa:fb:9a:ea:e3:3f:fc:c1:4d:50:c3:f6:31:27:9d:92:bb:
1e:04:b5:9d:bd:2d:ef:bd:44:04:c9:bf:e0:a7:21:e6:9f:11:
dc:76:39:68:d8:06:a1:c0:33:bf:46:f2:46:ed:59:e9:ce:27:
10:44:45:03:6e:5f:f7:3e:f5:c7:ce:92:03:de:12:4a:43:7b:
ff:79:08:70:9c:d8:07:4e:fd:23:88:b5:83:a7:d8:aa:31:c7:
0c:ef:21:33:69:12:6d:e2:a1:b0:94:77:15:3b:0a:68:c7:c9:
f1:13:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 13:38:15 2023 by rpki-client on console-ams.rpki-client.org