Route Origin Authorization
$ rpki-client -vvf dev.tw/rpki/AS945/2/32332e3134392e3233322e302f32342d3234203d3e20313937353337.roa
File: 32332e3134392e3233322e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier: Izi9S6BMgRvZACqQTWUDPmBKNInYvbaQaeVON4pVnuY=
Subject key identifier: 62:C4:7C:40:F1:19:25:BF:B2:C8:A9:34:E4:E6:2E:08:82:34:8F:9B
Certificate issuer: /CN=1A8C29884038907EDD0174FADC751F16456E1C56
Certificate serial: 6EF0F8BCA2AB39DFDFD6182AB9BF08D09BBF6AD5
Authority key identifier: 1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56
Authority info access: rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer
Subject info access: rsync://dev.tw/rpki/AS945/2/32332e3134392e3233322e302f32342d3234203d3e20313937353337.roa
Signing time: Fri 11 Oct 2024 10:04:10 +0000
ROA not before: Fri 11 Oct 2024 09:59:10 +0000
ROA not after: Fri 10 Oct 2025 10:04:10 +0000
asID: 197537
IP address blocks: 23.149.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 14:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f0:f8:bc:a2:ab:39:df:df:d6:18:2a:b9:bf:08:d0:9b:bf:6a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A8C29884038907EDD0174FADC751F16456E1C56
Validity
Not Before: Oct 11 09:59:10 2024 GMT
Not After : Oct 10 10:04:10 2025 GMT
Subject: CN=62C47C40F11925BFB2C8A934E4E62E0882348F9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:db:94:5e:ec:9c:53:70:a3:3f:27:7a:7b:
c5:60:0f:56:c4:72:c4:45:e7:5d:dc:b8:60:80:fb:
ad:c5:8d:82:b0:3f:97:1a:11:ab:e1:16:63:db:93:
11:f6:03:fc:61:9f:ad:a5:ba:4e:2a:36:75:69:0e:
fb:3a:6f:54:27:96:97:84:ef:6b:5e:e3:34:da:bf:
68:23:76:22:9d:35:f3:d9:ac:e4:64:9c:b5:92:e1:
c2:23:55:a1:f8:19:73:14:54:67:54:e3:ed:72:86:
97:44:8e:49:13:5e:69:99:e5:61:90:c4:4e:1a:6b:
d9:71:cf:ac:98:42:36:04:b8:99:70:c9:47:7a:66:
c0:cd:b9:21:a5:59:99:48:03:44:4a:0b:ff:96:d4:
8b:4c:bc:1c:ad:18:8d:a6:d0:fb:34:d8:5d:f9:2b:
4f:63:0e:71:64:d9:53:34:38:d4:3b:4e:a4:f6:3e:
a0:01:26:d5:94:02:bd:e3:a0:63:03:dd:b2:ac:16:
d3:56:02:6d:21:46:31:9d:81:0f:4b:e9:22:1b:02:
90:9d:f9:39:4c:0b:e6:9e:0c:c8:e2:e6:87:1f:1a:
c5:21:ec:ec:1a:6b:26:d4:7a:cc:67:f4:36:bd:90:
93:50:6b:ec:c0:03:06:3b:6c:14:5b:f5:eb:80:dd:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C4:7C:40:F1:19:25:BF:B2:C8:A9:34:E4:E6:2E:08:82:34:8F:9B
X509v3 Authority Key Identifier:
keyid:1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer
Subject Information Access:
Signed Object - URI:rsync://dev.tw/rpki/AS945/2/32332e3134392e3233322e302f32342d3234203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.149.232.0/24
Signature Algorithm: sha256WithRSAEncryption
16:8b:7f:ed:63:42:71:84:a3:37:70:a6:f4:0e:8b:54:e6:cb:
62:62:b4:b3:63:c6:73:2e:b3:73:85:2b:53:b9:63:75:fc:a3:
88:15:e3:05:03:10:ab:1a:c9:b2:30:8d:f5:5f:1d:fb:7a:9c:
36:c0:7b:4f:8f:72:3a:0d:bd:ea:a2:f3:fd:90:ed:04:ce:94:
4b:1e:f9:54:84:ed:6a:bd:a5:cf:14:f0:e5:e2:47:52:98:25:
ee:db:b8:e0:6c:01:d2:12:e9:13:0a:07:0d:f7:7f:1a:f6:02:
d7:71:3b:5b:58:23:d6:6b:3a:09:37:7c:94:50:8a:0c:1a:3e:
fc:7d:2f:74:96:eb:4a:d8:da:45:a0:97:1a:e2:18:6b:49:8c:
33:89:bd:55:ef:7e:bf:21:05:75:c9:0f:99:2a:a8:72:ec:13:
b7:ed:fb:b6:38:06:d1:1e:6a:27:ac:9d:fd:77:a3:d1:a4:ff:
6f:20:7f:8c:fa:7c:7a:c0:62:57:44:6b:cf:81:c1:9d:5e:a1:
f7:2b:3b:be:6c:a7:97:1f:24:ab:46:52:93:e1:36:c6:68:03:
3e:48:b2:66:f6:ea:fa:d5:a9:1f:d7:0a:44:eb:c1:5a:e8:5f:
65:6c:93:59:74:95:cb:e3:de:81:22:27:66:71:84:84:f3:1a:
4f:20:38:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 18:07:18 2024 by rpki-client on console-ams.rpki-client.org