Route Origin Authorization
$ rpki-client -vvf dev.tw/rpki/August/5/3139342e3131362e3232372e302f32342d3234203d3e20393435.roa
File: 3139342e3131362e3232372e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier: 3uPwLvAOdOaspHGdhn3Tyirl0gU2CG7fKQg7GK+2vTY=
Subject key identifier: 01:19:47:63:1D:8A:29:4C:5D:A0:28:FE:FA:98:84:7A:DE:C4:05:B1
Certificate issuer: /CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
Certificate serial: 2CF12039D6FF594252964D70EDE786AE66030780
Authority key identifier: 9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
Subject info access: rsync://dev.tw/rpki/August/5/3139342e3131362e3232372e302f32342d3234203d3e20393435.roa
Signing time: Tue 17 Sep 2024 17:13:49 +0000
ROA not before: Tue 17 Sep 2024 17:08:49 +0000
ROA not after: Tue 16 Sep 2025 17:13:49 +0000
asID: 945
IP address blocks: 194.116.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 10:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f1:20:39:d6:ff:59:42:52:96:4d:70:ed:e7:86:ae:66:03:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
Validity
Not Before: Sep 17 17:08:49 2024 GMT
Not After : Sep 16 17:13:49 2025 GMT
Subject: CN=011947631D8A294C5DA028FEFA98847ADEC405B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:0a:78:c1:13:6e:21:61:ff:41:af:69:cb:
bb:73:fc:bc:c3:8d:43:c8:a5:2b:f7:87:d3:f1:56:
93:2a:99:ea:64:da:d0:7a:83:51:0c:7d:70:cb:4b:
d9:ed:d7:e5:27:cf:62:a9:0d:de:48:ae:7e:88:0d:
cb:84:6c:b2:ff:13:21:26:e5:06:cc:9f:38:52:b2:
4f:94:c1:5e:a5:ed:32:3a:30:6d:10:a2:4e:8e:51:
54:f5:fe:b4:af:1d:f5:03:99:44:77:ba:c6:84:07:
83:6d:4e:8b:90:d3:3d:06:ac:ed:ae:f4:03:18:0b:
5a:4a:a0:3a:7e:4e:5f:dc:f6:fb:46:89:92:87:9e:
98:08:ae:bd:48:85:f1:4f:85:79:b0:7c:4e:cd:98:
88:9d:c0:ce:13:4d:90:54:a4:c6:4c:b2:8f:0f:3f:
5f:35:60:33:a2:88:b8:fb:d1:31:6d:4a:c1:fa:48:
8c:d4:d2:7d:84:c4:8a:47:7a:99:96:8a:2a:6e:ec:
e0:19:ee:04:e5:55:9a:9d:b4:b1:02:2a:c9:ce:20:
1a:7e:ac:7c:b4:ce:cf:1f:c0:8a:be:c2:c0:9e:9e:
9b:47:4c:62:04:d2:5d:b7:13:5e:fe:e1:23:50:44:
27:81:91:8d:31:ca:96:96:04:3c:97:37:0f:7d:e1:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:19:47:63:1D:8A:29:4C:5D:A0:28:FE:FA:98:84:7A:DE:C4:05:B1
X509v3 Authority Key Identifier:
keyid:9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
Subject Information Access:
Signed Object - URI:rsync://dev.tw/rpki/August/5/3139342e3131362e3232372e302f32342d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.227.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:69:9e:14:88:25:59:aa:b3:e4:9e:64:88:75:59:8a:e6:5a:
ef:40:c2:52:46:e1:da:15:75:cf:3e:f4:fe:15:13:95:75:9b:
d2:fc:34:81:79:1f:16:d1:c6:a9:14:b1:ad:fd:ba:ab:ed:3b:
a0:39:46:19:ca:f9:61:bc:af:78:71:c9:05:3a:73:02:80:af:
07:74:66:f8:70:7c:9a:f7:f7:19:90:51:03:f0:e9:db:05:ab:
57:3d:fb:11:fd:2b:ca:7e:91:b1:d6:28:b6:15:ca:bf:76:48:
ef:57:04:2a:d8:61:a5:24:3d:e7:c6:96:2c:8a:9c:7b:57:81:
d5:ca:d0:5a:ad:a7:7b:48:b4:7f:38:6f:7c:d3:42:78:56:94:
df:77:e7:e5:d4:a9:d6:0b:f0:5b:db:b6:cc:53:13:46:b2:21:
87:e6:0e:bd:c7:33:c7:7f:81:f4:2d:f6:50:a9:2c:1a:91:03:
e4:a3:db:2c:51:d3:1f:f8:04:82:dd:95:0f:f8:1d:07:8e:c2:
cb:3c:c0:88:43:98:c8:49:6a:01:cd:0d:11:b6:f1:94:e4:f1:
3f:b9:2f:62:bd:bd:87:05:39:4b:77:4e:01:8d:7b:1f:01:c8:
d8:78:d7:63:6e:93:63:52:f7:d1:c8:f7:11:49:95:b8:d5:2d:
7e:4f:58:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 14:40:51 2024 by rpki-client on console-ams.rpki-client.org