Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138633a3a2f34382d3438203d3e20393435.roa
File: 323030313a3637633a6138633a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier: OZgzeOyxhowU/rJ8JO+T/8jjLWpOpmgEkORYpWDFE+8=
Subject key identifier: 85:DD:E4:E3:7C:66:6D:DA:02:32:BC:74:32:38:09:36:F5:84:28:21
Certificate issuer: /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial: 020A6554A0CC108884A70FEA320030547C098F2C
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access: rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138633a3a2f34382d3438203d3e20393435.roa
Signing time: Thu 20 Jun 2024 05:23:34 +0000
ROA not before: Thu 20 Jun 2024 05:18:34 +0000
ROA not after: Thu 19 Jun 2025 05:23:34 +0000
asID: 945
IP address blocks: 2001:67c:a8c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Jun 2024 18:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0a:65:54:a0:cc:10:88:84:a7:0f:ea:32:00:30:54:7c:09:8f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Validity
Not Before: Jun 20 05:18:34 2024 GMT
Not After : Jun 19 05:23:34 2025 GMT
Subject: CN=85DDE4E37C666DDA0232BC7432380936F5842821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:7c:ba:4f:d2:3d:1d:fb:94:62:83:f7:58:
af:90:7a:6b:d2:2f:33:ff:5f:16:3a:9c:7f:34:2c:
2d:d7:2f:b6:99:50:ec:5a:9b:82:2d:42:4a:6e:60:
f4:74:56:e1:1e:0c:0e:ba:dc:f5:85:62:07:50:27:
23:65:42:3b:4f:4e:b0:de:dc:52:3c:ef:34:03:ea:
81:f5:62:cb:aa:51:50:5e:f3:67:9a:8d:5a:83:53:
e8:37:18:12:d4:df:ce:7c:d0:5f:35:5d:b8:e6:61:
99:38:8f:99:44:53:3b:e6:0f:49:48:e1:ca:f9:00:
3f:cd:0b:cc:b1:02:bd:0e:4b:0b:5c:9a:14:15:02:
39:eb:c9:ba:4a:22:e8:d1:a1:51:c5:ce:e8:14:b9:
80:52:88:90:b9:1e:75:0d:3b:53:b6:64:7b:4a:4d:
5c:50:01:75:92:29:55:a7:79:d2:52:7f:ad:0e:11:
06:92:c8:ef:93:9f:0a:6a:3e:05:78:9e:0b:06:a3:
6a:40:f6:f8:54:e6:7d:ae:6d:91:91:aa:45:28:fb:
d9:1f:02:d8:de:1e:bf:9b:44:5d:e9:38:7c:09:bc:
01:96:b4:ac:cf:58:63:7b:53:ae:c5:61:3d:4a:8b:
d1:9a:80:f8:e7:b5:1a:10:1e:08:4f:db:7c:0a:c9:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DD:E4:E3:7C:66:6D:DA:02:32:BC:74:32:38:09:36:F5:84:28:21
X509v3 Authority Key Identifier:
keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138633a3a2f34382d3438203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a8c::/48
Signature Algorithm: sha256WithRSAEncryption
47:8d:be:f8:53:2b:c9:0d:44:e8:9e:bb:ef:0f:79:8e:b3:4b:
4c:08:10:3e:01:b6:12:a6:92:be:be:ca:0e:be:c4:d7:5d:fe:
25:72:76:e2:47:ee:d7:8f:d0:db:14:4c:6c:4f:22:13:03:32:
32:ed:e1:38:ee:7c:e2:e0:0e:d2:a3:c0:ce:6d:62:60:ae:b1:
ec:59:22:a1:6f:6f:75:e4:64:1c:24:b5:22:be:30:6e:22:46:
0c:3c:5d:d2:8e:f2:6b:66:29:4f:d3:45:66:18:09:97:8a:f2:
e6:ae:61:b0:04:d7:3f:98:55:ba:82:bf:15:d0:2a:65:d3:36:
6e:2e:45:dd:ef:81:52:9a:df:98:29:d1:30:69:c6:79:1d:17:
10:4c:4e:c1:3e:ef:7d:9e:38:5b:18:67:d2:5e:86:8b:21:95:
6c:f7:24:a4:20:d8:9e:12:d6:76:85:47:b9:91:1c:5e:4d:1b:
d4:96:3a:d3:38:94:9c:8f:32:f0:3b:c8:b5:e4:e2:03:83:1c:
28:9d:09:79:ed:ec:0b:b6:e4:3d:48:46:08:9f:0b:48:9e:1b:
ca:ed:c6:2a:06:76:61:d9:3b:f4:ac:0f:91:53:61:94:5f:26:
ca:84:de:b9:c9:d3:4a:d7:0f:56:50:00:65:4f:1d:9e:49:22:
47:7a:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 20:41:17 2024 by rpki-client on console-fra.rpki-client.org