Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e31312e302f32342d3234203d3e20343031313131.roa
File: 32332e3135302e31312e302f32342d3234203d3e20343031313131.roa (raw, json)
Hash identifier: J3cANwneO/jxG6N8k7OELsyNErEVWu3lWfo9XN40H4U=
Subject key identifier: 2C:7D:3F:1B:3F:F7:CA:11:3E:59:06:65:50:14:9B:1A:6F:36:C4:01
Certificate issuer: /CN=D18C30FD7C3E8114B736EBDD27FE93C06763BDC6
Certificate serial: 135F41C3B0FC4C03505514D4881560112402A30A
Authority key identifier: D1:8C:30:FD:7C:3E:81:14:B7:36:EB:DD:27:FE:93:C0:67:63:BD:C6
Authority info access: rsync://dev.tw/rpki/August/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e31312e302f32342d3234203d3e20343031313131.roa
Signing time: Thu 20 Jun 2024 05:23:06 +0000
ROA not before: Thu 20 Jun 2024 05:18:06 +0000
ROA not after: Thu 19 Jun 2025 05:23:06 +0000
asID: 401111
IP address blocks: 23.150.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 12:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5f:41:c3:b0:fc:4c:03:50:55:14:d4:88:15:60:11:24:02:a3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D18C30FD7C3E8114B736EBDD27FE93C06763BDC6
Validity
Not Before: Jun 20 05:18:06 2024 GMT
Not After : Jun 19 05:23:06 2025 GMT
Subject: CN=2C7D3F1B3FF7CA113E59066550149B1A6F36C401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:e0:16:90:a5:f8:9e:09:b3:0c:60:0c:af:
59:5d:21:0d:41:48:77:61:44:bb:cd:70:76:2d:14:
f9:68:26:78:44:65:a5:11:8c:67:df:51:87:5b:01:
0a:e4:49:f2:34:5d:22:59:ca:a7:f9:9d:1d:dc:12:
d7:65:a8:bf:d8:e2:c4:28:16:02:34:9f:8f:b5:f3:
67:a6:9a:b6:bf:45:24:78:5b:a3:60:96:73:c9:74:
cd:4b:a5:9b:13:16:8e:bb:c2:d6:95:52:14:5c:e8:
db:ed:cc:0f:66:37:1d:0a:d2:d9:87:b8:8c:e2:67:
d1:85:56:ac:5d:03:b8:c2:b3:62:5f:75:91:ff:f7:
b4:69:c7:5d:13:19:8b:ec:b3:04:6b:38:29:18:cd:
9b:34:52:ba:87:8b:9d:79:23:85:cd:8c:46:29:e1:
ca:6b:d3:24:a4:76:58:2c:4c:23:bb:b0:18:4c:f0:
ff:dd:c9:c9:0c:9f:83:fc:ac:87:03:7d:dc:41:2f:
4e:40:b3:3a:e2:d7:9a:19:32:59:b4:11:c7:0b:26:
94:36:5f:a6:03:46:c4:cb:0b:14:e2:21:7c:82:21:
cf:59:e2:6e:f7:b0:7a:2b:ed:40:75:39:35:a2:3c:
a8:a1:0c:3c:0a:66:79:6e:14:9b:17:79:16:5c:e8:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7D:3F:1B:3F:F7:CA:11:3E:59:06:65:50:14:9B:1A:6F:36:C4:01
X509v3 Authority Key Identifier:
keyid:D1:8C:30:FD:7C:3E:81:14:B7:36:EB:DD:27:FE:93:C0:67:63:BD:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e31312e302f32342d3234203d3e20343031313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.150.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:57:e3:3a:7c:41:dc:0f:9f:89:c5:a6:51:e8:4e:6a:9c:fe:
79:43:c6:bf:1e:36:a1:02:47:ec:84:8e:b6:50:b5:91:b2:74:
97:dc:93:73:b7:24:b5:e9:06:fd:78:d5:2e:c7:26:ad:19:71:
b3:a0:2b:4d:ca:be:f5:f4:fc:07:41:7e:07:bc:90:42:0a:5d:
b9:cb:0b:cf:b7:90:76:0e:1e:bc:37:44:e2:ba:e6:4e:94:4d:
73:34:fa:fe:50:6f:d0:8c:c3:eb:b8:a7:a5:00:8f:d4:8c:94:
6f:e2:00:a2:2d:b2:31:35:e8:59:f4:7a:ff:9b:93:5c:d4:c4:
70:f0:ee:70:3b:9e:73:a0:90:06:4b:0e:77:bb:d0:90:42:01:
b7:2a:60:c0:85:bd:26:8f:8f:56:07:11:eb:c4:69:e5:22:d2:
5c:c5:c3:05:1f:cc:bd:fb:81:70:36:0b:f4:bb:de:89:be:47:
e6:ff:bb:31:92:25:06:d6:65:32:db:7c:3c:53:c8:0a:21:d4:
02:7f:8f:83:a8:4c:7d:8b:90:43:48:e5:da:2b:0d:9a:10:4a:
db:cd:09:4e:a8:db:d3:f4:d7:b0:a2:c0:cf:e6:dc:9c:b2:88:
5a:d5:39:eb:33:ab:9a:cb:f7:18:4b:23:2c:c0:ed:f0:fa:37:
0c:7e:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 13:30:05 2024 by rpki-client on console-fra.rpki-client.org