Route Origin Authorization
$ rpki-client -vvf rpki.akrn.net/repo/AKRN/0/3130332e3137322e34302e302f32332d3234203d3e203431323535.roa
File: 3130332e3137322e34302e302f32332d3234203d3e203431323535.roa (raw, json)
Hash identifier: o/G6ioWp4My138XGhOJmznntQh88HxiXXQtuXzrrqao=
Subject key identifier: 5D:23:73:A8:01:26:62:84:12:C6:07:C0:C8:B5:CF:2D:31:AE:FE:BA
Certificate issuer: /CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
Certificate serial: 1622CDCA066D35606062A4ED6EC17B2CD0E33161
Authority key identifier: 90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
Subject info access: rsync://rpki.akrn.net/repo/AKRN/0/3130332e3137322e34302e302f32332d3234203d3e203431323535.roa
Signing time: Mon 05 Feb 2024 11:00:00 +0000
ROA not before: Mon 05 Feb 2024 10:55:00 +0000
ROA not after: Mon 03 Feb 2025 11:00:00 +0000
asID: 41255
IP address blocks: 103.172.40.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:22:cd:ca:06:6d:35:60:60:62:a4:ed:6e:c1:7b:2c:d0:e3:31:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
Validity
Not Before: Feb 5 10:55:00 2024 GMT
Not After : Feb 3 11:00:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:9d:76:c3:9a:82:90:5d:65:fa:6e:53:f7:
ef:7b:6a:ee:1b:6c:50:d6:05:0c:3a:e4:9f:f2:ce:
84:43:be:1e:24:ff:6e:be:d6:e5:c9:b2:a9:ea:36:
55:ed:19:f6:1a:80:b1:97:5a:31:3c:b7:58:42:b7:
fe:34:e0:f7:00:da:62:76:c9:26:6b:0a:b1:43:61:
70:e8:dc:08:ee:69:cb:f0:e5:58:dc:aa:7d:27:0d:
df:db:79:0f:0a:f3:6d:0e:af:25:16:db:38:14:b0:
b8:a6:7a:af:8f:b1:c7:14:e7:de:3f:b4:09:2d:fb:
5a:13:e5:30:ad:65:a7:08:be:86:4b:29:18:43:a4:
d4:6e:74:10:98:70:d9:ed:7f:65:49:87:eb:f5:4e:
f5:1d:c9:3c:99:5e:f4:ee:3a:1b:3e:2e:4c:ce:0b:
3d:4a:d5:6e:fc:6f:d7:f1:ef:5a:6e:db:02:41:cd:
c2:dc:d7:3b:80:d9:a4:f6:1c:7a:50:7d:12:9e:1f:
b0:a1:b0:72:67:be:4f:c4:1b:f6:0f:a5:ff:ed:d5:
26:73:a6:03:3e:fe:88:d7:8c:a7:a6:0d:ae:3c:fc:
3e:12:ae:ee:b6:d7:03:ff:86:81:e6:0e:69:a0:56:
bf:43:09:bb:68:68:9a:61:7c:db:ef:06:1b:7e:e4:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:23:73:A8:01:26:62:84:12:C6:07:C0:C8:B5:CF:2D:31:AE:FE:BA
X509v3 Authority Key Identifier:
keyid:90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/0/3130332e3137322e34302e302f32332d3234203d3e203431323535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.40.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:92:2d:3e:f3:46:b4:49:55:4a:a5:d0:15:ad:d7:e2:61:5a:
77:3b:15:1d:7f:92:46:67:58:1c:eb:1f:d7:2c:b9:9d:7d:08:
f5:45:ee:8b:a6:90:d1:50:20:ab:f4:39:c3:b3:df:67:6f:4a:
1d:e0:9b:e0:6c:69:96:ef:b7:31:41:1e:00:b5:18:11:9d:ad:
da:0b:d4:14:ea:ea:7b:d3:e6:a3:88:f4:79:87:11:1f:02:bf:
45:0a:39:e0:17:39:3b:71:92:9f:d6:15:51:a5:02:f1:ee:d5:
36:c8:17:6d:b8:92:fc:c3:8a:38:24:41:51:d2:fd:42:c2:53:
c5:84:3c:92:15:57:39:c9:17:b7:d0:e5:1b:82:a2:ae:66:45:
24:4d:fb:9f:02:f0:e2:dc:f1:ee:06:b4:59:8f:94:0e:e6:93:
5c:21:2c:5f:af:0a:e5:a4:00:65:d4:33:56:c0:ea:84:5d:24:
53:52:6c:13:3c:09:68:ad:b1:2f:2b:73:64:54:ab:84:90:24:
dc:23:a9:ee:d0:20:0e:83:7b:10:66:e9:85:7e:7b:67:58:c8:
43:bb:0f:80:c5:0d:3e:d4:eb:e8:47:eb:60:bb:e2:c1:91:bb:
d6:f1:24:2a:46:2a:0a:66:05:cf:00:29:0c:47:45:77:38:42:
56:44:57:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 12:23:52 2024 by rpki-client on console-ams.rpki-client.org