Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS200447/1/326130353a646663373a333630303a3a2f34382d3438203d3e20323030343437.roa
File: 326130353a646663373a333630303a3a2f34382d3438203d3e20323030343437.roa (raw, json)
Hash identifier: xfdxwAFoU+j+CrUwhveg/XxnZUWviUFlD8bjfywrQ80=
Subject key identifier: 3B:D2:4B:73:04:B8:54:BB:FE:C9:7B:BE:86:5F:B5:2E:37:6F:FE:39
Certificate issuer: /CN=B07BA3B6FEC519AF5118588A2B0548B01F7AEE71
Certificate serial: 5A538CB5D22082A7AA289040A390075FF91091C7
Authority key identifier: B0:7B:A3:B6:FE:C5:19:AF:51:18:58:8A:2B:05:48:B0:1F:7A:EE:71
Authority info access: rsync://rpki.co/repo/AS205432/0/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.cer
Subject info access: rsync://rpki.co/repo/AS200447/1/326130353a646663373a333630303a3a2f34382d3438203d3e20323030343437.roa
Signing time: Mon 24 Apr 2023 16:49:12 +0000
ROA not before: Mon 24 Apr 2023 16:44:12 +0000
ROA not after: Mon 22 Apr 2024 16:49:12 +0000
asID: 200447
IP address blocks: 2a05:dfc7:3600::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:53:8c:b5:d2:20:82:a7:aa:28:90:40:a3:90:07:5f:f9:10:91:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B07BA3B6FEC519AF5118588A2B0548B01F7AEE71
Validity
Not Before: Apr 24 16:44:12 2023 GMT
Not After : Apr 22 16:49:12 2024 GMT
Subject: CN=3BD24B7304B854BBFEC97BBE865FB52E376FFE39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4a:20:1f:20:cd:42:09:f3:3b:1a:1b:39:93:
e2:9a:7f:ab:17:90:05:7e:33:98:35:3b:13:a4:32:
7f:b1:c9:00:1a:97:ac:e3:79:19:25:2d:46:7d:69:
e3:87:b3:ac:c8:9b:ca:b7:90:96:ab:b8:9f:9e:2c:
fd:79:db:0e:c7:a1:68:dd:18:93:c6:9b:4e:cf:90:
8e:98:7f:1d:59:d5:8d:16:2d:47:4d:f6:96:e5:66:
bc:af:2a:0a:90:2d:cf:23:99:aa:92:8a:67:4e:1f:
c9:40:b3:07:b6:b7:09:a5:25:62:44:71:28:04:da:
b6:5a:2d:48:74:8c:f4:0a:34:ac:d1:dd:57:8a:23:
c9:1b:13:e0:61:13:b5:92:6d:12:46:63:42:3b:cc:
67:84:5f:d5:ac:ed:f1:c8:ce:ab:94:cd:87:27:9c:
a7:7d:bb:30:e3:e3:f1:98:ae:75:0e:37:16:1e:d3:
f5:22:40:ca:0b:95:57:d1:80:7b:53:3d:a8:f6:c1:
ed:cf:ea:ce:68:c6:bf:36:6e:76:b8:36:ec:c6:ee:
90:b3:7a:a8:b9:3d:d2:6d:58:56:28:5c:79:78:ce:
8e:35:b0:28:94:3d:6d:52:50:1e:3f:06:89:60:a6:
ce:e2:8c:fc:41:ce:c2:aa:54:ad:23:df:f1:25:24:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D2:4B:73:04:B8:54:BB:FE:C9:7B:BE:86:5F:B5:2E:37:6F:FE:39
X509v3 Authority Key Identifier:
keyid:B0:7B:A3:B6:FE:C5:19:AF:51:18:58:8A:2B:05:48:B0:1F:7A:EE:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS200447/1/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/B07BA3B6FEC519AF5118588A2B0548B01F7AEE71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS200447/1/326130353a646663373a333630303a3a2f34382d3438203d3e20323030343437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:3600::/48
Signature Algorithm: sha256WithRSAEncryption
cf:86:5d:c5:a5:90:db:2a:77:79:69:af:02:45:4a:64:e9:8f:
a8:ef:8e:15:42:93:c1:9a:6a:c0:86:76:18:76:13:21:5e:1c:
b5:48:a8:fe:d7:63:9d:e0:f0:c9:54:31:f0:5c:6a:5c:1e:bf:
e4:69:bb:31:af:42:cc:fc:55:49:e6:af:27:98:99:11:4a:b9:
e8:af:f4:64:d4:bc:29:6b:4f:8d:b1:89:1d:c1:a5:7c:26:5e:
c3:37:e2:35:58:ce:06:14:e5:6b:42:84:50:91:06:0a:85:11:
0c:f9:65:fa:03:c3:7d:b2:ab:d7:5f:99:3f:16:e3:15:58:d7:
73:14:7f:30:05:9e:4d:b1:bc:b3:22:6a:19:ec:8c:93:2d:43:
5c:27:aa:e1:a8:d2:44:fb:06:b1:44:84:03:1d:f3:37:93:15:
86:9e:67:17:47:18:1b:3b:d8:1b:fe:d7:57:df:fa:11:cf:f0:
e5:de:33:9a:07:f5:51:a7:93:ce:6c:b5:7e:1a:53:54:90:19:
20:7d:6c:d4:ee:dc:1c:44:2d:fd:72:b3:03:9a:64:35:e1:fc:
79:8e:8e:9d:85:c4:32:35:6c:17:6f:23:e3:d6:51:85:4f:2f:
48:a6:4f:67:9d:fa:50:4c:36:42:1b:f9:2b:82:7e:d4:6e:d8:
ea:42:fb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org