Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS200566/1/326130353a646663373a626330303a3a2f33392d3339203d3e20313530323439.roa
File: 326130353a646663373a626330303a3a2f33392d3339203d3e20313530323439.roa (raw, json)
Hash identifier: HH/isWqn6P3dWxv9Tuhjvnu5JWLQEX93jbecrOJ4nLk=
Subject key identifier: F8:88:DD:14:DC:E2:31:93:8B:B4:4E:32:07:4C:6E:E5:EE:C2:BF:C3
Certificate issuer: /CN=C12CF454AF6D24BD66EDE2BCAAA78ECE5E4C1775
Certificate serial: 54F9D7749210C5E00A46CDDF4715C767635CDB8E
Authority key identifier: C1:2C:F4:54:AF:6D:24:BD:66:ED:E2:BC:AA:A7:8E:CE:5E:4C:17:75
Authority info access: rsync://rpki.co/repo/AS205432/0/C12CF454AF6D24BD66EDE2BCAAA78ECE5E4C1775.cer
Subject info access: rsync://rpki.co/repo/AS200566/1/326130353a646663373a626330303a3a2f33392d3339203d3e20313530323439.roa
Signing time: Fri 11 Aug 2023 04:05:26 +0000
ROA not before: Fri 11 Aug 2023 04:00:26 +0000
ROA not after: Fri 09 Aug 2024 04:05:26 +0000
asID: 150249
IP address blocks: 2a05:dfc7:bc00::/39 maxlen: 39
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f9:d7:74:92:10:c5:e0:0a:46:cd:df:47:15:c7:67:63:5c:db:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C12CF454AF6D24BD66EDE2BCAAA78ECE5E4C1775
Validity
Not Before: Aug 11 04:00:26 2023 GMT
Not After : Aug 9 04:05:26 2024 GMT
Subject: CN=F888DD14DCE231938BB44E32074C6EE5EEC2BFC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:82:b2:bd:70:aa:5a:ce:44:41:4d:69:8b:
a6:85:2f:bb:a4:00:a8:12:c2:f3:39:0e:f4:cd:89:
61:42:6c:85:d7:26:c4:a1:6b:2e:e9:76:46:d6:3d:
01:d8:08:25:8e:f6:f0:e8:71:42:1b:31:4c:8c:7e:
7e:fd:b3:a7:34:e7:16:4a:8e:74:15:ef:cf:9d:ad:
d1:9e:98:bf:13:81:08:00:0e:d1:02:94:80:91:23:
63:b8:9b:12:b8:5c:78:84:23:1e:d0:6b:67:df:1b:
82:80:e1:cb:90:d9:3d:16:f7:b3:75:a6:31:af:71:
1d:12:33:a1:46:6f:57:3c:02:9e:12:89:d6:6c:cf:
7a:18:5c:22:18:7b:e3:96:51:c3:62:27:1c:8c:0a:
46:f9:b9:40:c2:dc:05:d2:3f:73:f9:0f:2c:ae:07:
6f:8e:78:2e:1d:25:e8:8c:53:7d:b3:fb:3a:35:44:
52:62:9a:30:f9:41:e3:ac:46:4c:fc:9b:2d:ae:fe:
c8:ac:4c:8e:d6:aa:ab:dd:67:c9:21:c8:92:af:12:
fd:f1:79:e7:fe:2d:57:ce:60:8f:00:06:cd:ac:cb:
37:62:92:f1:45:16:1c:b1:2a:8a:09:40:0b:c9:ad:
67:49:b2:b7:66:af:7b:d4:aa:bd:8c:d4:aa:69:39:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:88:DD:14:DC:E2:31:93:8B:B4:4E:32:07:4C:6E:E5:EE:C2:BF:C3
X509v3 Authority Key Identifier:
keyid:C1:2C:F4:54:AF:6D:24:BD:66:ED:E2:BC:AA:A7:8E:CE:5E:4C:17:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS200566/1/C12CF454AF6D24BD66EDE2BCAAA78ECE5E4C1775.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/C12CF454AF6D24BD66EDE2BCAAA78ECE5E4C1775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS200566/1/326130353a646663373a626330303a3a2f33392d3339203d3e20313530323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:bc00::/39
Signature Algorithm: sha256WithRSAEncryption
81:e1:f1:1f:06:92:53:1e:a1:df:b9:44:f8:c9:22:5f:9f:94:
2b:e6:e8:25:8f:64:9f:fc:3b:ff:42:69:81:d7:94:2c:0c:bd:
12:78:ec:27:4f:1d:81:0b:2b:04:a9:97:4f:38:e0:37:83:b9:
a7:e1:e5:e6:3c:36:c1:f6:12:96:aa:74:86:f2:25:87:81:fb:
1e:12:f7:ad:fa:40:07:25:14:36:7e:84:eb:59:d6:1b:08:58:
b0:cf:5f:6a:cf:5a:37:ec:a7:1a:5a:0c:af:49:7f:2c:af:6f:
61:e8:b4:3f:3d:c6:1e:cd:54:c6:b1:f2:d7:f1:93:70:a9:38:
46:29:8d:8b:d2:32:5f:49:27:b7:23:3d:fa:4a:56:23:60:48:
2b:65:06:8d:b8:2d:91:3d:23:37:d6:bf:f1:66:e1:5c:38:3e:
d7:a1:3d:67:76:b6:79:73:8d:00:99:72:60:ac:69:41:ac:06:
2d:72:3b:b8:80:d7:be:cf:2d:7d:22:78:35:d4:f5:74:5b:a3:
cd:64:91:05:65:0d:9f:36:a7:f6:22:88:d5:b9:21:a2:f6:ea:
15:9a:8c:f7:58:4f:bb:95:c7:da:fc:18:8a:e5:2f:e4:c2:67:
2c:67:9f:f9:32:78:29:1b:84:50:16:16:ed:0e:3c:b7:16:19:
d3:db:45:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 01:44:04 2023 by rpki-client on console-fra.rpki-client.org