Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a313030303a3a2f34302d3438203d3e20323035353331.roa
File: 326130353a646663373a313030303a3a2f34302d3438203d3e20323035353331.roa (raw, json)
Hash identifier: 5RH8080NRn+woxtL89t0+Xn201h6U2y8WxlFrSr9W8U=
Subject key identifier: 4A:10:48:52:B6:A0:7B:AC:E8:D2:47:D3:1C:5E:5E:B9:41:30:CD:F0
Certificate issuer: /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial: 4D6CEBED550AABBD0110F2053071B71CC7A2B575
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access: rsync://rpki.co/repo/AS205432/0/326130353a646663373a313030303a3a2f34302d3438203d3e20323035353331.roa
Signing time: Fri 14 Apr 2023 01:51:53 +0000
ROA not before: Fri 14 Apr 2023 01:46:53 +0000
ROA not after: Fri 12 Apr 2024 01:51:53 +0000
asID: 205531
IP address blocks: 2a05:dfc7:1000::/40 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6c:eb:ed:55:0a:ab:bd:01:10:f2:05:30:71:b7:1c:c7:a2:b5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Validity
Not Before: Apr 14 01:46:53 2023 GMT
Not After : Apr 12 01:51:53 2024 GMT
Subject: CN=4A104852B6A07BACE8D247D31C5E5EB94130CDF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:9a:46:c0:62:b0:3a:54:79:8b:d3:79:d7:
19:c5:83:5b:13:a3:82:84:35:c4:51:8b:2d:ee:21:
b3:d9:4e:33:da:e7:1b:99:fe:ac:b2:a4:93:dc:f6:
67:55:1f:8d:ae:4b:bc:4b:df:73:1e:02:d8:d8:c8:
67:50:b9:46:fc:d5:90:8a:6f:82:78:98:8c:79:a9:
a5:78:6f:f0:1c:4e:1c:81:37:43:55:da:09:6d:d8:
7d:fa:d3:5d:7d:19:bf:d7:d2:38:be:d0:61:5a:74:
fa:db:df:22:bd:98:71:68:86:16:da:91:fd:d3:af:
12:17:32:ca:4e:79:0b:ca:f2:71:60:a7:41:b3:64:
7f:d0:cc:fe:6e:bd:eb:2f:5b:c3:ac:d2:80:4e:b5:
0c:25:3a:4e:ab:77:3e:a1:80:60:af:91:c5:aa:5f:
fd:09:1e:44:1c:01:77:c4:9e:2c:4f:50:f8:9f:ff:
fc:9f:2b:48:87:91:6e:75:a2:5a:e6:d9:01:f7:40:
96:1f:88:e6:c7:e7:4e:b6:cb:00:c7:c2:5e:43:9e:
ab:47:13:5d:16:27:a2:4f:8f:07:a2:eb:f9:3d:96:
fb:41:57:63:a7:33:d7:2e:6c:8e:34:95:52:dd:29:
25:3c:45:2e:d6:ba:c5:f7:e6:5a:a9:cc:67:1c:51:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:10:48:52:B6:A0:7B:AC:E8:D2:47:D3:1C:5E:5E:B9:41:30:CD:F0
X509v3 Authority Key Identifier:
keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a313030303a3a2f34302d3438203d3e20323035353331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:1000::/40
Signature Algorithm: sha256WithRSAEncryption
01:6a:40:3d:c7:fc:a1:98:cd:49:7d:fe:f8:39:f6:bd:d9:83:
4d:79:a4:03:f3:c1:6e:8f:1a:dc:2d:68:b4:04:61:73:31:6c:
14:2f:c2:33:69:92:ae:de:70:97:e6:06:d0:9b:2f:a3:3b:ca:
fc:ad:8f:4b:a8:8a:e9:86:37:4a:67:64:e1:d0:c1:90:48:27:
22:59:6a:ea:2c:29:72:98:cb:c1:28:74:f1:78:e2:11:2c:d9:
39:43:4d:26:a5:c5:84:01:e3:7d:cf:10:33:4e:f6:a0:30:ed:
0b:ca:e5:44:80:b4:cc:67:1d:9b:ba:b8:cd:71:fa:23:9a:42:
03:ba:4e:06:a7:5a:7a:26:06:d2:55:b5:49:ea:13:fe:aa:0d:
07:0f:c3:47:6e:af:fc:bb:bf:8e:3c:e5:5a:da:27:17:5f:af:
08:6a:27:31:9c:80:55:bf:a7:10:37:61:63:93:a9:70:4f:e5:
ad:8e:a4:7d:e2:41:05:04:65:d0:d4:9e:28:9f:f6:37:d6:6c:
3f:14:7a:e1:cb:14:a5:ed:0e:95:1d:e9:87:7c:39:55:6d:48:
e7:25:f8:2c:b4:5c:01:81:46:b7:c7:30:36:ab:c4:40:d1:67:
00:f4:d5:3b:cd:e2:2e:70:14:97:19:3e:84:65:ed:8b:a1:46:
b8:45:a0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:26 2023 by rpki-client on console-fra.rpki-client.org