Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a323630303a3a2f33392d3339203d3e20323030393532.roa
File: 326130353a646663373a323630303a3a2f33392d3339203d3e20323030393532.roa (raw, json)
Hash identifier: xq6WRIwMKQ8wIJ/Q7hCZfu/j2VbrSTZF970ODXHnhs4=
Subject key identifier: BC:DE:3E:A6:2A:D7:02:62:D1:F7:81:27:3B:98:63:6C:31:77:C9:8F
Certificate issuer: /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial: 01C2E5906341097240BF65DB4A5DB32F8E45CB
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access: rsync://rpki.co/repo/AS205432/0/326130353a646663373a323630303a3a2f33392d3339203d3e20323030393532.roa
Signing time: Fri 14 Apr 2023 01:46:29 +0000
ROA not before: Fri 14 Apr 2023 01:41:29 +0000
ROA not after: Fri 12 Apr 2024 01:46:29 +0000
asID: 200952
IP address blocks: 2a05:dfc7:2600::/39 maxlen: 39
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c2:e5:90:63:41:09:72:40:bf:65:db:4a:5d:b3:2f:8e:45:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Validity
Not Before: Apr 14 01:41:29 2023 GMT
Not After : Apr 12 01:46:29 2024 GMT
Subject: CN=BCDE3EA62AD70262D1F781273B98636C3177C98F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:b0:dd:d0:cf:2b:1a:33:01:04:d7:41:4b:
ce:67:dd:8a:8b:dd:68:22:2c:ba:99:d6:a8:10:75:
c2:b3:50:fb:f5:ce:2a:6f:88:d2:2c:03:7c:c4:5b:
4a:46:9f:bd:8a:11:7a:30:36:32:c1:ee:e7:18:d1:
07:b7:d9:52:3b:df:3c:25:9c:0a:ef:92:66:0d:fe:
e7:77:1a:1e:86:59:66:4f:fb:2f:28:8a:e1:86:44:
34:2f:e1:74:34:8a:89:37:14:0c:26:49:01:d4:d1:
aa:19:68:e0:f4:1a:4e:12:28:9f:dc:a5:2a:00:76:
18:42:7e:05:94:c4:3c:de:8c:09:19:9a:94:e4:df:
1e:23:8a:ba:1c:47:aa:c5:31:b0:be:ca:14:54:cd:
db:b7:22:f0:c8:bf:ad:59:88:23:a8:86:ed:9d:0d:
fa:75:15:5c:e7:61:5a:e5:ec:66:14:a6:12:65:f6:
ae:23:5d:16:9c:9f:b2:62:0d:67:01:f1:15:0e:c8:
d3:30:50:20:07:cd:e0:94:27:8c:e7:c9:d3:27:da:
ef:82:68:71:18:ad:b2:fe:62:b6:0e:96:c9:3d:4a:
cf:6c:36:de:38:f5:d1:b3:93:11:72:99:3f:f7:c9:
c0:28:d2:e7:29:34:7d:43:94:e6:54:e2:ed:88:31:
fb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DE:3E:A6:2A:D7:02:62:D1:F7:81:27:3B:98:63:6C:31:77:C9:8F
X509v3 Authority Key Identifier:
keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a323630303a3a2f33392d3339203d3e20323030393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:2600::/39
Signature Algorithm: sha256WithRSAEncryption
51:d6:e4:83:c1:6d:da:c2:5c:be:97:a8:dd:c1:69:c4:86:f8:
3b:d9:34:d6:86:7c:81:a2:5d:d4:d6:27:e8:28:67:2d:75:93:
42:63:d7:d2:3a:98:83:7b:2a:13:65:23:ee:56:84:4f:2e:11:
89:fc:51:a6:f6:ff:f6:7c:1f:ab:f4:d2:79:af:0e:e7:21:ad:
af:47:31:27:1e:48:96:07:5e:e6:59:b0:cd:43:ad:f1:a6:e9:
e9:e7:7e:b3:1f:91:7f:1f:ec:47:df:e7:1c:6c:fd:62:94:64:
76:f0:0c:14:24:d1:23:c4:9f:06:02:76:76:ae:12:57:b7:55:
41:af:e1:94:7b:43:53:e8:0a:6b:30:7f:7b:8c:8a:7f:c9:6e:
11:96:05:7f:9b:c1:30:3d:37:28:99:55:6b:6a:70:4a:3b:6b:
52:40:86:39:42:ef:7b:d1:4f:96:37:4d:b7:51:3e:b1:bb:b9:
ea:f0:6f:d4:2c:df:cd:ca:a8:84:04:db:ba:3d:37:7f:1b:f6:
4d:aa:8c:33:23:b0:1e:3d:ec:4b:0e:55:c1:1e:a2:02:19:c2:
30:a4:3e:46:3a:fd:ec:b8:c6:a7:37:d4:81:a3:5e:c5:c7:c9:
29:c1:93:7a:07:8e:41:0d:99:12:ef:dc:ad:04:5c:d5:ea:ad:
26:1b:25:75
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgITAcLlkGNBCXJAv2XbSl2zL45FyzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhDNDc4QkRFNjBFMUI5MkY5NzU1MDQwRDZDNjdDOUNGQjY0
QzdEMzU1MB4XDTIzMDQxNDAxNDEyOVoXDTI0MDQxMjAxNDYyOVowMzExMC8GA1UE
AxMoQkNERTNFQTYyQUQ3MDI2MkQxRjc4MTI3M0I5ODYzNkMzMTc3Qzk4RjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM3RsN3QzysaMwEE10FLzmfdiovd
aCIsupnWqBB1wrNQ+/XOKm+I0iwDfMRbSkafvYoRejA2MsHu5xjRB7fZUjvfPCWc
Cu+SZg3+53caHoZZZk/7LyiK4YZENC/hdDSKiTcUDCZJAdTRqhlo4PQaThIon9yl
KgB2GEJ+BZTEPN6MCRmalOTfHiOKuhxHqsUxsL7KFFTN27ci8Mi/rVmII6iG7Z0N
+nUVXOdhWuXsZhSmEmX2riNdFpyfsmINZwHxFQ7I0zBQIAfN4JQnjOfJ0yfa74Jo
cRitsv5itg6WyT1Kz2w23jj10bOTEXKZP/fJwCjS5yk0fUOU5lTi7Ygx+/kCAwEA
AaOCAgkwggIFMB0GA1UdDgQWBBS83j6mKtcCYtH3gSc7mGNsMXfJjzAfBgNVHSME
GDAWgBTEeL3mDhuS+XVQQNbGfJz7ZMfTVTAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0f
BFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQVMyMDU0MzIvMC9DNDc4
QkRFNjBFMUI5MkY5NzU1MDQwRDZDNjdDOUNGQjY0QzdEMzU1LmNybDCBkwYIKwYB
BQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQv
Mi9DNDc4QkRFNjBFMUI5MkY5NzU1MDQwRDZDNjdDOUNGQjY0QzdEMzU1LmNlcjCB
gAYIKwYBBQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wLzMyNjEzMDM1M2E2NDY2NjMzNzNhMzIzNjMwMzAzYTNhMmYz
MzM5MmQzMzM5MjAzZDNlMjAzMjMwMzAzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgEqBd/HJjAN
BgkqhkiG9w0BAQsFAAOCAQEAUdbkg8Ft2sJcvpeo3cFpxIb4O9k01oZ8gaJd1NYn
6ChnLXWTQmPX0jqYg3sqE2Uj7laETy4RifxRpvb/9nwfq/TSea8O5yGtr0cxJx5I
lgde5lmwzUOt8abp6ed+sx+Rfx/sR9/nHGz9YpRkdvAMFCTRI8SfBgJ2dq4SV7dV
Qa/hlHtDU+gKazB/e4yKf8luEZYFf5vBMD03KJlVa2pwSjtrUkCGOULve9FPljdN
t1E+sbu56vBv1CzfzcqohATbuj03fxv2TaqMMyOwHj3sSw5VwR6iAhnCMKQ+Rjr9
7LjGpzfUgaNexcfJKcGTegeOQQ2ZEu/crQRc1eqtJhsldQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-ams.rpki-client.org