Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336430303a3a2f34302d3430203d3e20323131363034.roa
File: 326131323a646434373a336430303a3a2f34302d3430203d3e20323131363034.roa (raw, json)
Hash identifier: pzNcqGQT1HW7x0cZnSlc/rC/BZhqcXYPdozl2BeVTq4=
Subject key identifier: 48:E7:A2:E6:3E:E7:EE:80:5F:9F:4E:7E:EF:46:30:54:63:67:40:DC
Certificate issuer: /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial: 08E34F01352E96410323E3D66A338FC2F644D023
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access: rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access: rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430303a3a2f34302d3430203d3e20323131363034.roa
Signing time: Mon 17 Apr 2023 00:39:19 +0000
ROA not before: Mon 17 Apr 2023 00:34:19 +0000
ROA not after: Mon 15 Apr 2024 00:39:19 +0000
asID: 211604
IP address blocks: 2a12:dd47:3d00::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e3:4f:01:35:2e:96:41:03:23:e3:d6:6a:33:8f:c2:f6:44:d0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Validity
Not Before: Apr 17 00:34:19 2023 GMT
Not After : Apr 15 00:39:19 2024 GMT
Subject: CN=48E7A2E63EE7EE805F9F4E7EEF463054636740DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:75:39:c9:1c:d7:fe:b0:27:dd:08:65:66:
1d:68:7b:54:b5:1f:70:61:96:2f:49:d0:82:b6:72:
ae:99:2d:8a:49:73:46:8a:3b:c0:17:44:48:45:ec:
3b:df:62:fe:17:4d:41:da:86:86:95:5c:dd:52:d9:
8a:2c:44:2d:db:f9:ba:46:65:0f:99:38:4f:43:e7:
f3:d4:7c:b9:39:d0:e1:81:0b:46:d8:aa:6d:09:d2:
15:c2:0e:27:c8:11:23:36:de:4f:aa:f2:0f:5b:f6:
13:bc:d7:77:ac:0a:61:6c:aa:2c:5f:04:2b:e2:8e:
8c:1a:85:10:71:2a:63:99:3c:37:45:ed:93:19:11:
08:ab:b2:2d:a6:71:9c:a3:37:5c:9c:4d:95:ce:dc:
9a:7d:8f:4e:b9:7b:dc:d7:b4:a9:85:09:d9:f7:93:
99:4c:93:f9:03:74:4f:b6:f7:8e:d3:60:43:b7:ab:
d8:19:f0:d5:b9:2c:b0:ff:cb:40:42:77:fa:b8:5a:
a3:f3:b4:fb:0b:d1:02:14:ef:f9:a9:29:16:01:0b:
29:d2:3a:23:66:cc:71:1e:6b:72:87:d6:2b:e2:a7:
8b:24:ce:b9:1b:f3:ae:91:18:e4:fe:72:45:bd:55:
23:8d:64:3c:c0:89:22:de:95:5c:43:0d:94:13:6c:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E7:A2:E6:3E:E7:EE:80:5F:9F:4E:7E:EF:46:30:54:63:67:40:DC
X509v3 Authority Key Identifier:
keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430303a3a2f34302d3430203d3e20323131363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3d00::/40
Signature Algorithm: sha256WithRSAEncryption
bd:3e:34:fd:27:cc:78:20:a7:b6:56:a1:80:30:71:72:d7:96:
d4:11:5c:b4:e2:12:d5:1e:8b:a7:a4:fc:92:bb:59:1e:b5:cd:
e5:31:ee:55:b3:6a:2a:43:da:6c:6c:56:d6:f9:2b:70:32:7e:
a7:32:90:82:2e:7d:ba:25:68:0b:d1:27:dd:68:e2:e0:cb:27:
bc:f9:22:d4:8b:23:ef:87:98:f8:b4:87:64:f8:94:03:0e:36:
70:11:3b:76:eb:bd:f8:9e:63:fb:8c:98:2a:0e:e3:4e:39:f0:
85:23:7d:bb:31:2b:c1:d8:a1:02:64:37:eb:ee:26:5d:a1:77:
9c:cc:01:c2:23:44:08:df:13:a7:c7:00:24:5e:b8:08:65:fe:
b7:c7:ea:37:a9:65:52:15:49:30:76:56:b7:4e:f6:0a:36:94:
f3:c4:85:80:bb:e2:60:03:df:24:09:16:26:9a:79:24:c5:8a:
a4:d3:74:a3:be:d0:eb:73:fc:71:32:7f:8c:bd:bb:ef:0d:7a:
17:2f:97:1e:ac:df:d5:3e:2c:54:3a:f0:0f:d1:65:e3:39:d5:
af:ed:a2:d2:9d:6b:e0:ad:0e:18:de:6d:8e:f4:28:6d:42:c4:
ef:c0:76:2b:5d:04:4a:36:f3:38:9e:af:04:e0:60:d4:5f:d8:
09:74:3b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-ams.rpki-client.org