Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336430303a3a2f34382d3438203d3e20323131363034.roa
File: 326131323a646434373a336430303a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier: YbpT7ivQ3PdjOksjjLpms/g1Bx7zZ/HLT0dUo8k5rB8=
Subject key identifier: 02:B7:43:56:A7:FF:D2:15:7A:D9:C8:FF:7E:FD:40:06:E8:3B:B1:77
Certificate issuer: /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial: 026CA4203335527EAFF858FE1989E7A48C4CA29B
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access: rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access: rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430303a3a2f34382d3438203d3e20323131363034.roa
Signing time: Mon 18 Mar 2024 22:14:26 +0000
ROA not before: Mon 18 Mar 2024 22:09:26 +0000
ROA not after: Mon 17 Mar 2025 22:14:26 +0000
asID: 211604
IP address blocks: 2a12:dd47:3d00::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Jun 2024 17:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6c:a4:20:33:35:52:7e:af:f8:58:fe:19:89:e7:a4:8c:4c:a2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Validity
Not Before: Mar 18 22:09:26 2024 GMT
Not After : Mar 17 22:14:26 2025 GMT
Subject: CN=02B74356A7FFD2157AD9C8FF7EFD4006E83BB177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b0:aa:72:e1:2b:d4:e7:ea:35:bb:40:0f:bd:
5c:e2:5a:d7:e9:ef:b7:b2:d9:99:5b:be:6b:28:31:
da:d4:c0:08:2d:dc:a2:73:b0:47:7d:62:b9:80:69:
05:09:d9:a8:71:2a:ba:b3:fb:4f:ee:fc:ab:3b:05:
6c:15:94:22:e9:a7:e8:f4:22:82:ea:e4:ba:8e:7a:
ce:4d:8d:a4:87:d8:d8:ac:08:b0:6e:eb:02:e8:40:
f4:4a:e3:ae:35:56:b7:df:2c:25:be:43:0a:9f:ec:
79:78:56:81:0c:06:57:c4:3f:9f:89:cf:ae:59:b9:
1c:ff:ae:a5:73:a2:33:a0:b5:55:a6:74:90:2c:c1:
89:5b:f1:45:e8:23:6f:ab:cc:e2:ce:f8:7e:37:da:
c1:85:1b:64:7b:fc:48:3b:12:2e:a5:7d:45:20:a2:
82:cf:4b:78:47:36:c4:4b:49:f5:3a:0b:08:f8:b8:
c8:87:6b:a5:b1:76:b0:c7:74:ce:0e:90:7e:d5:e1:
c8:92:54:38:05:83:1e:5c:43:ec:3a:8e:5b:23:70:
d8:c6:1c:68:0f:c0:d3:67:2f:e4:37:de:a4:08:86:
89:6b:74:ef:ff:35:72:65:45:ad:06:31:15:19:ad:
30:0a:64:0a:2c:5d:e8:62:bc:22:25:63:66:c7:87:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:43:56:A7:FF:D2:15:7A:D9:C8:FF:7E:FD:40:06:E8:3B:B1:77
X509v3 Authority Key Identifier:
keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430303a3a2f34382d3438203d3e20323131363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3d00::/48
Signature Algorithm: sha256WithRSAEncryption
51:17:df:7b:db:77:86:d9:c9:3c:f0:e1:c9:b4:13:fc:e5:3d:
cf:c2:8e:64:49:e2:47:df:01:03:6f:90:e2:1b:db:2b:cf:c1:
f5:2f:54:4e:6a:90:11:00:30:f2:ba:16:b2:43:1c:44:76:1b:
61:e2:d3:ba:8d:58:28:e5:2c:83:26:02:13:45:ca:c9:7e:9c:
57:0f:a4:c4:9c:4e:46:f9:30:f1:5e:af:aa:cd:86:c9:8e:2a:
f3:c7:a5:da:cb:2c:60:17:9c:b3:c2:6d:0b:e5:c0:e5:fb:bf:
ba:1b:ba:27:ff:60:a8:b1:c1:c1:69:cd:39:96:2e:95:b4:86:
73:2f:6b:e5:9c:b6:d4:a3:1d:e4:3a:90:09:e0:ad:ef:87:eb:
27:ae:92:60:d9:04:53:c6:df:98:ce:e9:2e:a0:44:17:2f:fb:
c9:c2:87:3e:d5:90:d9:c1:48:03:54:d7:f5:f4:cf:aa:04:a9:
1c:72:a6:c5:02:68:82:f6:01:fe:cb:b2:6e:8b:37:f3:24:32:
7b:ed:30:e9:6d:a6:b2:c1:bc:5f:cd:4e:63:79:f7:0e:2a:b5:
36:f2:98:31:53:00:3e:6d:e1:da:b1:9a:6c:35:48:51:a5:51:
1b:f0:9c:0d:fa:ee:11:c6:90:cd:8a:18:82:1c:cd:57:02:4b:
a8:0b:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:40:45 2024 by rpki-client on console-ams.rpki-client.org