Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336430313a3a2f34382d3438203d3e20323131363034.roa
File: 326131323a646434373a336430313a3a2f34382d3438203d3e20323131363034.roa (raw, json)
Hash identifier: brJD6QuTIwrRBdyuQRPMAipwj1VPwBSvIuF/CPyYvc0=
Subject key identifier: 7D:31:89:45:21:BF:97:D1:1F:4C:EB:DE:A3:10:02:44:06:B3:CF:19
Certificate issuer: /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial: 539A73F993DF563BAE8D9ECA29E50DF92D88CD03
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access: rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access: rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430313a3a2f34382d3438203d3e20323131363034.roa
Signing time: Mon 18 Mar 2024 22:14:26 +0000
ROA not before: Mon 18 Mar 2024 22:09:26 +0000
ROA not after: Mon 17 Mar 2025 22:14:26 +0000
asID: 211604
IP address blocks: 2a12:dd47:3d01::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Jun 2024 17:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:9a:73:f9:93:df:56:3b:ae:8d:9e:ca:29:e5:0d:f9:2d:88:cd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Validity
Not Before: Mar 18 22:09:26 2024 GMT
Not After : Mar 17 22:14:26 2025 GMT
Subject: CN=7D31894521BF97D11F4CEBDEA310024406B3CF19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:2c:c1:4b:a1:a3:d9:ae:a4:56:b2:b6:c5:
ec:3b:db:53:c2:55:b2:8d:88:1d:5b:bd:19:e2:e2:
2c:09:3f:50:29:9d:8c:22:0d:34:8d:36:14:fb:3b:
6f:6f:30:e9:86:66:49:59:20:9b:82:d6:c7:ff:9d:
e2:c7:bc:c6:8f:54:ca:c7:86:f8:4e:58:e3:dd:2b:
81:e3:8f:53:87:25:2e:1e:a0:5c:e6:81:d5:89:f4:
dd:5e:d1:11:40:ee:3e:b1:f0:49:e1:91:d2:65:5a:
5d:e5:28:37:9c:fe:2f:83:78:a9:6c:58:af:18:70:
03:e3:2c:a6:b2:ff:d6:2c:80:9d:e4:c7:c0:9c:06:
14:e8:68:20:f2:0f:40:04:11:66:eb:06:23:c9:ac:
cc:fd:77:20:83:79:c8:52:4f:18:e5:3e:e8:ac:de:
ea:39:30:93:02:ec:f5:f7:a0:b5:4c:fe:a8:73:08:
83:01:b8:1a:93:99:58:34:45:e6:e3:23:0a:74:55:
8e:cd:b8:d9:ca:3a:7f:96:af:cf:a2:bb:35:13:5c:
35:59:96:ce:f6:ea:8b:52:6e:7d:bf:0d:68:d3:41:
ab:67:b9:e1:87:e5:76:cf:d2:b8:84:34:4d:d3:28:
96:d7:e2:7f:32:87:24:9b:6a:c4:05:11:f4:e0:0b:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:31:89:45:21:BF:97:D1:1F:4C:EB:DE:A3:10:02:44:06:B3:CF:19
X509v3 Authority Key Identifier:
keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430313a3a2f34382d3438203d3e20323131363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3d01::/48
Signature Algorithm: sha256WithRSAEncryption
b8:b8:ac:83:dd:a0:4b:8a:7f:1f:50:3d:89:bd:af:26:e0:ef:
8a:39:9b:b5:8f:ef:af:ea:8f:8c:40:e1:25:11:c2:0a:f8:a7:
83:2c:17:78:a6:5c:c3:03:80:f0:4f:6f:16:00:59:7d:eb:ac:
7a:f6:47:d5:76:c8:1f:11:21:8a:51:2a:80:64:1c:25:0b:b9:
e4:a6:3e:1e:1d:52:ba:9c:bb:1a:61:1f:0d:64:f8:9a:a5:d5:
29:38:b3:1d:36:da:2d:95:15:cf:4d:e0:42:7e:ba:4d:91:f8:
49:8d:58:d0:b1:dd:ac:6e:d1:a9:7c:28:8e:e8:5c:9f:6b:d9:
11:83:83:78:fe:8c:bd:a0:c9:8a:7e:f1:db:46:97:a7:55:96:
a8:ae:44:02:39:f6:e7:25:05:a2:4d:b0:1f:12:99:7f:dc:17:
74:1d:a8:1f:4b:ba:16:70:31:0d:41:f2:be:64:83:1e:a0:53:
32:e4:da:ee:45:b4:6e:05:47:62:af:5a:be:70:03:4b:42:78:
52:80:16:32:86:05:bb:e1:88:2d:77:99:c6:4d:f5:f0:ba:a7:
e9:16:8e:d6:65:f6:3e:12:ff:af:cf:1f:79:5f:76:19:a5:50:
89:97:cb:ce:f8:a8:92:b0:3d:5b:d1:0a:98:0f:69:1c:8c:21:
6f:c4:dc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:04:39 2024 by rpki-client on console-fra.rpki-client.org