Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS200394.roa
File: AS200394.roa (raw, json)
Hash identifier: Kk4lSaW9pHjEkNBWkGSUevbEw+Z/ZgINfeNcP/j4c0A=
Subject key identifier: 63:91:5E:35:41:3F:05:07:23:A2:0C:52:5C:84:ED:C9:64:BB:7E:15
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 7926864BEBD7D4892086915287FBE24431F6C708
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS200394.roa
Signing time: Mon 10 Apr 2023 03:31:40 +0000
ROA not before: Mon 10 Apr 2023 03:26:40 +0000
ROA not after: Mon 08 Apr 2024 03:31:40 +0000
asID: 200394
IP address blocks: 2a12:dd47:8eb0::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:26:86:4b:eb:d7:d4:89:20:86:91:52:87:fb:e2:44:31:f6:c7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 10 03:26:40 2023 GMT
Not After : Apr 8 03:31:40 2024 GMT
Subject: CN=63915E35413F050723A20C525C84EDC964BB7E15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:71:f0:8a:93:ca:42:53:ef:40:5d:db:b6:
5b:4b:7a:33:d1:52:7a:67:06:49:54:e3:80:f2:68:
28:da:3e:5f:d7:de:ef:2e:f5:da:10:54:38:42:02:
ac:80:99:89:de:59:23:5b:29:71:c9:58:a7:9b:5c:
20:47:e2:c0:de:f1:ed:23:f5:be:25:7d:53:63:77:
65:95:88:46:fb:cc:d3:c1:bd:86:33:85:6d:d0:9e:
2b:61:38:e7:a9:27:ba:a8:86:c1:19:ee:23:69:51:
a6:06:22:12:f7:0d:2d:63:a2:9f:f3:32:d3:e5:df:
f9:58:80:ce:f5:65:2f:20:03:b8:32:32:8a:28:31:
dd:68:18:41:83:88:e1:88:14:69:af:bb:0a:7e:a6:
e2:4f:de:8a:91:f0:11:5f:a4:66:ba:28:e5:3c:f5:
3f:41:39:69:f4:79:af:07:50:d6:3f:26:28:01:c0:
3c:ad:52:9d:ee:15:d1:83:fc:7d:56:af:47:1c:2c:
1b:be:5a:37:a3:0f:78:2b:80:ec:0d:84:c3:ab:c3:
a7:b6:d4:87:06:45:2e:19:d9:9a:8f:74:b4:57:36:
30:82:87:bf:25:de:7d:24:62:2d:42:06:e9:6a:88:
5c:ac:b2:f1:d6:06:a6:68:35:c3:0d:72:17:3c:3c:
37:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:91:5E:35:41:3F:05:07:23:A2:0C:52:5C:84:ED:C9:64:BB:7E:15
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS200394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8eb0::/44
Signature Algorithm: sha256WithRSAEncryption
11:6b:1e:5e:e1:00:7d:be:d1:56:49:3e:36:49:9f:99:db:b7:
d1:ec:31:7e:1e:3c:a0:f8:04:5e:6b:9b:c7:ef:8f:b8:20:4d:
f5:12:a2:76:e8:b7:4d:01:44:35:a3:c7:fc:4c:55:0a:ec:55:
48:be:4b:e4:63:69:32:05:83:cd:db:15:a2:3a:fe:b1:78:5b:
9c:ae:09:5a:e7:46:ed:db:d4:df:d7:8a:7b:a0:cb:16:aa:33:
04:c6:54:e3:79:37:a7:66:2f:7e:d1:63:c2:4b:8a:46:50:20:
d0:1a:22:3e:fd:fc:57:75:cb:90:e7:91:2f:52:15:70:77:98:
1b:83:50:e5:e7:fe:7e:b9:13:90:49:42:74:39:cd:6b:f4:8c:
25:f5:f5:d7:9e:78:f5:b7:69:6e:15:72:8b:eb:24:7b:2f:58:
09:d3:34:1e:b7:c4:06:9a:b2:0a:55:f7:ac:7c:ca:20:05:d4:
a8:dc:a8:c1:86:3e:0b:f7:1a:24:54:bc:b3:c8:1a:00:23:c5:
64:d2:0c:f4:84:eb:8c:94:b1:87:88:47:5e:bd:87:80:81:f2:
ff:e6:b0:b5:5b:96:71:a5:1c:ae:7d:53:3f:54:62:a8:53:63:
8b:2a:4b:cf:d5:b8:3b:e3:4a:23:e2:ee:ad:0c:07:b5:38:c4:
32:db:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-ams.rpki-client.org