Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: bs6vbh/esCgiYtmfi23Onczx1BsK6YyPAOxsY3HXdBk=
Subject key identifier: E4:19:6E:57:31:61:42:3F:38:E6:2D:21:73:F4:71:53:01:77:4C:9B
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 409AEEAC6307CEA390BED262B9E20D842659834E
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS31898.roa
Signing time: Mon 31 Jul 2023 09:21:42 +0000
ROA not before: Mon 31 Jul 2023 09:16:42 +0000
ROA not after: Mon 29 Jul 2024 09:21:42 +0000
asID: 31898
IP address blocks: 194.116.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9a:ee:ac:63:07:ce:a3:90:be:d2:62:b9:e2:0d:84:26:59:83:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Jul 31 09:16:42 2023 GMT
Not After : Jul 29 09:21:42 2024 GMT
Subject: CN=E4196E573161423F38E62D2173F4715301774C9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:6f:cb:48:f0:61:dc:13:74:b6:51:c3:39:
b9:ad:10:fe:3f:11:43:dc:c0:a1:e8:9f:1e:a5:2b:
03:5c:82:c4:de:e7:41:6e:8f:4a:4f:dd:d3:ef:61:
22:3c:f0:7b:33:1b:44:6b:dd:ef:3d:02:eb:c6:fe:
19:bb:aa:2a:c2:e5:15:58:f0:46:7e:fa:d9:0b:da:
d8:09:e2:bb:71:6c:97:69:6c:73:f2:27:71:e5:f3:
92:f7:df:1e:6c:88:a2:b3:20:43:1a:b8:18:e5:d3:
54:15:75:de:8c:f7:ab:01:dd:9d:3c:bd:78:51:d4:
a4:e7:6d:13:f9:18:8d:c1:69:04:67:c5:36:46:2a:
b9:58:2d:f1:e1:17:6a:ed:2f:80:61:3d:5c:74:d1:
09:37:4f:5b:b2:e2:2b:92:19:6d:c6:1f:e4:c4:0c:
96:ec:75:2b:79:a3:03:aa:86:b0:ad:d9:ad:53:3b:
fa:2a:bb:ec:52:29:df:0b:63:31:6e:75:0f:ff:a7:
3c:3d:36:97:80:af:a0:1b:7b:1f:f4:38:06:a2:dc:
2d:00:74:9e:04:14:54:d7:06:36:f9:b5:aa:53:67:
40:35:92:e4:cd:9d:d2:e2:98:35:7f:8f:de:ac:47:
ec:63:81:a8:bb:f8:10:28:87:95:0d:58:e9:ae:64:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:19:6E:57:31:61:42:3F:38:E6:2D:21:73:F4:71:53:01:77:4C:9B
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b2:62:5e:14:1b:85:e1:fc:85:d8:b6:ee:19:ee:ff:9f:e1:
14:8d:0f:d4:71:01:b0:35:a4:15:34:16:0b:ce:ef:5a:93:8a:
e3:86:e1:14:f1:41:7a:dc:2d:e0:06:f7:46:10:5a:21:7f:f9:
dd:db:09:dd:3d:f9:2b:80:0f:fe:4e:68:6e:bd:24:76:c1:bd:
16:c7:4e:0c:9b:50:6e:73:9d:6c:e8:26:16:c7:fe:d0:43:96:
b5:71:ec:c0:62:35:2e:40:55:3a:34:55:c8:cd:2b:80:db:34:
67:cd:e2:2f:e4:9e:7c:de:55:47:e2:14:2f:54:19:5b:cd:4d:
31:03:5e:2a:5c:b3:3b:c7:9e:59:09:b8:61:b7:09:61:02:40:
3c:a0:16:a0:b2:46:fa:47:66:ea:3f:6d:af:eb:0a:4c:d8:a7:
a3:f4:4a:3e:8b:e1:7b:8d:da:32:72:01:b2:0e:83:b1:6d:67:
e7:41:1e:68:1c:73:7b:96:dd:59:9c:66:79:4a:3a:72:2e:18:
d0:b7:45:09:67:1c:df:08:b5:cf:fe:e0:0c:c4:5f:5c:72:04:
51:ed:d8:92:c8:71:91:96:3c:4d:aa:8f:e6:78:6c:39:00:0b:
7d:8f:f1:37:81:a5:50:46:3a:6f:e7:89:db:68:6b:72:c8:76:
c1:5d:44:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 23:31:21 2023 by rpki-client on console-ams.rpki-client.org