Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS7719.roa
File: AS7719.roa (raw, json)
Hash identifier: D0K/lLnsI7ctQu0FoTDhsazuI+hqGFQACETp2CKgFF8=
Subject key identifier: 5E:B5:9F:D7:B0:BA:26:66:1B:ED:6A:CF:65:B1:D6:F5:FB:D9:29:19
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 6E009A39BCF702C93A34DA45B7F84AB5DB9CB4A4
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS7719.roa
Signing time: Wed 06 Sep 2023 09:29:46 +0000
ROA not before: Wed 06 Sep 2023 09:24:46 +0000
ROA not after: Wed 04 Sep 2024 09:29:46 +0000
asID: 7719
IP address blocks: 2001:67c:a9c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:00:9a:39:bc:f7:02:c9:3a:34:da:45:b7:f8:4a:b5:db:9c:b4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Sep 6 09:24:46 2023 GMT
Not After : Sep 4 09:29:46 2024 GMT
Subject: CN=5EB59FD7B0BA26661BED6ACF65B1D6F5FBD92919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:fc:f4:27:e7:ff:0b:da:ec:42:b0:c6:fc:
b2:8c:1b:7d:7a:c1:07:dd:bc:f0:d8:11:28:4a:40:
74:e7:ee:b3:c9:7d:fd:91:4d:d1:91:c2:f2:49:30:
3e:9a:35:4c:4c:3c:da:2d:fa:28:fb:ee:c2:29:c9:
f8:33:fe:ca:ef:cc:ee:28:d4:a9:94:8c:26:d1:0d:
c2:f6:f4:f4:be:c8:dd:83:9f:b7:8e:ef:08:f7:0f:
74:dd:79:67:12:c8:f0:04:a8:df:98:93:02:9a:f8:
86:53:c6:c8:26:4d:29:c3:83:70:bc:6a:29:9a:c7:
59:77:76:d7:7a:aa:92:94:a1:45:13:3b:f1:74:b2:
37:a8:cd:75:e8:44:c8:84:c7:eb:62:a6:fd:dc:0b:
5c:62:e9:85:e9:fd:8f:e5:c2:47:18:82:e6:58:59:
59:be:87:c4:d0:50:d9:a9:2b:57:5d:14:84:c9:ed:
40:47:41:8c:d5:11:df:1c:30:58:35:94:cf:7f:a3:
6d:e2:2f:71:28:9c:39:87:f1:62:7e:4d:be:dd:80:
3e:08:16:70:fe:11:75:af:be:b6:8a:9d:b6:0a:b1:
bb:a7:b7:83:ac:8d:36:63:76:11:74:18:5e:11:9d:
ab:4c:70:ed:0a:d5:f3:04:a0:02:4b:16:92:45:82:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B5:9F:D7:B0:BA:26:66:1B:ED:6A:CF:65:B1:D6:F5:FB:D9:29:19
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS7719.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a9c::/48
Signature Algorithm: sha256WithRSAEncryption
d2:58:43:05:b1:46:19:84:8c:46:11:7b:aa:7f:13:77:29:5e:
fd:8e:d4:75:84:79:38:42:c3:1d:43:ab:9b:68:ff:7a:fa:f7:
f1:35:02:cf:87:63:37:b5:db:3a:38:7d:ec:0e:c4:70:b2:04:
b0:61:a9:41:fd:52:98:e6:8e:b5:81:d0:b7:e8:2b:f8:60:45:
d8:c8:2d:33:16:ba:33:a4:13:a7:41:5c:bb:84:4a:1d:c7:60:
08:68:1a:d3:3c:28:7b:c7:44:b7:3a:01:34:0c:c6:19:19:7d:
f3:27:6b:d5:07:9e:b1:20:10:91:6b:45:18:86:6b:fc:b0:90:
31:7b:a8:dd:4e:c5:c6:13:4e:09:9d:43:b0:fc:1c:90:7b:ef:
c0:f8:10:80:5e:33:69:a2:20:80:1d:65:3e:6b:3e:61:41:da:
0a:c7:5d:4c:be:e8:95:83:51:c0:03:a2:48:da:2d:56:02:ac:
3d:9a:10:09:f7:e9:fe:96:f0:5c:0a:15:63:07:76:e5:ac:41:
30:18:20:9d:10:2f:34:9b:9a:77:a5:75:55:7a:67:06:9b:2f:
c5:ea:48:4a:11:9a:27:3e:57:8f:7e:58:7f:87:da:21:19:ea:
29:2c:62:73:9d:64:fb:09:ab:af:0c:9c:8b:7e:a3:49:1d:f5:
1a:b0:33:68
-----BEGIN CERTIFICATE-----
MIIEkTCCA3mgAwIBAgIUbgCaObz3Ask6NNpFt/hKtductKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA5MDYwOTI0NDZaFw0yNDA5MDQwOTI5NDZaMDMxMTAvBgNV
BAMTKDVFQjU5RkQ3QjBCQTI2NjYxQkVENkFDRjY1QjFENkY1RkJEOTI5MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcJ/z0J+f/C9rsQrDG/LKMG316
wQfdvPDYEShKQHTn7rPJff2RTdGRwvJJMD6aNUxMPNot+ij77sIpyfgz/srvzO4o
1KmUjCbRDcL29PS+yN2Dn7eO7wj3D3TdeWcSyPAEqN+YkwKa+IZTxsgmTSnDg3C8
aimax1l3dtd6qpKUoUUTO/F0sjeozXXoRMiEx+tipv3cC1xi6YXp/Y/lwkcYguZY
WVm+h8TQUNmpK1ddFITJ7UBHQYzVEd8cMFg1lM9/o23iL3EonDmH8WJ+Tb7dgD4I
FnD+EXWvvraKnbYKsbunt4OsjTZjdhF0GF4RnatMcO0K1fMEoAJLFpJFglxLAgMB
AAGjggGbMIIBlzAdBgNVHQ4EFgQUXrWf17C6JmYb7WrPZbHW9fvZKRkwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
NS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlGM0U2LmNlcjBD
BggrBgEFBQcBCwQ3MDUwMwYIKwYBBQUHMAuGJ3JzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzEvQVM3NzE5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAqcMA0GCSqGSIb3DQEBCwUA
A4IBAQDSWEMFsUYZhIxGEXuqfxN3KV79jtR1hHk4QsMdQ6ubaP96+vfxNQLPh2M3
tds6OH3sDsRwsgSwYalB/VKY5o61gdC36Cv4YEXYyC0zFrozpBOnQVy7hEodx2AI
aBrTPCh7x0S3OgE0DMYZGX3zJ2vVB56xIBCRa0UYhmv8sJAxe6jdTsXGE04JnUOw
/ByQe+/A+BCAXjNpoiCAHWU+az5hQdoKx11MvuiVg1HAA6JI2i1WAqw9mhAJ9+n+
lvBcChVjB3blrEEwGCCdEC80m5p3pXVVemcGmy/F6khKEZonPlePflh/h9ohGeop
LGJznWT7CauvDJyLfqNJHfUasDNo
-----END CERTIFICATE-----
Generated at Fri Sep 15 03:40:36 2023 by rpki-client on console-fra.rpki-client.org