Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/10/32332e3133382e3233322e302f32342d3234203d3e203632383533.roa
File: 32332e3133382e3233322e302f32342d3234203d3e203632383533.roa (raw, json)
Hash identifier: Ewpfj2zrN8eLUm+Jcmmr8y1dfsha1B+rpsh9IgBd7nU=
Subject key identifier: 39:25:7C:1C:3D:6B:6F:D1:C3:4B:AA:E2:45:97:A7:BF:6E:1C:32:1D
Certificate issuer: /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial: 144D234C6502CFC9423C4F555E183896B570F811
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access: rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access: rsync://rpki.co/repo/AS945/10/32332e3133382e3233322e302f32342d3234203d3e203632383533.roa
Signing time: Mon 10 Apr 2023 03:31:27 +0000
ROA not before: Mon 10 Apr 2023 03:26:27 +0000
ROA not after: Mon 08 Apr 2024 03:31:27 +0000
asID: 62853
IP address blocks: 23.138.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:4d:23:4c:65:02:cf:c9:42:3c:4f:55:5e:18:38:96:b5:70:f8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Validity
Not Before: Apr 10 03:26:27 2023 GMT
Not After : Apr 8 03:31:27 2024 GMT
Subject: CN=39257C1C3D6B6FD1C34BAAE24597A7BF6E1C321D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:f1:a0:d7:9c:f3:3c:08:b0:da:fc:23:df:
a1:74:47:95:c2:1f:55:98:2a:aa:cc:65:67:80:a3:
8e:5a:b3:73:a2:ee:72:80:fe:5a:72:46:33:c7:13:
ac:17:f1:c9:b1:c3:64:3a:3d:e8:98:6f:9d:51:1c:
00:a0:9e:46:5f:19:05:2b:0c:29:eb:68:d0:7c:5f:
b4:c6:b5:b9:27:8e:f5:b1:e3:15:d6:d2:ae:e6:85:
3c:d3:eb:75:ba:9a:5f:f5:82:38:50:6b:67:7f:55:
92:8d:96:71:f3:55:83:92:f6:58:52:ec:5e:c9:66:
f0:00:3c:45:03:43:4e:21:5c:ad:b9:45:e2:5a:e5:
fe:8f:49:5b:4c:9f:98:47:6a:49:68:3b:ba:af:1f:
f5:54:1b:ba:53:62:9c:c5:0d:93:f9:e5:7a:fd:2e:
38:6b:4f:79:47:3c:32:e2:cd:85:ba:f4:ea:86:23:
86:79:dc:33:a5:db:f1:92:e2:9c:84:37:6c:3c:af:
e8:4b:7c:89:bb:95:6b:66:d4:f2:b7:89:2f:6c:b0:
8e:9d:d4:18:47:42:ce:9a:6c:4f:d0:4d:cf:51:12:
fe:dd:2f:04:56:57:47:d8:e1:b5:9c:84:86:4a:37:
68:7c:93:6c:ae:67:e6:55:fd:dc:61:96:8d:c6:60:
21:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:25:7C:1C:3D:6B:6F:D1:C3:4B:AA:E2:45:97:A7:BF:6E:1C:32:1D
X509v3 Authority Key Identifier:
keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/10/32332e3133382e3233322e302f32342d3234203d3e203632383533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.138.232.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:02:20:1e:6f:50:cc:76:b4:ab:1d:3d:8b:68:07:92:a2:e4:
97:d7:e2:64:af:b1:66:f3:78:76:21:33:99:c7:3d:06:9c:6c:
96:96:af:2b:41:39:bf:d3:3c:4d:06:a3:fc:36:a1:1d:8c:0d:
f4:45:db:d8:f8:10:af:f2:d9:a3:e6:d8:20:b1:36:5d:a6:bb:
25:d5:fc:67:ef:4f:45:bc:18:12:9b:2b:d7:e3:14:da:9b:2b:
75:bb:59:09:47:98:2a:8b:88:98:70:ab:2a:9f:fc:37:db:af:
56:37:f7:29:d9:a2:63:45:2f:96:68:8e:0d:1d:c5:f5:35:21:
b7:68:b0:a8:e8:da:e1:c4:e1:68:57:bf:f1:7d:50:f8:e6:2f:
ed:9f:7b:fa:85:e6:7c:12:bd:9a:7f:78:07:a9:0d:2c:be:b1:
6d:fb:62:82:4e:ca:82:a5:3b:df:82:a3:c9:da:f3:e5:1a:38:
42:5b:16:46:7a:8c:8d:14:64:fc:1e:92:31:b8:d0:c5:d1:e4:
7f:19:a2:7d:9d:b7:de:c8:29:8e:84:be:25:7f:b6:23:94:64:
c3:2b:f5:92:63:0b:fc:4d:c4:09:e5:37:84:72:09:bd:50:b9:
f5:76:d8:65:2d:b5:5b:21:de:03:60:45:0f:75:c9:d2:70:1d:
24:e4:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 22:48:20 2023 by rpki-client on console-ams.rpki-client.org