Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e2031303132.roa
File: 3231362e3134362e32382e302f32332d3233203d3e2031303132.roa (raw, json)
Hash identifier: qWurMRGp8YKgoIFN+t0D/hGPMYTExkzMVqD4U1rjEg0=
Subject key identifier: F8:1E:2E:01:6E:8A:D6:74:F4:1B:87:E2:A8:8A:28:C1:5A:B8:BE:05
Certificate issuer: /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial: 0EB5CE37F81D0445D36CA6BAA5BBACF4DDD3BF55
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access: rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access: rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e2031303132.roa
Signing time: Thu 06 Jul 2023 07:31:35 +0000
ROA not before: Thu 06 Jul 2023 07:26:35 +0000
ROA not after: Thu 04 Jul 2024 07:31:35 +0000
asID: 1012
IP address blocks: 216.146.28.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:b5:ce:37:f8:1d:04:45:d3:6c:a6:ba:a5:bb:ac:f4:dd:d3:bf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Validity
Not Before: Jul 6 07:26:35 2023 GMT
Not After : Jul 4 07:31:35 2024 GMT
Subject: CN=F81E2E016E8AD674F41B87E2A88A28C15AB8BE05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:b2:b0:21:cf:9f:a5:26:0b:6a:02:36:21:
47:e0:61:e4:d2:2c:80:d6:b6:db:99:0c:7a:25:4b:
ca:71:b1:d1:4d:b5:cd:8c:3f:22:fb:23:c6:a5:fd:
f7:15:a4:06:f3:ea:29:b1:c5:bd:7d:c6:9c:bc:2a:
23:47:5b:73:ef:df:39:a5:24:8d:44:6d:a6:07:3e:
2f:4b:9f:7c:4b:f1:15:71:70:c3:49:59:9b:90:97:
ce:86:24:2d:e8:53:52:65:2e:bf:c7:44:cd:c0:39:
b7:9d:a7:06:71:f6:40:46:83:4c:8a:90:a3:7b:aa:
ff:98:72:b1:89:52:1c:63:25:28:5b:0d:c3:00:8a:
e7:3d:a2:27:34:7d:a9:aa:9a:40:ec:b9:62:47:df:
8f:2d:32:f7:58:39:76:da:60:84:1e:05:8e:1b:8b:
b0:d6:8b:b9:67:f0:21:2a:dd:54:a1:03:fc:69:42:
5f:4a:fa:40:ae:99:ea:5c:24:02:5a:f4:59:c0:9e:
bc:0d:4a:fb:14:4c:47:20:17:dd:dd:20:b1:f4:07:
40:14:25:37:b1:f3:73:dc:ad:1f:ea:80:97:27:99:
1c:5e:85:99:4c:1e:d0:ec:c6:2a:4c:c5:f5:ca:94:
4d:f7:cb:5f:d2:ab:c6:0a:bb:3d:25:b0:dd:82:aa:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1E:2E:01:6E:8A:D6:74:F4:1B:87:E2:A8:8A:28:C1:5A:B8:BE:05
X509v3 Authority Key Identifier:
keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e2031303132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.28.0/23
Signature Algorithm: sha256WithRSAEncryption
47:42:46:53:ba:ba:f2:32:5c:19:2a:27:2b:bc:69:f9:24:fa:
81:30:6a:64:de:e9:d7:d9:29:6e:a1:8a:f3:67:0a:e5:a0:4a:
d1:c2:2e:92:eb:9c:07:5f:74:22:32:6a:d4:93:22:54:d5:db:
f0:cf:23:e6:c6:43:94:ef:da:4b:73:17:bd:83:1e:b7:cd:37:
66:89:36:b3:1e:ca:9c:bd:57:a4:46:e1:85:2f:82:d1:67:3b:
5f:d5:07:9d:4f:67:49:93:6b:26:29:ea:97:53:9d:15:90:c8:
a2:74:78:c0:32:05:49:4a:e6:4b:c9:70:ba:c9:06:29:3c:04:
84:f6:10:9e:20:a1:2f:23:41:aa:09:9f:d8:96:2f:82:32:e7:
d4:c7:a3:05:a2:b5:8b:b5:a8:66:24:7f:0d:f7:f2:fc:8e:b8:
f1:32:7f:5c:3e:b7:6f:86:11:fe:2d:77:2c:fd:8e:22:f9:fc:
86:27:f9:bb:ad:ee:26:f0:7f:42:88:70:9f:b6:9c:ae:aa:db:
e4:73:b6:73:39:3b:c9:e2:94:1e:ed:bc:4a:de:40:43:f7:fe:
c0:97:e6:04:36:6e:5a:e4:58:88:9b:67:38:a9:31:60:62:84:
85:98:42:9e:96:27:77:d6:46:cb:64:1b:7c:ca:bd:06:5c:9d:
14:60:c1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 16:19:36 2023 by rpki-client on console-fra.rpki-client.org