Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e203331383938.roa
File: 3231362e3134362e32382e302f32332d3233203d3e203331383938.roa (raw, json)
Hash identifier: hbs4uYF6WG3s+RXBwWE3gkh/aYKb+1tM14piZ1qUEUI=
Subject key identifier: 6B:27:4F:44:E9:35:4B:1E:27:6B:47:2B:5D:AA:6C:73:37:0D:E6:C5
Certificate issuer: /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial: 57DF88D8708206A00BDFDBEF5AEEA94E64A0B8DE
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access: rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access: rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e203331383938.roa
Signing time: Tue 11 Jul 2023 22:40:20 +0000
ROA not before: Tue 11 Jul 2023 22:35:20 +0000
ROA not after: Tue 09 Jul 2024 22:40:20 +0000
asID: 31898
IP address blocks: 216.146.28.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:df:88:d8:70:82:06:a0:0b:df:db:ef:5a:ee:a9:4e:64:a0:b8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Validity
Not Before: Jul 11 22:35:20 2023 GMT
Not After : Jul 9 22:40:20 2024 GMT
Subject: CN=6B274F44E9354B1E276B472B5DAA6C73370DE6C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:99:60:cc:41:35:49:99:e4:63:95:f6:b9:ac:
38:26:c9:67:ba:94:a8:0c:01:88:ee:52:1a:3c:a8:
18:d9:38:81:d4:26:98:b8:b4:5c:83:10:ae:d0:14:
c0:2b:58:5f:03:aa:f0:01:89:83:02:7f:a6:cf:91:
ad:0a:13:3a:a7:d7:50:5b:97:80:67:9d:f6:13:58:
a2:5a:40:43:8b:5b:60:3e:ea:7f:1b:fa:ec:21:7c:
48:8a:00:c4:ab:9a:b2:bd:c1:cc:17:be:15:45:8c:
bc:da:a5:1b:62:c4:d9:d7:46:db:28:21:00:c6:25:
1c:d2:0e:bd:1e:3e:fa:3f:a5:50:4e:cc:58:c3:80:
c0:2e:56:c8:58:81:7e:f5:b4:eb:dc:1e:a7:a3:6b:
12:fa:32:42:88:57:fc:dd:08:cf:e1:3c:68:1b:c9:
61:e3:66:40:94:aa:39:80:47:6f:50:d7:b4:22:7f:
34:b2:31:d6:3f:47:16:36:8e:3e:e3:5d:af:ec:c7:
b3:eb:5e:67:1b:d7:e7:11:70:9f:4c:ce:56:20:d7:
5d:fd:6e:05:e1:88:c1:11:86:ba:2c:4d:77:50:cd:
cb:54:cb:b0:12:ba:40:49:fd:3e:d1:f4:cb:0f:72:
a3:09:c5:71:76:b2:07:c8:2d:b5:b4:90:73:a8:6e:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:27:4F:44:E9:35:4B:1E:27:6B:47:2B:5D:AA:6C:73:37:0D:E6:C5
X509v3 Authority Key Identifier:
keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/3/3231362e3134362e32382e302f32332d3233203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.28.0/23
Signature Algorithm: sha256WithRSAEncryption
71:21:03:4d:f4:25:66:49:d8:b1:92:cb:b0:e0:70:42:57:5f:
e2:e7:28:f8:4b:55:19:96:65:95:67:17:5b:25:0f:85:68:43:
4a:22:65:f1:f6:d8:c6:a1:bb:8e:c2:d0:66:38:c8:85:00:d7:
a1:f1:2d:fb:40:68:a7:b5:e4:0a:09:07:4c:9e:c7:fe:ac:9b:
24:52:2c:b1:f1:9d:ce:03:85:75:9a:90:29:2e:79:a2:50:13:
a7:d3:d5:49:22:5b:69:8d:e4:4b:ca:af:36:cf:69:71:f0:ef:
13:72:4d:72:15:2f:f7:bb:29:a2:c7:28:42:c2:d3:ea:c4:80:
51:aa:f1:99:96:8a:f6:82:c6:fb:c6:f4:7f:50:dc:7d:c1:e9:
49:37:61:9d:f1:11:ed:ae:a7:e1:40:82:08:a4:ca:27:55:27:
79:cc:9b:4b:fa:6b:9b:2b:38:02:79:56:d0:e3:f4:b9:91:e0:
a3:5b:e6:48:a9:83:25:5d:8e:6f:ab:06:88:af:ad:1d:1f:8b:
65:c7:be:2f:2e:00:c6:1e:5e:34:7f:b6:0e:5d:7f:0e:d5:c7:
40:f3:76:1a:1d:05:cf:3d:62:62:44:af:eb:b8:66:d9:74:08:
10:ce:36:ff:88:dc:b2:28:19:20:b7:91:c8:5d:85:6a:2b:90:
cd:19:a8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 06:42:12 2023 by rpki-client on console-fra.rpki-client.org