Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/3/3231362e3134362e32392e302f32342d3234203d3e20323030383237.roa
File: 3231362e3134362e32392e302f32342d3234203d3e20323030383237.roa (raw, json)
Hash identifier: gbZQUBOG0ZhmuNh9W6UhtaqnTEcEzQ9LtE+jbG/v/dc=
Subject key identifier: 7C:43:B8:37:84:89:65:CA:9B:97:14:7A:FD:AC:A4:A3:A7:E8:94:95
Certificate issuer: /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial: 2C38F78BDC295E87001619193E3392DEC150491F
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access: rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access: rsync://rpki.co/repo/AS945/3/3231362e3134362e32392e302f32342d3234203d3e20323030383237.roa
Signing time: Mon 10 Apr 2023 03:31:31 +0000
ROA not before: Mon 10 Apr 2023 03:26:31 +0000
ROA not after: Mon 08 Apr 2024 03:31:31 +0000
asID: 200827
IP address blocks: 216.146.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:38:f7:8b:dc:29:5e:87:00:16:19:19:3e:33:92:de:c1:50:49:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Validity
Not Before: Apr 10 03:26:31 2023 GMT
Not After : Apr 8 03:31:31 2024 GMT
Subject: CN=7C43B837848965CA9B97147AFDACA4A3A7E89495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:06:b8:db:4f:8d:40:68:11:48:02:e5:9d:
25:af:21:bc:e4:41:15:5a:d9:20:a7:31:9f:3c:86:
85:b3:0f:22:e7:95:8c:d4:bb:59:fc:98:b6:4c:94:
46:ec:8a:29:4c:44:3e:9f:fe:f1:5d:b8:9e:e8:df:
03:6a:11:74:14:c9:26:2c:24:50:c5:81:0d:9a:fd:
36:e9:64:49:54:b2:64:e5:d7:90:f6:18:ba:36:19:
d2:55:23:dd:c9:79:8d:a5:01:ca:2f:08:6c:a1:8a:
d2:f2:35:e8:06:1a:5e:29:06:8f:1f:9b:81:4b:81:
e7:69:e9:d1:6d:c8:4f:83:d4:a4:61:76:37:f2:b4:
77:00:f2:c3:99:f1:bb:b2:11:d8:40:6f:14:2c:17:
82:86:c7:21:f7:c2:a7:0d:62:68:fd:6d:f7:d2:ac:
fd:46:30:2a:80:35:be:e0:ad:83:4e:ed:63:e3:33:
0a:76:0c:71:a5:10:e3:b1:74:4f:46:6f:61:2e:41:
9b:05:f3:aa:12:fb:c0:34:53:55:33:c7:08:d4:62:
97:8c:f7:03:70:ee:d6:0f:22:af:3e:2c:f3:c0:49:
64:b3:44:77:85:57:64:02:e7:4d:c8:93:a1:da:3a:
75:17:5e:aa:ef:74:03:be:af:08:7a:7d:d4:b3:aa:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:43:B8:37:84:89:65:CA:9B:97:14:7A:FD:AC:A4:A3:A7:E8:94:95
X509v3 Authority Key Identifier:
keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/3/3231362e3134362e32392e302f32342d3234203d3e20323030383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.29.0/24
Signature Algorithm: sha256WithRSAEncryption
93:59:79:14:e4:e3:98:8a:c9:dd:ec:3a:b9:d7:aa:1f:6f:e1:
3a:02:52:f3:d0:cc:e5:cc:23:9a:2d:22:02:15:61:d5:db:e0:
90:96:49:f4:5f:a8:4e:d6:21:37:7d:5e:9f:29:31:7f:9a:47:
b6:a0:4c:64:f7:77:91:de:86:39:e2:ec:f6:48:95:38:d2:58:
e6:6c:41:34:c9:11:1a:2b:4e:db:ab:2f:ea:bb:19:e4:1b:7f:
89:1a:40:0d:9c:92:6a:f7:c4:85:fd:06:0c:c3:35:19:28:fa:
e9:5f:43:da:f1:a8:9c:c4:77:3d:6e:9a:30:a3:3b:05:bd:d4:
c3:e2:7f:be:a5:9a:5e:67:e7:69:1e:e2:b6:32:31:61:0d:3b:
b1:9b:4f:66:37:9a:de:5a:df:43:15:a0:fb:76:5e:01:78:40:
80:b3:23:6d:86:e1:bf:82:53:4e:ed:b3:b1:28:78:5d:44:61:
fe:33:7b:93:b3:b3:d7:16:3c:68:4e:04:41:c9:cf:7c:19:67:
db:1c:19:5e:23:0d:0d:4f:dc:4b:05:99:be:df:31:5b:9d:89:
f6:ac:d3:b3:86:7a:a9:82:24:9d:f8:96:09:e3:f5:c9:8a:a1:
2e:d8:89:42:d1:6f:50:67:8f:60:36:47:80:f6:b8:c4:90:d2:
62:1b:6d:9b
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIULDj3i9wpXocAFhkZPjOS3sFQSR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk5RTM2NzdGOEUyREVGMkE1ODM3QzNENEE3Njg2QzdD
ODlCNTFDNjAeFw0yMzA0MTAwMzI2MzFaFw0yNDA0MDgwMzMxMzFaMDMxMTAvBgNV
BAMTKDdDNDNCODM3ODQ4OTY1Q0E5Qjk3MTQ3QUZEQUNBNEEzQTdFODk0OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XQa420+NQGgRSALlnSWvIbzk
QRVa2SCnMZ88hoWzDyLnlYzUu1n8mLZMlEbsiilMRD6f/vFduJ7o3wNqEXQUySYs
JFDFgQ2a/TbpZElUsmTl15D2GLo2GdJVI93JeY2lAcovCGyhitLyNegGGl4pBo8f
m4FLgedp6dFtyE+D1KRhdjfytHcA8sOZ8buyEdhAbxQsF4KGxyH3wqcNYmj9bffS
rP1GMCqANb7grYNO7WPjMwp2DHGlEOOxdE9Gb2EuQZsF86oS+8A0U1UzxwjUYpeM
9wNw7tYPIq8+LPPASWSzRHeFV2QC503Ik6HaOnUXXqrvdAO+rwh6fdSzqgMTAgMB
AAGjggHKMIIBxjAdBgNVHQ4EFgQUfEO4N4SJZcqblxR6/ayko6folJUwHwYDVR0j
BBgwFoAU2Z42d/ji3vKlg3w9SnaGx8ibUcYwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzMvRDk5RTM2
NzdGOEUyREVGMkE1ODM3QzNENEE3Njg2QzdDODlCNTFDNi5jcmwwZgYIKwYBBQUH
AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1c3Qv
MC9EOTlFMzY3N0Y4RTJERUYyQTU4MzdDM0Q0QTc2ODZDN0M4OUI1MUM2LmNlcjB1
BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5jOi8vcnBraS5jby9yZXBv
L0FTOTQ1LzMvMzIzMTM2MmUzMTM0MzYyZTMyMzkyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzMjMwMzAzODMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADYkh0wDQYJKoZIhvcNAQELBQAD
ggEBAJNZeRTk45iKyd3sOrnXqh9v4ToCUvPQzOXMI5otIgIVYdXb4JCWSfRfqE7W
ITd9Xp8pMX+aR7agTGT3d5Hehjni7PZIlTjSWOZsQTTJERorTturL+q7GeQbf4ka
QA2ckmr3xIX9BgzDNRko+ulfQ9rxqJzEdz1umjCjOwW91MPif76lml5n52ke4rYy
MWENO7GbT2Y3mt5a30MVoPt2XgF4QICzI22G4b+CU07ts7EoeF1EYf4ze5Ozs9cW
PGhOBEHJz3wZZ9scGV4jDQ1P3EsFmb7fMVudifas07OGeqmCJJ34lgnj9cmKoS7Y
iULRb1Bnj2A2R4D2uMSQ0mIbbZs=
-----END CERTIFICATE-----
Generated at Thu Aug 24 11:07:12 2023 by rpki-client on console-ams.rpki-client.org