Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Mlgt/2/326130353a646663373a393430303a3a2f33392d3339203d3e20323033333233.roa
File: 326130353a646663373a393430303a3a2f33392d3339203d3e20323033333233.roa (raw, json)
Hash identifier: uExjjLjql1MvlUHum6Objv+RZe3B5L6SVmdeEgjBY2I=
Subject key identifier: DF:FD:0B:FF:3F:BB:1B:C6:56:38:B3:97:5A:EF:E6:B8:42:28:7C:8F
Certificate issuer: /CN=3E0073E2C5B2A8D67388F2699EAE646AB0043B13
Certificate serial: 129CD95A212A9F28B1391413152E2FCAE3C2E258
Authority key identifier: 3E:00:73:E2:C5:B2:A8:D6:73:88:F2:69:9E:AE:64:6A:B0:04:3B:13
Authority info access: rsync://rpki.co/repo/AS205432/0/3E0073E2C5B2A8D67388F2699EAE646AB0043B13.cer
Subject info access: rsync://rpki.co/repo/Mlgt/2/326130353a646663373a393430303a3a2f33392d3339203d3e20323033333233.roa
Signing time: Sat 22 Apr 2023 11:25:03 +0000
ROA not before: Sat 22 Apr 2023 11:20:03 +0000
ROA not after: Sat 20 Apr 2024 11:25:03 +0000
asID: 203323
IP address blocks: 2a05:dfc7:9400::/39 maxlen: 39
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:9c:d9:5a:21:2a:9f:28:b1:39:14:13:15:2e:2f:ca:e3:c2:e2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0073E2C5B2A8D67388F2699EAE646AB0043B13
Validity
Not Before: Apr 22 11:20:03 2023 GMT
Not After : Apr 20 11:25:03 2024 GMT
Subject: CN=DFFD0BFF3FBB1BC65638B3975AEFE6B842287C8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:37:dd:5c:d1:15:1e:69:d9:57:82:7b:47:
8f:31:d7:9a:f3:bb:7f:d3:a6:1d:fd:c6:fe:5e:06:
ac:94:48:e0:f2:c5:a2:19:39:a6:52:dc:b8:93:bd:
52:0d:e0:d6:16:da:b5:d0:41:21:30:fe:d9:f5:dc:
77:3c:d1:2f:a4:b3:6f:ce:13:e2:53:5f:d3:31:91:
d2:37:0c:6a:ba:73:35:91:e0:04:d9:81:aa:4c:4e:
9a:2e:51:9a:67:ea:a7:26:3f:0f:56:8f:8d:21:28:
3b:93:86:b9:03:73:78:68:da:a9:be:e1:ba:78:fe:
8f:dd:a9:d3:39:86:1e:bf:59:e0:f8:be:85:25:cd:
d2:83:b6:b0:e3:4d:4d:bf:34:e6:44:1f:5c:b9:33:
e5:d7:12:4d:b2:2f:b1:90:3e:ca:cc:e0:c8:97:4d:
8b:c9:5c:86:73:f5:77:61:24:58:4a:de:53:dd:96:
ad:2f:86:5d:ea:3d:3f:00:e8:29:fa:d4:c1:87:92:
60:2d:66:14:1a:45:3b:60:8c:5c:ee:d3:8c:ff:e9:
d9:3f:af:69:53:47:a2:eb:2b:5c:7d:55:10:86:19:
3d:83:b4:69:91:76:5a:5d:a3:f5:55:99:73:cb:87:
b5:cd:9d:bf:06:58:86:dc:12:66:c5:18:83:4a:dc:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FD:0B:FF:3F:BB:1B:C6:56:38:B3:97:5A:EF:E6:B8:42:28:7C:8F
X509v3 Authority Key Identifier:
keyid:3E:00:73:E2:C5:B2:A8:D6:73:88:F2:69:9E:AE:64:6A:B0:04:3B:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Mlgt/2/3E0073E2C5B2A8D67388F2699EAE646AB0043B13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/3E0073E2C5B2A8D67388F2699EAE646AB0043B13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Mlgt/2/326130353a646663373a393430303a3a2f33392d3339203d3e20323033333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:9400::/39
Signature Algorithm: sha256WithRSAEncryption
6f:b6:a2:64:e0:4b:82:e4:af:1f:8b:2f:84:43:6b:45:d3:19:
38:00:b8:2d:ec:dc:42:99:2e:3a:70:15:45:82:88:a6:fc:72:
90:b2:52:35:f5:82:f5:1f:f6:53:ba:43:6d:f2:65:0d:02:c6:
8c:90:13:c4:b7:a8:cf:29:37:10:18:8b:0c:3f:8d:18:26:43:
6a:70:cf:0d:78:76:b5:dd:00:49:cf:f3:46:45:34:fd:1b:48:
d8:b2:4d:16:05:e1:be:36:d9:c1:a9:9b:67:d3:02:c0:d2:9b:
1c:5a:29:06:b2:10:ad:7a:56:bc:18:58:38:ef:cb:72:64:fd:
07:6a:5d:2b:39:94:92:27:e0:c1:5f:da:4c:60:97:8f:6f:96:
06:90:88:09:84:d9:73:fd:5e:9b:fe:f9:38:8c:d1:9d:fd:91:
49:b4:c1:cb:1b:cd:7a:12:08:aa:3c:bd:be:0f:77:b3:35:62:
8a:6b:26:7c:e4:b7:c1:e5:54:57:50:87:15:2c:2f:88:8b:fc:
4d:65:2b:c9:c0:14:e0:70:c8:ea:4d:8b:db:04:ad:af:5e:a3:
9b:47:c5:e0:8b:8a:ad:00:03:85:ac:72:46:fd:e1:b9:21:ac:
a8:1a:2d:95:f9:cc:49:1f:f6:69:34:86:3d:b6:8c:6b:65:c4:
e0:54:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 12 10:04:30 2023 by rpki-client on console-fra.rpki-client.org