Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/Simple/2/323030313a6466323a343563303a3a2f34382d3438203d3e20393435.roa
File: 323030313a6466323a343563303a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier: hIOX4h7HIZwdR7RTGVkOBcQdPjT5KE93f1k2KY0A41o=
Subject key identifier: FD:80:7C:E2:7E:4E:28:B4:61:18:87:66:21:74:F2:60:93:1E:F2:DA
Certificate issuer: /CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9
Certificate serial: 75207A59BBCE45C14D3DD2CDC5725291B07D64BC
Authority key identifier: 70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer
Subject info access: rsync://rpki.co/repo/Simple/2/323030313a6466323a343563303a3a2f34382d3438203d3e20393435.roa
Signing time: Mon 09 Sep 2024 05:22:47 +0000
ROA not before: Mon 09 Sep 2024 05:17:47 +0000
ROA not after: Mon 08 Sep 2025 05:22:47 +0000
asID: 945
IP address blocks: 2001:df2:45c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 03 Oct 2024 20:15:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:20:7a:59:bb:ce:45:c1:4d:3d:d2:cd:c5:72:52:91:b0:7d:64:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9
Validity
Not Before: Sep 9 05:17:47 2024 GMT
Not After : Sep 8 05:22:47 2025 GMT
Subject: CN=FD807CE27E4E28B4611887662174F260931EF2DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:d5:48:87:c0:3e:53:cb:69:fb:af:41:b7:
3e:a8:85:1d:5d:1b:e9:94:6e:fc:ed:68:35:86:4e:
9f:80:97:ee:cb:d9:7f:c4:e5:86:40:69:86:d5:7c:
0c:ca:97:2e:df:bd:ae:f2:4d:0e:41:e1:54:5c:3e:
e0:e7:e3:60:ec:8e:64:32:3d:89:e2:dc:42:da:91:
67:46:0f:5b:2f:f7:85:68:c4:72:71:be:c0:0c:f4:
33:4c:28:12:40:0d:11:8a:37:2e:61:e8:e8:ba:17:
06:3f:31:a3:4a:87:8f:41:d9:b9:ca:8e:9e:f0:e7:
3e:46:ff:de:89:34:5d:4e:78:74:46:02:bb:85:e0:
e1:28:2a:40:e3:32:76:89:96:5c:bb:d4:7f:38:16:
11:57:5c:92:d8:5d:91:96:52:4a:09:28:92:20:1d:
1d:40:a9:96:d1:bb:3e:df:11:bd:37:b5:55:23:e0:
91:df:63:c7:82:db:43:f9:a2:60:da:18:d6:54:99:
36:04:c0:3a:ac:51:cb:6d:e3:8e:a1:5f:4f:6d:00:
06:92:72:9f:e5:14:e1:2c:db:95:b0:c8:40:a5:97:
ef:ff:93:aa:22:6b:28:2c:a6:06:0c:99:6a:5d:3f:
15:b7:56:74:90:9e:92:49:1c:fe:d7:d0:52:5d:e4:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:80:7C:E2:7E:4E:28:B4:61:18:87:66:21:74:F2:60:93:1E:F2:DA
X509v3 Authority Key Identifier:
keyid:70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Simple/2/323030313a6466323a343563303a3a2f34382d3438203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:45c0::/48
Signature Algorithm: sha256WithRSAEncryption
46:79:a9:f7:18:fb:0c:69:14:c9:7c:ee:b2:d8:7b:35:0b:22:
df:9b:ad:92:37:47:cb:fc:bf:97:2f:0c:a3:00:35:63:92:1f:
ce:4c:e1:46:d2:e9:85:43:d2:9a:fb:fd:99:40:7f:8d:82:71:
1d:22:81:ed:a4:05:7c:9f:3b:65:dc:18:4d:cc:b0:3c:d1:f1:
55:c1:b8:7b:39:21:25:fd:1e:9b:b5:8d:88:de:3b:d2:ff:a3:
b9:3b:ce:a6:ba:47:b0:5c:89:79:0d:de:a1:10:15:5e:9d:ce:
cf:aa:09:2e:7d:f6:9b:4f:26:6a:6e:3c:6d:50:8a:5a:a9:1c:
58:96:9e:5d:e6:fc:bb:22:ac:ce:8f:c1:cd:0b:22:f9:36:35:
52:a6:52:a9:5f:04:93:a6:a1:54:60:e4:b4:c8:39:a7:4e:63:
f7:38:14:17:c9:ec:f6:98:17:60:4c:f0:c3:d8:e7:45:ea:2c:
c7:41:ef:27:0d:60:53:d8:f5:9f:48:cb:1c:67:eb:a6:6b:3b:
d3:ac:d9:42:e3:f9:44:48:fe:29:cc:36:16:35:aa:75:b6:76:
ad:97:92:56:15:0c:09:73:34:c7:33:92:4a:81:5f:38:a1:b2:
43:40:d3:f2:9d:cd:52:70:2c:3f:0f:fe:44:1d:b5:9c:20:5a:
52:1c:18:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 23:28:34 2024 by rpki-client on console-ams.rpki-client.org