Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133372e302f32342d3234203d3e2036313334.roa
File: 3138302e3233352e3133372e302f32342d3234203d3e2036313334.roa (raw, json)
Hash identifier: D7ky8ASEUmI5brENdCySR84TSiP9Qq7WFChCWHvBnvg=
Subject key identifier: 90:AB:C5:63:08:F9:70:EE:E4:A4:03:58:9D:F7:1F:CC:0E:AE:5A:CE
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 233926019419F77F977DDDF3B1BF918CE6DBF9F8
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133372e302f32342d3234203d3e2036313334.roa
Signing time: Wed 06 Dec 2023 17:32:50 +0000
ROA not before: Wed 06 Dec 2023 17:27:50 +0000
ROA not after: Wed 04 Dec 2024 17:32:50 +0000
asID: 6134
IP address blocks: 180.235.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 05:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:39:26:01:94:19:f7:7f:97:7d:dd:f3:b1:bf:91:8c:e6:db:f9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Dec 6 17:27:50 2023 GMT
Not After : Dec 4 17:32:50 2024 GMT
Subject: CN=90ABC56308F970EEE4A403589DF71FCC0EAE5ACE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:d8:7f:d4:03:a4:9f:ae:80:82:52:4c:0e:
c9:99:5b:c3:a1:9c:46:19:41:62:33:a9:49:d1:dd:
2e:73:e6:03:60:57:95:39:a1:72:2e:4e:af:0b:5f:
88:1a:73:eb:d4:ba:e5:6c:5f:8a:38:13:fb:8d:68:
2f:b1:f1:58:f1:e9:64:29:22:5f:77:24:f3:97:cc:
c1:1d:b2:5e:8f:52:a8:0a:2d:61:15:46:80:95:49:
44:9f:a9:06:38:f4:09:3a:a1:37:29:e8:f0:1a:e4:
06:9b:38:e3:a9:30:db:c5:02:85:95:cb:3a:1e:c4:
7f:28:bf:36:ee:8c:07:3c:84:89:c9:a6:24:f0:86:
4b:68:0b:38:ca:8b:d9:50:51:9c:65:ed:0e:a0:b6:
de:85:82:9b:75:eb:aa:f9:9a:3b:e2:10:54:07:e6:
66:05:51:3c:63:7a:97:99:95:13:4b:38:ba:72:9a:
6c:3c:55:34:77:1a:98:41:0b:a3:5c:8b:b2:e6:c2:
5e:ec:8c:2a:14:8a:84:9d:95:20:a4:8e:bd:d2:75:
41:c2:4d:53:aa:40:c8:fa:46:ee:3e:b7:85:80:8e:
ea:e4:12:0e:e5:8c:af:c9:97:74:58:e0:80:96:49:
84:b7:a6:04:3c:75:e2:06:6c:28:e8:a4:aa:1f:cd:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AB:C5:63:08:F9:70:EE:E4:A4:03:58:9D:F7:1F:CC:0E:AE:5A:CE
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133372e302f32342d3234203d3e2036313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.235.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:0f:93:56:19:ac:c1:ec:90:a5:e4:d6:cb:19:79:69:1f:40:
3f:29:0b:c6:f9:ef:8e:49:33:b4:04:da:9f:58:0f:ac:86:9a:
cc:67:2b:b7:a4:ef:04:45:a8:80:96:fa:77:9e:ef:e1:22:8c:
18:88:e6:17:fd:7c:d5:02:ca:7b:94:3a:35:4e:c5:4b:33:90:
d5:51:cc:fc:07:d5:6f:a9:aa:be:31:3a:59:78:04:ec:39:58:
0f:d0:db:17:d7:32:ad:df:5b:96:13:0b:77:a6:1a:d3:99:69:
2c:a7:db:31:9d:33:79:3e:a2:d3:1e:1b:7c:1f:bb:46:dd:69:
02:83:17:4e:e6:6c:19:fb:56:1c:7a:60:eb:f3:6b:06:28:92:
c8:d1:53:52:81:22:a3:08:06:cb:27:6e:70:ca:d2:aa:e1:6a:
52:be:e1:39:d9:c6:84:55:f3:82:11:e7:7c:a9:0b:52:db:44:
d9:7f:09:cf:40:7c:7d:17:93:a5:a5:db:be:ae:c6:67:45:82:
03:2a:8e:dc:00:cb:4e:d6:0e:8f:0f:6f:1a:00:34:7b:08:a1:
41:2d:0e:de:65:bb:2f:18:b0:c2:86:1e:f5:e9:2d:2d:95:b3:
01:2f:4d:49:cc:7d:65:9f:ca:e6:ed:a2:19:9b:cc:07:b5:82:
a9:d9:04:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org