Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS50058.roa
File: AS50058.roa (raw, json)
Hash identifier: T0hSvKnF1y6aHLLe34bWZNzQMA2CinaNZFZ0YxkFz6s=
Subject key identifier: 6F:EA:7A:A3:4A:60:15:29:7A:DF:3F:CE:3E:71:4D:BE:05:B0:D1:FD
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 5879A6193D9602149A9517F28374A208824D2CCF
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS50058.roa
Signing time: Tue 17 Oct 2023 16:02:34 +0000
ROA not before: Tue 17 Oct 2023 15:57:34 +0000
ROA not after: Tue 15 Oct 2024 16:02:34 +0000
asID: 50058
IP address blocks: 194.116.227.0/24 maxlen: 24
2001:67c:a90::/48 maxlen: 48
2001:67c:a94::/48 maxlen: 48
2001:67c:a98::/48 maxlen: 48
2001:67c:a9c::/48 maxlen: 48
2001:67c:aa0::/48 maxlen: 48
2a12:dd40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:79:a6:19:3d:96:02:14:9a:95:17:f2:83:74:a2:08:82:4d:2c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 15:57:34 2023 GMT
Not After : Oct 15 16:02:34 2024 GMT
Subject: CN=6FEA7AA34A6015297ADF3FCE3E714DBE05B0D1FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:bc:7f:19:b8:ff:47:73:1d:fb:25:4b:7b:
ab:bc:f1:d8:ec:08:71:15:6d:2a:03:63:8c:69:0a:
a4:b0:38:9c:c8:7f:ad:72:19:97:62:cd:47:b6:b1:
0f:a7:b0:ad:07:f2:16:eb:3a:60:30:a4:e4:b6:98:
3b:31:70:97:1a:ac:cd:5f:f5:1b:38:66:33:9c:0a:
f4:a5:0d:9c:91:51:ab:7c:ae:a2:a9:cb:3e:bf:4d:
1c:bc:f8:63:f6:cd:8f:54:52:72:33:05:a6:1c:6a:
72:0b:ca:77:94:c9:3f:65:c8:10:a2:6f:ce:9b:fd:
ac:8d:2c:1e:e7:bd:b7:61:98:bc:af:84:7d:2f:96:
2d:42:0e:9e:b9:40:38:8e:5b:90:5f:df:9c:62:bc:
14:e1:44:60:c1:cf:f7:50:ac:ae:7f:41:42:7e:bc:
4e:5c:4b:8d:b2:58:91:57:3f:d9:eb:e9:d8:45:00:
34:71:36:6a:ab:be:41:d7:7a:d0:85:f9:56:ae:8e:
1a:db:9f:05:2e:3d:7c:cf:3a:90:4b:c8:84:1e:58:
73:2e:78:70:b3:d9:5e:dc:e8:8b:f6:88:48:1f:3d:
55:3a:7c:6a:2c:28:4c:27:6c:83:14:97:ec:20:f9:
8c:ae:15:d4:da:4b:09:47:d6:e0:e0:5e:b1:68:49:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EA:7A:A3:4A:60:15:29:7A:DF:3F:CE:3E:71:4D:BE:05:B0:D1:FD
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS50058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.227.0/24
IPv6:
2001:67c:a90::/48
2001:67c:a94::/48
2001:67c:a98::/48
2001:67c:a9c::/48
2001:67c:aa0::/48
2a12:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
66:d1:37:fd:6a:c0:91:44:f6:f1:34:fc:cb:ac:45:75:6d:a4:
70:88:dd:88:2a:f5:c1:26:ca:f1:32:a1:b8:bd:cf:b2:df:ec:
be:46:17:4c:9a:fe:95:98:47:b8:d6:9d:b2:b7:fb:6e:e5:80:
28:7c:4d:7f:29:ca:b4:f9:37:19:d6:39:28:3e:ba:e6:f8:f7:
63:b0:7f:93:70:f7:46:49:10:84:ed:e5:41:f0:7b:9f:a8:cd:
c3:ad:f8:b9:77:48:7c:d0:63:65:8a:26:f1:3d:c7:fb:64:fd:
85:d2:37:46:a8:0f:9c:8d:4d:1f:42:a2:51:2b:0f:99:fb:c0:
ff:f5:d1:40:c1:14:b4:1b:48:d2:2f:94:73:25:ce:05:f6:20:
0a:0c:70:90:df:66:ed:a1:c8:ee:45:c5:66:b1:b6:a0:99:79:
0e:91:86:b2:74:0a:d5:27:1d:b5:01:e7:b6:ae:fb:8a:df:1a:
fa:cf:73:cc:e3:d9:d0:21:3e:40:83:8e:f3:53:f3:99:a6:d5:
3f:72:5f:02:38:85:0e:63:11:37:93:76:ab:71:5b:69:de:2a:
ea:34:14:81:bf:b2:01:37:f5:9e:76:cc:6e:5e:87:f9:5c:bc:
78:45:84:b7:5f:ae:4a:17:c3:a5:7f:61:39:4e:e4:fc:47:72:
4f:54:e5:fe
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUWHmmGT2WAhSalRfyg3SiCIJNLM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzEwMTcxNTU3MzRaFw0yNDEwMTUxNjAyMzRaMDMxMTAvBgNV
BAMTKDZGRUE3QUEzNEE2MDE1Mjk3QURGM0ZDRTNFNzE0REJFMDVCMEQxRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZeLx/Gbj/R3Md+yVLe6u88djs
CHEVbSoDY4xpCqSwOJzIf61yGZdizUe2sQ+nsK0H8hbrOmAwpOS2mDsxcJcarM1f
9Rs4ZjOcCvSlDZyRUat8rqKpyz6/TRy8+GP2zY9UUnIzBaYcanILyneUyT9lyBCi
b86b/ayNLB7nvbdhmLyvhH0vli1CDp65QDiOW5Bf35xivBThRGDBz/dQrK5/QUJ+
vE5cS42yWJFXP9nr6dhFADRxNmqrvkHXetCF+VaujhrbnwUuPXzPOpBLyIQeWHMu
eHCz2V7c6Iv2iEgfPVU6fGosKEwnbIMUl+wg+YyuFdTaSwlH1uDgXrFoSbfZAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQUb+p6o0pgFSl63z/OPnFNvgWw0f0wHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC81
LzY2MDQyODlDN0UzOUUwOEUxQUUxMjU1Q0VFNzNDMDVCRkQ5OUYzRTYuY2VyMEQG
CCsGAQUFBwELBDgwNjA0BggrBgEFBQcwC4YocnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QVM5NDUvMS9BUzUwMDU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsG
CCsGAQUFBwEHAQH/BEwwSjAMBAIAATAGAwQAwnTjMDoEAgACMDQDBwAgAQZ8CpAD
BwAgAQZ8CpQDBwAgAQZ8CpgDBwAgAQZ8CpwDBwAgAQZ8CqADBQMqEt1AMA0GCSqG
SIb3DQEBCwUAA4IBAQBm0Tf9asCRRPbxNPzLrEV1baRwiN2IKvXBJsrxMqG4vc+y
3+y+RhdMmv6VmEe41p2yt/tu5YAofE1/Kcq0+TcZ1jkoPrrm+PdjsH+TcPdGSRCE
7eVB8HufqM3Drfi5d0h80GNliibxPcf7ZP2F0jdGqA+cjU0fQqJRKw+Z+8D/9dFA
wRS0G0jSL5RzJc4F9iAKDHCQ32btocjuRcVmsbagmXkOkYaydArVJx21Aee2rvuK
3xr6z3PM49nQIT5Ag47zU/OZptU/cl8COIUOYxE3k3arcVtp3irqNBSBv7IBN/We
dsxuXof5XLx4RYS3X65KF8Olf2E5TuT8R3JPVOX+
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:25 2023 by rpki-client on console.sobornost.net