Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS1239.roa
File: AS1239.roa (raw, json)
Hash identifier: UoGC+bUFNZmU8zkwCy1dn9hgwZQtDJ6HGzsbXIdtopc=
Subject key identifier: 92:52:89:8C:55:EF:04:EE:CC:99:C2:50:84:31:8B:62:63:4B:13:C3
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 5D0DCE8E631AA3634D3F795ED0FA836BDEBC940F
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS1239.roa
Signing time: Tue 27 Sep 2022 16:58:48 +0000
ROA not before: Tue 27 Sep 2022 16:53:48 +0000
ROA not after: Tue 26 Sep 2023 16:58:48 +0000
asID: 1239
IP address blocks: 140.99.1.0/24 maxlen: 24
140.99.2.0/24 maxlen: 24
140.99.3.0/24 maxlen: 24
140.99.4.0/24 maxlen: 24
140.99.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:0d:ce:8e:63:1a:a3:63:4d:3f:79:5e:d0:fa:83:6b:de:bc:94:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Sep 27 16:53:48 2022 GMT
Not After : Sep 26 16:58:48 2023 GMT
Subject: CN=9252898C55EF04EECC99C25084318B62634B13C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:8b:26:85:dc:c9:a8:8a:6b:e4:f8:58:66:
45:07:c2:fd:f1:1c:a7:03:68:1a:e6:cd:6e:01:2b:
fe:03:f9:9a:81:45:d0:b3:58:f3:a9:18:e4:4f:c4:
9d:25:c9:a8:c4:a9:85:1c:42:c9:7a:3f:e1:b8:86:
2b:ff:ef:a1:a3:7e:b1:a2:43:32:a1:c8:d8:be:09:
2f:f4:14:37:16:7c:b7:00:55:b9:89:55:87:d8:17:
d0:65:56:73:5a:01:1c:b6:88:56:ba:9d:c2:80:91:
7e:e9:d9:07:b4:05:8c:c8:9e:64:71:aa:35:ab:9b:
77:d2:de:2c:2c:c2:59:eb:7f:b3:0f:dc:aa:87:37:
57:72:b6:09:68:d9:47:24:8f:36:63:bc:a7:a5:79:
45:2f:2f:21:32:3e:43:55:e0:5f:34:59:09:84:1e:
cd:b5:cd:f3:d9:27:de:41:98:c5:83:90:7f:b7:c2:
65:73:53:4f:d5:f4:c1:b4:cb:32:4a:65:76:ab:14:
06:9a:bf:8c:47:17:30:50:b1:f7:5c:50:9e:0e:d9:
b9:ce:b6:ca:13:75:22:3e:bb:28:05:c4:73:64:96:
20:d8:90:e5:4a:6f:52:0a:56:e8:e5:3e:1f:94:08:
4a:c4:67:7f:dd:c3:2e:81:52:33:ab:40:54:82:06:
75:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:52:89:8C:55:EF:04:EE:CC:99:C2:50:84:31:8B:62:63:4B:13:C3
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS1239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.1.0-140.99.4.255
140.99.6.0/24
Signature Algorithm: sha256WithRSAEncryption
37:72:16:f9:66:a0:ae:5b:a4:19:c1:a0:5e:de:35:16:27:b1:
6f:44:cd:cd:58:06:dd:49:f7:45:a4:46:22:6c:ff:fe:d6:75:
4d:51:56:03:df:8d:fe:0e:5e:b2:ba:6f:ec:13:c2:c3:42:77:
a0:78:30:ae:b5:33:90:c5:0d:66:a0:0d:84:3c:2d:b4:9e:5b:
c6:1d:54:75:b6:eb:93:9f:b1:19:48:04:e5:7a:7b:b4:11:b5:
15:fb:eb:09:a8:34:76:7c:a5:53:52:a7:a8:55:3d:d8:85:df:
4d:ed:d4:ca:41:62:85:09:74:0a:4a:ca:ec:7b:ef:b2:30:8e:
94:12:7b:f9:83:cd:fa:91:f8:aa:fb:12:e8:02:26:c4:5d:b8:
99:aa:f9:cb:f4:d8:d0:6c:bf:18:40:7f:0f:10:f4:0a:da:20:
be:83:76:7e:d0:18:2d:4c:af:5b:d3:3b:a5:85:27:9a:eb:0b:
ba:42:44:3f:8f:71:77:fb:c4:42:57:6c:e7:1b:7a:f9:fc:eb:
29:05:48:08:87:1b:23:51:f1:b6:07:37:3e:ef:18:94:f1:92:
47:cc:e4:b4:21:bf:2b:86:fd:77:fb:88:4d:49:61:4c:c5:94:
fd:6a:54:41:bf:33:a7:5d:44:33:2c:44:64:0f:27:38:e8:87:
18:80:72:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:20 2023 by rpki-client on console-fra.rpki-client.org