Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS137509.roa
File: AS137509.roa (raw, json)
Hash identifier: 9anCsqwXk43AWd93t+XXFT9wJMEd1use/sh+1oUS4Zk=
Subject key identifier: 27:9B:43:C7:AB:C4:35:29:7C:C9:C2:14:FF:F1:38:7D:EE:D4:AC:41
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 4CF58CF2DA4498215569DE244F0309C4D53DCDFC
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS137509.roa
Signing time: Sat 16 Mar 2024 14:41:32 +0000
ROA not before: Sat 16 Mar 2024 14:36:32 +0000
ROA not after: Sat 15 Mar 2025 14:41:32 +0000
asID: 137509
IP address blocks: 140.99.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f5:8c:f2:da:44:98:21:55:69:de:24:4f:03:09:c4:d5:3d:cd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Mar 16 14:36:32 2024 GMT
Not After : Mar 15 14:41:32 2025 GMT
Subject: CN=279B43C7ABC435297CC9C214FFF1387DEED4AC41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:61:19:a4:54:d2:76:f6:3a:a8:04:b5:1f:
24:96:56:85:5a:f0:c2:f1:71:ca:bd:04:d5:0a:bb:
96:9b:91:bf:a9:a8:2d:51:58:13:1d:25:48:28:58:
c4:86:61:4f:93:f2:ef:ff:47:3a:60:33:a8:0b:f3:
f5:b4:ad:b2:16:26:76:bd:1e:f4:64:c9:20:28:d8:
a9:fc:15:ce:84:dc:e1:89:6d:ac:38:32:d8:10:b7:
fc:5b:de:ce:d1:b4:4a:40:13:03:1f:ad:06:d1:20:
79:99:eb:07:80:9e:6f:07:d1:76:4c:b2:a1:a2:6a:
a0:03:db:44:72:d0:8d:a0:b3:5e:3a:ab:ba:8c:b3:
ef:e6:84:77:43:bb:cc:37:e3:d0:44:9c:72:71:50:
21:a5:e1:02:ee:f5:7d:55:57:95:a4:25:fc:07:6f:
5c:2f:c5:73:d8:40:87:ca:4f:bf:bd:0a:ad:8e:04:
70:06:17:73:8e:83:c6:4a:57:9f:37:7d:d9:46:6d:
ca:95:f1:6c:e3:85:d1:5b:85:9b:cf:f6:a2:bb:8b:
9b:4f:17:3a:37:fc:58:17:78:d4:64:f8:e6:51:77:
5c:cb:60:ae:99:26:15:c7:3e:9f:2a:54:63:2f:07:
ae:d0:6b:5a:f7:a9:91:2d:a5:b5:8c:20:65:e4:c2:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9B:43:C7:AB:C4:35:29:7C:C9:C2:14:FF:F1:38:7D:EE:D4:AC:41
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS137509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.210.0/24
Signature Algorithm: sha256WithRSAEncryption
be:d0:2e:60:11:ed:f8:fc:64:78:a3:19:dd:e3:c9:54:02:1b:
84:c5:d1:cf:00:a6:36:65:64:ca:b7:ee:82:8a:00:14:55:6b:
1f:0a:59:bb:37:c6:e5:e7:ca:3e:9d:5a:df:17:cb:c7:0f:df:
0d:0a:0d:c2:5f:c9:90:d1:e1:e0:b7:90:ad:e6:fd:2f:63:70:
39:b4:06:b7:a5:84:64:0f:27:16:21:97:97:b8:d4:ea:3b:85:
58:7b:ec:8a:8b:0c:f7:a6:0c:11:b9:ce:d3:ec:70:c8:c7:10:
34:b1:17:5d:3f:ca:47:3b:ab:58:ae:29:7c:77:84:3a:d1:f7:
bf:ca:62:3e:8b:8c:74:4a:0b:d1:cd:30:26:86:4c:9f:de:ca:
e3:f9:5d:7d:f9:a8:61:39:4d:56:43:da:d2:8f:4f:9b:0e:83:
8a:1a:36:63:8e:53:3b:95:66:db:5c:c2:14:5f:cf:61:a9:65:
4d:11:a8:d4:e3:2a:1b:fc:a0:ad:98:6e:e2:4b:c2:d7:a9:2e:
1c:f4:13:bd:53:f8:ca:a7:50:9a:37:98:ff:33:39:91:62:de:
43:fc:86:57:22:2b:9c:1c:b2:a7:5c:81:18:b8:16:0c:60:35:
b3:35:fc:a4:6b:d0:1d:bd:ab:2d:60:21:ae:52:b8:e0:a5:13:
cc:da:67:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 00:37:56 2024 by rpki-client on console-fra.rpki-client.org