Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS138195.roa
File: AS138195.roa (raw, json)
Hash identifier: kg+aiyB7XhZ7JLtuBk7sMymCVjdbuvnmw+/y6yl828g=
Subject key identifier: 44:EA:49:C9:DD:B3:94:89:46:A2:2B:4B:03:DF:66:AE:AC:EC:85:2A
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 0978937E7F90E9195A6E99C76582A3A3F3C5C02B
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS138195.roa
Signing time: Mon 27 May 2024 15:01:04 +0000
ROA not before: Mon 27 May 2024 14:56:04 +0000
ROA not after: Mon 26 May 2025 15:01:04 +0000
asID: 138195
IP address blocks: 23.156.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jul 2024 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:78:93:7e:7f:90:e9:19:5a:6e:99:c7:65:82:a3:a3:f3:c5:c0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: May 27 14:56:04 2024 GMT
Not After : May 26 15:01:04 2025 GMT
Subject: CN=44EA49C9DDB3948946A22B4B03DF66AEACEC852A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:22:cb:70:6f:b9:24:40:bc:ac:5d:c9:10:cf:
ce:e1:ab:ce:e3:a4:3b:bf:ef:0b:9f:2e:ec:14:cc:
89:e8:c8:de:af:ce:bb:04:99:5e:90:6e:6c:f0:2d:
63:a6:1c:e4:fb:14:01:37:c3:06:9f:9a:67:84:91:
d6:d1:32:a8:68:71:be:74:03:b2:e6:1d:b6:da:e4:
13:9e:96:33:4c:6e:1c:1d:97:f8:34:df:65:76:9c:
38:17:7a:43:d6:a3:46:14:e9:55:0a:a7:48:dd:49:
99:b3:02:18:98:77:22:1e:8e:98:e5:95:44:3a:e6:
bb:2b:f3:21:a8:a0:05:76:76:1d:7b:12:6a:a4:ce:
ef:a2:ee:10:3b:2e:47:eb:00:a6:ba:4a:a3:01:81:
c0:ca:92:0e:18:d0:64:d7:a5:34:f3:7e:5e:24:f9:
d1:dd:2a:7d:8a:b6:59:b6:3a:e6:04:a0:5b:87:2c:
11:0a:e0:e3:45:6d:d4:ff:d6:fe:f5:d7:94:8a:54:
36:d8:de:51:0a:f5:98:96:80:a7:d3:bc:c6:44:c8:
8b:fc:77:94:0c:f5:11:13:73:e7:83:61:a9:19:24:
81:85:19:a8:2d:a2:06:5f:42:3a:4d:5f:93:9f:95:
d3:0c:d9:f5:8a:31:40:cf:98:5e:57:57:b4:8d:f2:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:49:C9:DD:B3:94:89:46:A2:2B:4B:03:DF:66:AE:AC:EC:85:2A
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS138195.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.156.240.0/24
Signature Algorithm: sha256WithRSAEncryption
30:63:ac:88:1a:ee:ad:e1:14:c4:81:ad:7e:af:93:01:a6:6d:
44:7b:35:d2:74:a4:98:e7:f6:ba:7f:64:e4:1c:29:a5:74:e6:
f7:92:08:5d:66:dc:0b:8d:66:c0:7b:e1:2c:89:36:31:82:56:
94:39:32:a4:4f:da:c8:ec:24:e5:d1:00:5a:38:60:9a:15:da:
9f:c0:aa:aa:ac:c6:9c:84:8f:7a:cd:cb:75:be:b8:f7:ec:54:
17:77:b2:c9:f7:99:75:90:8f:84:09:19:51:e5:88:02:d7:b5:
ff:d6:38:a1:da:88:74:de:8f:33:c2:6a:52:d1:b7:7c:61:67:
10:9f:16:0f:a5:64:51:97:24:93:77:de:86:bf:cb:7b:91:f3:
dc:7d:39:74:26:d1:4b:d0:8b:f5:ed:da:78:18:c8:24:3a:de:
cf:7d:bf:39:a2:5b:a1:95:f5:7a:89:25:5e:50:0b:f3:8e:74:
8c:98:65:71:a3:12:a4:28:97:c5:d9:cd:db:69:3c:66:7f:5c:
b8:ec:3d:14:30:fc:0f:6f:94:b6:60:1d:ea:74:5a:51:0b:71:
16:83:d2:4d:4b:3f:7c:52:bf:f9:dc:90:c5:f5:4d:0e:1a:20:
ef:53:71:c5:cd:d8:fe:b9:8d:69:0b:b1:5f:23:46:d9:c9:48:
13:76:39:1f
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUCXiTfn+Q6RlabpnHZYKjo/PFwCswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwNTI3MTQ1NjA0WhcNMjUwNTI2MTUwMTA0
WjAzMTEwLwYDVQQDEyg0NEVBNDlDOUREQjM5NDg5NDZBMjJCNEIwM0RGNjZBRUFD
RUM4NTJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCLLcG+5JEC8
rF3JEM/O4avO46Q7v+8Lny7sFMyJ6Mjer867BJlekG5s8C1jphzk+xQBN8MGn5pn
hJHW0TKoaHG+dAOy5h222uQTnpYzTG4cHZf4NN9ldpw4F3pD1qNGFOlVCqdI3UmZ
swIYmHciHo6Y5ZVEOua7K/MhqKAFdnYdexJqpM7vou4QOy5H6wCmukqjAYHAypIO
GNBk16U0835eJPnR3Sp9irZZtjrmBKBbhywRCuDjRW3U/9b+9deUilQ22N5RCvWY
loCn07zGRMiL/HeUDPURE3Png2GpGSSBhRmoLaIGX0I6TV+Tn5XTDNn1ijFAz5he
V1e0jfJH4QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFETqScnds5SJRqIrSwPfZq6s
7IUqMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzEzODE5NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABec8DANBgkqhkiG9w0BAQsFAAOC
AQEAMGOsiBrureEUxIGtfq+TAaZtRHs10nSkmOf2un9k5BwppXTm95IIXWbcC41m
wHvhLIk2MYJWlDkypE/ayOwk5dEAWjhgmhXan8CqqqzGnISPes3Ldb649+xUF3ey
yfeZdZCPhAkZUeWIAte1/9Y4odqIdN6PM8JqUtG3fGFnEJ8WD6VkUZckk3fehr/L
e5Hz3H05dCbRS9CL9e3aeBjIJDrez32/OaJboZX1eoklXlAL8450jJhlcaMSpCiX
xdnN22k8Zn9cuOw9FDD8D2+UtmAd6nRaUQtxFoPSTUs/fFK/+dyQxfVNDhog71Nx
xc3Y/rmNaQuxXyNG2clIE3Y5Hw==
-----END CERTIFICATE-----
Generated at Sat Jul 27 02:44:49 2024 by rpki-client on console-fra.rpki-client.org