Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS140947.roa
File: AS140947.roa (raw, json)
Hash identifier: gyNJYXqPSqf/98h0T8y5DnkKTzgbuhTcxrBzL6A7xHQ=
Subject key identifier: 93:3C:6A:1B:87:8B:39:74:EA:C0:F6:46:EA:D5:40:68:42:F0:DA:47
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 585AC1F2D52AE86EB27D8D107420BC3FCFA1A275
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS140947.roa
Signing time: Sat 10 Dec 2022 00:00:13 +0000
ROA not before: Fri 09 Dec 2022 23:55:13 +0000
ROA not after: Sat 09 Dec 2023 00:00:13 +0000
asID: 140947
IP address blocks: 140.99.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:5a:c1:f2:d5:2a:e8:6e:b2:7d:8d:10:74:20:bc:3f:cf:a1:a2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Dec 9 23:55:13 2022 GMT
Not After : Dec 9 00:00:13 2023 GMT
Subject: CN=933C6A1B878B3974EAC0F646EAD5406842F0DA47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:46:02:24:39:c3:b5:c9:d6:7f:90:a1:e6:28:
11:7b:39:0d:6f:01:f4:55:1c:cc:f2:2c:38:51:62:
bc:ef:f8:97:b2:aa:ad:3a:0f:84:0f:2d:3a:10:1b:
5b:5b:2d:3b:2d:bb:8e:7f:4d:d6:24:a9:6c:48:b0:
d5:b9:be:b1:1c:a3:65:0d:e3:68:fc:4a:78:7c:a2:
b9:fa:31:81:b2:fa:39:09:ef:06:b0:f5:9d:8e:3f:
e0:ac:e1:6a:8f:90:e7:eb:16:d5:87:0f:13:97:fa:
cd:4a:3d:b2:72:64:8a:d1:b2:83:2d:cb:d3:5f:b0:
53:05:ea:b3:b7:e9:f3:1d:74:9a:20:4c:3a:b0:4d:
0e:8f:72:91:77:88:f1:d4:14:bb:dd:fb:3c:25:6d:
d1:01:d4:58:5d:ae:23:4d:69:ce:d1:1d:f3:8e:6d:
07:b0:6b:3e:88:9d:99:71:b5:e6:b6:20:c7:fb:45:
ff:1c:e0:f5:ca:4b:56:49:e6:86:50:3c:7d:d3:b6:
d7:7f:20:b6:21:b4:9f:1e:c3:81:69:e2:a8:eb:94:
bc:d5:b8:93:ab:b6:b3:f3:bb:67:75:dd:da:05:8f:
3f:79:2a:a1:eb:48:f4:66:63:22:6e:1f:a5:4c:6c:
9c:67:74:6d:1c:2b:49:9e:c7:34:d7:b8:78:87:d5:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3C:6A:1B:87:8B:39:74:EA:C0:F6:46:EA:D5:40:68:42:F0:DA:47
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS140947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.186.0/24
Signature Algorithm: sha256WithRSAEncryption
86:89:a6:e7:b0:cb:e9:6f:a4:76:9f:17:c3:59:29:9d:b1:e0:
9f:34:7b:fd:12:69:7d:84:b6:06:7f:9b:db:13:e6:a2:80:88:
9d:43:be:7d:dc:3b:aa:77:b1:84:74:a1:01:24:b5:68:e4:37:
08:c0:c6:ee:d9:ff:a2:08:48:b8:11:01:5a:10:ca:11:c1:54:
b9:04:91:0d:e6:97:04:35:30:ca:ae:19:e0:9e:29:62:cb:4c:
63:3f:17:0d:7b:74:e0:f1:e5:ba:35:40:26:7b:0b:82:9a:17:
e2:3c:50:16:05:c0:23:1e:a9:b0:4c:5f:d5:2e:8a:ed:9c:3f:
dc:db:86:b8:01:12:b2:72:41:bc:ea:81:20:8c:78:1a:38:a1:
69:4b:b1:02:6a:54:25:49:71:d9:73:27:53:5f:09:4a:0b:a9:
e7:a6:4f:a3:8f:1c:ef:ec:de:01:4c:fd:a3:4d:27:e0:5b:5f:
c0:3b:4b:60:82:e3:fb:95:46:0e:1e:17:7e:f0:18:3d:45:11:
d6:7a:80:6a:41:8c:1e:f5:ec:73:e9:01:04:ec:10:26:87:2c:
6a:6e:b6:7b:35:da:e2:ad:70:f2:5e:e2:5e:8f:98:9c:e0:8e:
f8:c8:ba:8b:25:e7:ae:7b:95:14:7c:27:34:f9:ce:11:9a:78:
17:9e:aa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 18:00:49 2023 by rpki-client on console-ams.rpki-client.org