Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14445.roa
File: AS14445.roa (raw, json)
Hash identifier: gRvDoKtnQFrrU7x+wvzDjZSZB+01MhW8s6vGcO+MKVg=
Subject key identifier: D1:FA:6A:86:39:56:90:81:37:D7:2E:51:53:1C:5C:6F:3A:1C:56:80
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 4C944D5EE3B99665617F81373C0A63F3FB79CD50
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14445.roa
Signing time: Fri 01 Sep 2023 17:00:36 +0000
ROA not before: Fri 01 Sep 2023 16:55:36 +0000
ROA not after: Fri 30 Aug 2024 17:00:36 +0000
asID: 14445
IP address blocks: 140.99.8.0/24 maxlen: 24
140.99.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 12:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:94:4d:5e:e3:b9:96:65:61:7f:81:37:3c:0a:63:f3:fb:79:cd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Sep 1 16:55:36 2023 GMT
Not After : Aug 30 17:00:36 2024 GMT
Subject: CN=D1FA6A863956908137D72E51531C5C6F3A1C5680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:be:6b:7a:68:07:2e:5b:fa:f8:9e:cc:d7:
d9:d2:24:c1:31:c1:cc:12:b5:2e:7c:2c:a7:cd:fc:
b8:1e:fa:4c:6e:21:64:5e:3d:a2:60:b4:51:5b:80:
ea:20:52:21:b6:ae:84:3e:70:6f:46:99:a6:59:8a:
bf:1e:2e:e2:42:5c:53:df:89:af:d3:93:2b:ac:aa:
56:20:ae:df:1b:13:62:a5:52:7c:1a:8e:27:5b:4b:
fa:9e:c8:29:34:0f:9c:dd:d2:8d:cd:af:f0:5e:04:
53:e8:01:a4:ff:f9:83:f7:54:be:d6:85:e1:e7:b5:
74:4e:9d:28:58:61:d2:0e:ad:ad:a8:36:ca:15:ed:
c1:3e:28:13:7d:40:4d:32:34:4a:3d:89:1f:ef:42:
c4:b9:60:d8:4f:ed:6c:9f:0f:b1:24:0f:19:63:55:
84:a5:f7:a6:35:aa:61:78:03:b7:53:30:1a:85:d2:
cb:b8:f7:c0:96:23:43:19:9e:f0:ad:25:9e:3f:ec:
13:bd:9e:0c:84:1f:50:f8:be:b7:4b:ed:00:7e:39:
2c:03:41:62:ba:95:68:b4:d0:60:e4:2e:8a:80:35:
b8:a2:48:4f:48:39:45:ad:e1:ac:de:93:89:07:69:
61:1c:6f:36:34:64:7d:a9:48:bb:d8:17:3c:e1:38:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FA:6A:86:39:56:90:81:37:D7:2E:51:53:1C:5C:6F:3A:1C:56:80
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.8.0/24
140.99.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b5:49:66:16:19:a6:bf:dc:1f:74:09:75:1b:db:85:3a:4b:
63:88:44:0b:cb:c0:13:c5:2e:0c:aa:3d:97:51:d1:1c:01:e2:
cc:0c:2a:6a:0e:28:8e:e1:f6:a0:1b:93:b4:47:e4:80:dc:c8:
3b:b4:a5:a7:c5:5b:1b:9f:6f:33:1f:74:c7:ac:91:ea:93:83:
98:1b:d2:b2:57:51:69:2b:dc:3b:60:8c:c2:60:1c:ef:50:80:
47:8e:ea:3e:b8:12:01:68:07:7a:5d:2b:0b:82:7c:54:3a:54:
e2:0a:ce:00:1f:66:8b:2e:23:40:07:83:2d:9b:fe:b1:17:7b:
d9:59:11:2c:b2:d8:55:50:59:a0:6e:b0:3c:37:a2:97:66:04:
1c:90:2f:4c:16:2c:b4:ae:54:40:bd:3d:a5:d8:f3:f5:84:c0:
29:25:96:58:da:45:2a:f1:b5:1d:b7:ea:41:eb:34:00:c0:e0:
c6:82:4a:ff:f9:77:71:6e:3f:77:d1:44:eb:03:cc:f3:86:6d:
06:ed:4e:06:cc:41:d0:bc:9b:bd:ed:4c:45:88:c2:44:09:d9:
f7:02:51:fd:a5:78:e9:86:9c:e9:fe:00:99:1e:39:9d:71:08:
15:6f:00:2c:f6:ee:3f:2c:ea:94:ab:66:8c:8e:16:28:36:1c:
25:50:18:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 15:35:08 2024 by rpki-client on console-fra.rpki-client.org