Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS147287.roa
File: AS147287.roa (raw, json)
Hash identifier: K8rbprx5TuXooDNuCjO8rQ4Kz2uuFLxB4LdTL98A/HA=
Subject key identifier: 18:CD:EE:6C:AD:0C:9F:A0:91:12:41:79:FF:E4:61:7E:85:5C:92:96
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 1E07C7F1A89DFE74886AE1D1345F932DFA03B4E5
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS147287.roa
Signing time: Thu 21 Sep 2023 11:42:31 +0000
ROA not before: Thu 21 Sep 2023 11:37:31 +0000
ROA not after: Thu 19 Sep 2024 11:42:31 +0000
asID: 147287
IP address blocks: 140.99.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:07:c7:f1:a8:9d:fe:74:88:6a:e1:d1:34:5f:93:2d:fa:03:b4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Sep 21 11:37:31 2023 GMT
Not After : Sep 19 11:42:31 2024 GMT
Subject: CN=18CDEE6CAD0C9FA091124179FFE4617E855C9296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:3d:d2:7a:0a:1e:c0:d0:c5:32:8c:63:df:
8a:7e:2c:88:1f:71:b2:0d:64:68:ba:e3:c7:c6:2f:
a9:55:19:a9:24:f2:a2:cd:9e:4f:ce:78:4a:74:b3:
ff:2d:14:a4:b4:e5:e4:ae:e1:b6:50:90:db:56:be:
32:5d:19:b7:48:9a:ac:c7:20:f5:d7:32:d5:24:1a:
4b:17:30:1e:a1:ac:9e:7a:5a:cc:39:84:ff:40:c1:
2b:d5:ef:9f:77:92:ef:70:8e:87:91:52:50:88:76:
76:1b:04:96:26:7d:c3:04:d1:74:5b:34:ce:4b:35:
37:82:39:1d:bd:c7:69:58:c6:76:63:1a:96:41:b0:
38:d7:04:aa:d1:0e:6f:3e:8e:a3:9a:60:45:2a:d8:
5a:c4:0d:d9:b9:fd:f8:55:0a:d4:6a:25:8e:79:24:
b3:77:d8:c1:aa:34:1a:bb:27:a8:2f:24:5f:04:22:
a4:c2:15:41:f7:4a:25:dc:31:71:d4:8d:37:d7:8f:
bd:97:03:24:0e:c4:e5:e4:19:e1:ad:e8:35:5f:94:
cf:cc:b9:eb:6d:63:11:72:3f:e0:22:ad:fd:da:e2:
5d:fb:88:59:47:a3:1a:44:fa:a0:9e:6e:45:c3:8b:
d1:2d:aa:b3:e6:bc:4c:dc:e4:cd:02:93:45:62:20:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CD:EE:6C:AD:0C:9F:A0:91:12:41:79:FF:E4:61:7E:85:5C:92:96
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS147287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.9.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e9:ff:ab:34:e5:1b:eb:bd:f4:4d:36:56:42:c4:59:a5:a4:
e2:23:f9:53:23:c1:c9:ac:49:7a:8d:cc:20:15:ef:14:85:3f:
f1:ce:6e:9b:9d:bf:f0:34:30:bc:b3:63:d7:7e:2b:c6:03:b4:
41:56:25:69:9d:19:8f:bb:61:de:a6:a3:a7:81:a8:25:e0:ef:
5c:56:20:50:13:99:ee:d7:ed:55:dd:b4:b3:d1:7b:01:4f:fe:
6c:69:24:e2:a9:c1:81:d5:b6:11:7b:59:c1:4d:71:dd:7a:63:
d0:77:f7:3b:91:8d:9b:78:e5:51:95:35:e7:8c:c8:c8:18:1d:
10:c4:f8:63:b3:ba:39:d2:ed:8c:b6:02:19:2b:01:62:77:dd:
10:bc:bd:93:24:ae:bf:9c:0e:55:0b:b9:84:1a:18:0a:5f:bd:
af:a7:c4:af:0c:d8:ec:54:40:b8:90:64:82:e3:ad:0d:f9:3b:
b9:42:ba:9a:bd:ce:a5:08:d9:1d:5e:f1:57:b1:3f:8b:00:f1:
73:23:b0:f4:04:fd:3b:4b:bb:b9:8c:30:50:83:a5:b2:d4:20:
ae:b5:c5:0b:52:4c:8d:87:64:77:d8:fc:dd:a1:ec:55:96:88:
0c:ae:f7:7d:3c:68:04:af:e4:7d:f5:49:e4:3b:fc:2a:a5:c5:
6d:0a:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 11:25:58 2023 by rpki-client on console-fra.rpki-client.org