Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS152911.roa
File: AS152911.roa (raw, json)
Hash identifier: /KN4+o76x+n0DNHQGQHf2bag0ypMdDxT1cjZMD0DoC4=
Subject key identifier: 6B:E7:DB:0F:E5:BA:03:07:E5:BB:44:7C:8F:CF:66:B4:52:2F:47:81
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 5BF699775AB2A2D65C3EDCB6DA50B5FFD9E987EE
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS152911.roa
Signing time: Tue 02 Jul 2024 09:19:28 +0000
ROA not before: Tue 02 Jul 2024 09:14:28 +0000
ROA not after: Tue 01 Jul 2025 09:19:28 +0000
asID: 152911
IP address blocks: 23.156.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jul 2024 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:f6:99:77:5a:b2:a2:d6:5c:3e:dc:b6:da:50:b5:ff:d9:e9:87:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Jul 2 09:14:28 2024 GMT
Not After : Jul 1 09:19:28 2025 GMT
Subject: CN=6BE7DB0FE5BA0307E5BB447C8FCF66B4522F4781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:d3:41:99:c0:61:f2:78:26:62:11:05:b9:
11:7b:95:89:d1:0f:56:e5:c0:be:dc:b4:f0:12:dc:
0a:9e:3e:5e:81:f2:24:78:95:46:26:27:f3:07:b4:
0e:2f:48:54:15:1f:11:2f:82:7a:e1:df:31:bb:9c:
83:fa:c7:c1:98:31:2d:dc:8f:3c:9d:ef:34:dc:28:
e4:1b:f3:4b:88:6c:27:85:56:3d:59:a0:bb:c2:f2:
ea:a4:12:3a:a9:59:68:79:13:6d:9f:71:0d:37:08:
17:28:ad:12:66:51:8d:ae:a1:6a:70:32:16:42:db:
b4:a9:29:9f:fd:de:8a:60:fb:6f:6a:94:d5:07:a2:
10:ac:2a:9e:46:c3:0c:bb:65:8a:90:3f:49:b6:a6:
97:89:55:f1:ac:d3:5b:bd:c9:8c:0d:c1:58:d0:15:
b6:39:55:bb:bd:ff:3c:0f:19:92:b6:df:5b:80:67:
6f:9f:d1:c9:03:9a:e2:46:60:bb:33:e1:d3:99:e6:
da:71:02:01:8d:3a:ee:3f:33:4c:89:86:72:84:34:
47:90:51:8c:c0:57:72:74:31:5f:03:f0:62:91:a3:
42:42:83:c9:8b:56:55:69:e7:90:f6:c6:e3:f6:ed:
5f:11:cd:be:56:64:18:4f:e7:97:2c:96:3f:8a:58:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E7:DB:0F:E5:BA:03:07:E5:BB:44:7C:8F:CF:66:B4:52:2F:47:81
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS152911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.156.240.0/24
Signature Algorithm: sha256WithRSAEncryption
be:24:bb:63:93:fe:35:ad:28:02:98:7f:16:43:a5:48:4d:8b:
4e:94:33:99:cc:1a:f6:93:e2:e5:3e:15:8f:17:35:7c:85:b8:
a1:84:fa:d6:93:cb:3b:c7:01:fe:22:cd:2a:f7:26:b0:74:b3:
f4:be:56:22:ac:09:fb:2a:97:4a:1e:80:b6:55:68:34:1d:5d:
1e:49:bb:6f:02:42:78:39:4e:15:ae:41:d3:e6:97:be:8e:8b:
98:39:65:56:af:8f:cc:d1:28:f4:cf:ab:3f:d2:5b:9d:a7:6c:
4a:2b:b8:f4:07:1f:9d:65:0d:a5:4c:66:6c:f8:f0:54:4b:07:
41:9f:3a:bf:db:f0:05:a4:bf:f6:52:25:6c:f8:8a:7f:5e:bb:
ff:e6:6b:06:33:77:a1:10:08:d4:76:b4:df:5b:a6:b6:15:0d:
5f:c1:63:d4:7a:13:1f:93:e5:8d:20:1e:22:c7:94:35:fe:73:
48:a1:5e:e2:10:71:f1:95:cc:78:71:66:3a:bb:32:aa:2e:88:
00:12:46:2e:0a:27:d4:c7:e3:e9:4a:04:6f:78:7b:b7:52:2d:
35:c2:09:70:a2:0e:a5:98:55:2f:51:26:ab:3e:26:ba:42:e0:
ef:25:8c:cd:d4:aa:73:7c:40:26:1d:20:0f:01:d2:26:8f:1b:
15:9a:cb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 02:44:49 2024 by rpki-client on console-fra.rpki-client.org