Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS203314.roa
File: AS203314.roa (raw, json)
Hash identifier: Ltlq5NNVRQdkSeOM0PAojGXqtBrlcVSbXtY48BiQsoM=
Subject key identifier: 51:73:22:6F:47:2C:10:75:20:E7:29:38:B4:7E:B7:20:4A:6C:68:19
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 1F914C66D4A3749731373E7A353748B7BE0BDA7C
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS203314.roa
Signing time: Thu 20 Oct 2022 23:49:56 +0000
ROA not before: Thu 20 Oct 2022 23:44:56 +0000
ROA not after: Thu 19 Oct 2023 23:49:56 +0000
asID: 203314
IP address blocks: 140.99.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:91:4c:66:d4:a3:74:97:31:37:3e:7a:35:37:48:b7:be:0b:da:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Oct 20 23:44:56 2022 GMT
Not After : Oct 19 23:49:56 2023 GMT
Subject: CN=5173226F472C107520E72938B47EB7204A6C6819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:57:38:35:1d:53:08:b2:a7:3e:27:61:ce:
a9:6b:59:cf:29:3f:a6:7c:21:aa:a5:df:12:97:7e:
f1:de:fb:0a:6c:74:84:71:eb:1d:02:75:46:5c:73:
a6:16:54:b5:08:0c:e9:d8:2d:0c:05:7b:44:94:83:
8e:a9:e4:ce:a1:f7:88:ff:88:c1:4a:39:62:9e:43:
3f:88:0d:f9:f1:d5:66:21:ac:4a:da:1f:00:0f:b2:
72:5a:64:77:f6:6e:6d:ba:26:e5:c0:34:13:3b:b6:
8d:78:46:83:06:f7:8d:74:9b:2c:98:4a:e5:75:f2:
6c:63:35:41:5a:31:8c:76:27:e7:e2:55:c3:f7:7c:
e4:ca:a2:b0:01:86:9d:c0:82:df:1d:df:e2:74:33:
fd:2e:9d:00:1a:cc:dc:0a:30:93:19:f9:1d:97:42:
8a:bf:1e:47:86:98:27:d3:e7:4e:f0:22:67:11:a7:
b1:da:67:fa:78:3e:89:1d:8d:8e:ca:67:bb:77:8e:
6a:f7:5a:26:e0:59:db:26:2b:69:96:be:01:d1:cb:
5a:85:37:49:1a:ca:85:2e:af:e4:f6:60:20:8d:a5:
3a:30:d3:57:10:7c:4b:5d:d8:b0:66:80:13:3d:ef:
3e:a9:ec:a3:57:e6:e1:67:fa:f3:06:8b:ab:6f:86:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:22:6F:47:2C:10:75:20:E7:29:38:B4:7E:B7:20:4A:6C:68:19
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS203314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.0.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a4:15:da:e7:bd:20:41:a0:44:ab:43:f9:cb:ca:0b:7b:46:
f4:e0:57:71:b3:3f:76:cd:0a:4a:d0:bb:56:90:31:6b:38:8f:
44:51:da:60:83:49:80:38:b8:73:07:ff:98:57:1c:5e:a6:99:
13:8d:4c:b8:e3:04:98:5b:9a:cf:ad:c2:d2:5f:cf:c5:83:74:
28:c6:ca:7c:36:fe:be:cc:56:32:ed:9d:a4:1c:2b:67:81:8c:
ac:3f:4f:33:fa:3a:e2:a6:61:52:3d:2b:65:38:d1:9d:ff:37:
81:2d:4e:3d:84:bb:39:80:a0:db:7f:90:34:ce:a0:20:78:92:
52:9a:a6:58:3f:bb:d4:de:c1:94:cf:c0:05:23:12:8f:e7:a5:
99:a1:03:c1:0a:98:81:56:5e:9c:39:58:28:1f:fc:1a:e6:17:
44:ee:f3:c7:d8:43:44:eb:a4:f1:ab:b5:82:26:5a:b1:3f:b2:
3d:94:f2:15:64:54:f3:b0:2f:06:d9:bd:84:69:67:e8:cd:7f:
dc:09:09:5e:7b:fd:7b:ed:93:e1:c2:17:81:a8:68:d0:3b:1c:
a3:7c:8c:b8:2a:46:58:ee:ac:a1:e2:fc:b5:78:68:dc:32:6a:
31:4b:cb:65:83:32:64:0f:a9:c1:01:70:fc:f1:24:16:44:ff:
f5:ee:9d:03
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUH5FMZtSjdJcxNz56NTdIt74L2nwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjIxMDIwMjM0NDU2WhcNMjMxMDE5MjM0OTU2
WjAzMTEwLwYDVQQDEyg1MTczMjI2RjQ3MkMxMDc1MjBFNzI5MzhCNDdFQjcyMDRB
NkM2ODE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNJXODUdUwiy
pz4nYc6pa1nPKT+mfCGqpd8Sl37x3vsKbHSEcesdAnVGXHOmFlS1CAzp2C0MBXtE
lIOOqeTOofeI/4jBSjlinkM/iA358dVmIaxK2h8AD7JyWmR39m5tuiblwDQTO7aN
eEaDBveNdJssmErldfJsYzVBWjGMdifn4lXD93zkyqKwAYadwILfHd/idDP9Lp0A
GszcCjCTGfkdl0KKvx5Hhpgn0+dO8CJnEaex2mf6eD6JHY2Oyme7d45q91om4Fnb
Jitplr4B0ctahTdJGsqFLq/k9mAgjaU6MNNXEHxLXdiwZoATPe8+qeyjV+bhZ/rz
Bourb4Yp/QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFFzIm9HLBB1IOcpOLR+tyBK
bGgZMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzIwMzMxNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIxjADANBgkqhkiG9w0BAQsFAAOC
AQEAU6QV2ue9IEGgRKtD+cvKC3tG9OBXcbM/ds0KStC7VpAxaziPRFHaYINJgDi4
cwf/mFccXqaZE41MuOMEmFuaz63C0l/PxYN0KMbKfDb+vsxWMu2dpBwrZ4GMrD9P
M/o64qZhUj0rZTjRnf83gS1OPYS7OYCg23+QNM6gIHiSUpqmWD+71N7BlM/ABSMS
j+elmaEDwQqYgVZenDlYKB/8GuYXRO7zx9hDROuk8au1giZasT+yPZTyFWRU87Av
Btm9hGln6M1/3AkJXnv9e+2T4cIXgaho0Dsco3yMuCpGWO6soeL8tXho3DJqMUvL
ZYMyZA+pwQFw/PEkFkT/9e6dAw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:20 2023 by rpki-client on console-fra.rpki-client.org