Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS205431.roa
File: AS205431.roa (raw, json)
Hash identifier: UZRQ6wI2kKummsCe9i+xXGyz0W4Bw3M1lWdhjgSklZo=
Subject key identifier: 49:CD:94:86:86:D0:9A:91:87:2D:58:71:60:AD:33:E4:50:5D:03:8E
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 094E5E9C958349F3F0CCAD2F35AF290445CE5558
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS205431.roa
Signing time: Wed 07 Dec 2022 00:00:13 +0000
ROA not before: Tue 06 Dec 2022 23:55:13 +0000
ROA not after: Wed 06 Dec 2023 00:00:13 +0000
asID: 205431
IP address blocks: 140.99.154.0/24 maxlen: 24
140.99.157.0/24 maxlen: 24
140.99.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:4e:5e:9c:95:83:49:f3:f0:cc:ad:2f:35:af:29:04:45:ce:55:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Dec 6 23:55:13 2022 GMT
Not After : Dec 6 00:00:13 2023 GMT
Subject: CN=49CD948686D09A91872D587160AD33E4505D038E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:a7:5d:b0:1b:05:e5:a0:5e:7b:68:cb:47:
00:1a:5d:98:8b:50:b4:2a:9a:c5:1c:52:09:d8:a0:
35:e9:b7:18:55:be:52:e2:18:4e:c8:2a:cf:21:2e:
ea:a3:88:a8:62:01:e6:55:fc:13:00:e0:85:6b:a3:
c2:15:8a:a3:7d:fd:32:3d:d4:dd:2d:5d:c4:6d:c7:
07:e7:01:f9:29:d3:8c:dd:da:fb:62:6b:5b:08:f8:
01:28:7c:f3:b0:22:7c:cf:23:73:e1:93:2b:c1:bc:
52:58:e5:df:de:07:c1:75:7b:29:59:9a:70:e6:fa:
6c:22:76:e0:ed:11:2d:4e:8f:b3:e4:44:26:24:a5:
c6:20:fa:8a:0b:5d:cc:ed:6b:ff:93:f4:7c:f7:67:
c7:d8:a8:89:1f:28:e5:05:75:1d:cf:f0:3a:fe:44:
b1:62:fe:57:76:c0:e1:f6:32:cd:a3:93:bb:43:be:
64:32:30:73:ed:74:c7:5a:e1:31:5f:b9:cc:27:d1:
bb:80:6c:81:af:12:ab:a6:eb:96:88:ed:89:e0:c6:
f5:30:f8:ee:fa:77:c9:ed:03:ed:76:2c:a4:6e:d8:
26:f4:94:2a:2d:53:de:86:e2:c2:ae:7e:b6:7a:91:
1e:b1:1c:92:69:66:f4:6f:e0:03:c2:84:d4:8a:70:
7a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CD:94:86:86:D0:9A:91:87:2D:58:71:60:AD:33:E4:50:5D:03:8E
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS205431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.154.0/24
140.99.157.0/24
140.99.164.0/24
Signature Algorithm: sha256WithRSAEncryption
20:fe:9d:1d:9d:7c:c7:a8:b3:c9:25:10:00:07:a8:a3:6c:94:
d8:41:5d:0e:6a:74:11:2a:d7:dd:e3:be:7b:6c:dc:2c:11:0d:
22:b8:2d:c6:d3:86:63:50:f4:ab:6e:77:aa:e9:58:88:3f:67:
0f:79:27:eb:d1:8d:b6:94:5d:71:3f:db:09:c4:29:7d:2a:10:
97:ef:1e:59:a4:db:52:ee:46:c0:20:6b:e3:77:81:c5:b9:66:
6d:bb:15:93:85:19:be:63:36:57:a2:4f:9f:35:cf:1e:a4:13:
a3:70:e2:bb:91:8c:71:a2:07:54:17:d5:cd:67:a6:53:03:51:
e2:3a:65:22:17:ae:d9:ef:2e:eb:5b:36:d3:7f:4c:e2:0b:20:
10:55:b9:51:b6:e2:38:69:29:19:51:86:96:de:fa:a3:3d:a6:
22:89:2b:02:63:37:2e:5a:93:73:fd:eb:e9:63:e4:6c:35:be:
d7:30:6d:7b:b4:76:b4:36:e6:2e:78:90:8c:43:01:6e:f7:4c:
89:e5:24:f4:82:63:d3:bc:7d:c0:9d:e9:75:b8:6f:b7:c7:47:
1b:73:f0:48:42:c4:ca:2e:d9:99:3d:aa:5a:5c:c4:bb:76:c2:
a2:fb:b6:84:a7:16:63:b4:79:45:8b:99:c5:9c:aa:f5:13:64:
1b:c5:72:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 18:00:49 2023 by rpki-client on console-ams.rpki-client.org