Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS210439.roa
File: AS210439.roa (raw, json)
Hash identifier: 49KUc/XRWsG+ylCTkAVfelHoP/DQ/qpHSqH1WWuoDxo=
Subject key identifier: 7B:44:A2:6D:93:8D:16:50:23:99:8E:73:FB:59:DA:E3:A9:89:8A:98
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 01879D7CC0D50DAF5B59C83BFA3FF5C5D5C1813E
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS210439.roa
Signing time: Fri 14 Apr 2023 00:00:18 +0000
ROA not before: Thu 13 Apr 2023 23:55:18 +0000
ROA not after: Fri 12 Apr 2024 00:00:18 +0000
asID: 210439
IP address blocks: 140.99.158.0/24 maxlen: 24
140.99.170.0/24 maxlen: 24
140.99.195.0/24 maxlen: 24
140.99.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:7c:c0:d5:0d:af:5b:59:c8:3b:fa:3f:f5:c5:d5:c1:81:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Apr 13 23:55:18 2023 GMT
Not After : Apr 12 00:00:18 2024 GMT
Subject: CN=7B44A26D938D165023998E73FB59DAE3A9898A98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:fd:8c:6b:1a:34:eb:2c:fd:42:e4:aa:c9:
18:23:e0:f5:1b:10:fd:57:10:a8:2b:e8:57:cd:7b:
32:8a:9a:0d:24:9e:2b:3c:19:90:4c:b9:f6:1b:1c:
af:20:b3:7c:6b:dc:96:19:e2:95:0f:65:2a:d8:04:
cb:90:af:ff:b7:d5:57:22:45:15:f0:01:17:30:5b:
5f:92:41:e0:68:d4:e2:32:85:b0:04:34:ba:45:6e:
b8:6f:34:fa:14:7f:e6:85:37:02:34:32:df:27:43:
96:79:bf:31:25:77:dc:4d:88:bb:3c:09:b3:0a:58:
f4:dd:29:6f:9c:55:51:18:a8:bf:10:d7:79:fe:6a:
ee:d0:75:67:46:8f:7f:d9:3e:a7:49:ac:d9:7d:8a:
6e:e6:29:8d:d7:7b:25:13:ef:ed:21:2b:3a:58:7e:
f5:61:97:ea:39:85:ab:91:c0:64:ef:9a:4b:e2:bc:
38:18:97:61:74:73:4e:65:9b:ab:5c:2d:7e:48:38:
1e:88:1c:25:c7:2f:6a:4a:be:58:8f:f3:d8:ed:4d:
cd:c0:36:07:e8:64:c6:ce:bb:1d:67:c8:12:55:b1:
4a:c3:0d:85:59:28:ce:07:d4:92:4d:48:47:85:7b:
0c:b4:e9:50:7c:40:e3:42:2e:67:82:00:a3:7e:25:
4c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:44:A2:6D:93:8D:16:50:23:99:8E:73:FB:59:DA:E3:A9:89:8A:98
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS210439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.158.0/24
140.99.170.0/24
140.99.195.0/24
140.99.200.0/24
Signature Algorithm: sha256WithRSAEncryption
12:32:26:14:eb:67:2e:89:da:2d:52:45:7c:98:9c:85:c0:17:
e4:5b:00:d3:d8:36:7c:f7:ad:9d:fb:4c:93:0e:d9:68:5d:6e:
4b:e8:56:ee:ce:ee:a3:2c:f0:76:ce:f0:82:d2:11:4f:dc:d9:
4c:6d:1b:58:cd:40:83:bb:f4:f3:b7:29:75:66:08:ee:5a:c7:
2d:d6:d6:c5:b6:64:8c:03:33:bd:62:30:d4:85:dd:30:3b:bf:
9c:06:17:94:fe:b3:3b:c5:1b:ef:fc:c9:5d:d6:4a:d8:57:fb:
a7:2a:0f:98:76:2c:61:08:27:c9:9f:dc:47:c8:5a:fc:0e:5a:
23:d9:45:7c:c1:90:dd:d0:b8:7c:de:6b:cf:77:4b:28:ee:5c:
9e:0a:ff:66:32:64:b0:f6:e6:ec:ec:48:3f:9f:83:96:5a:07:
9c:24:80:70:71:bf:c2:4e:70:54:4c:a0:3d:84:24:6c:c0:9f:
3f:e0:77:54:e1:d8:35:75:1e:c6:80:f5:32:af:4f:b5:8a:c8:
ea:28:04:d9:51:0d:95:09:be:58:ee:76:e2:03:e3:5b:6b:4f:
41:0a:0c:74:51:9e:76:fc:cc:d9:9f:b7:79:a6:00:04:8c:f9:
eb:24:4b:94:cf:e1:6a:03:06:83:63:9c:4a:5a:49:a0:9c:32:
a1:d8:58:bf
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUAYedfMDVDa9bWcg7+j/1xdXBgT4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjMwNDEzMjM1NTE4WhcNMjQwNDEyMDAwMDE4
WjAzMTEwLwYDVQQDEyg3QjQ0QTI2RDkzOEQxNjUwMjM5OThFNzNGQjU5REFFM0E5
ODk4QTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSr9jGsaNOss
/ULkqskYI+D1GxD9VxCoK+hXzXsyipoNJJ4rPBmQTLn2GxyvILN8a9yWGeKVD2Uq
2ATLkK//t9VXIkUV8AEXMFtfkkHgaNTiMoWwBDS6RW64bzT6FH/mhTcCNDLfJ0OW
eb8xJXfcTYi7PAmzClj03SlvnFVRGKi/ENd5/mru0HVnRo9/2T6nSazZfYpu5imN
13slE+/tISs6WH71YZfqOYWrkcBk75pL4rw4GJdhdHNOZZurXC1+SDgeiBwlxy9q
Sr5Yj/PY7U3NwDYH6GTGzrsdZ8gSVbFKww2FWSjOB9SSTUhHhXsMtOlQfEDjQi5n
ggCjfiVMwQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFHtEom2TjRZQI5mOc/tZ2uOp
iYqYMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzIxMDQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAIxjngMEAIxjqgMEAIxjwwMEAIxj
yDANBgkqhkiG9w0BAQsFAAOCAQEAEjImFOtnLonaLVJFfJichcAX5FsA09g2fPet
nftMkw7ZaF1uS+hW7s7uoyzwds7wgtIRT9zZTG0bWM1Ag7v087cpdWYI7lrHLdbW
xbZkjAMzvWIw1IXdMDu/nAYXlP6zO8Ub7/zJXdZK2Ff7pyoPmHYsYQgnyZ/cR8ha
/A5aI9lFfMGQ3dC4fN5rz3dLKO5cngr/ZjJksPbm7OxIP5+DlloHnCSAcHG/wk5w
VEygPYQkbMCfP+B3VOHYNXUexoD1Mq9PtYrI6igE2VENlQm+WO524gPjW2tPQQoM
dFGedvzM2Z+3eaYABIz56yRLlM/hagMGg2OcSlpJoJwyodhYvw==
-----END CERTIFICATE-----
Generated at Fri Sep 1 18:00:49 2023 by rpki-client on console-ams.rpki-client.org