Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS210703.roa
File: AS210703.roa (raw, json)
Hash identifier: UnYklO2Jqti3uRpCdjXUQrdEgnjiF7SqSLBXA7GEjxM=
Subject key identifier: DE:CC:1A:7C:A4:AF:6F:1E:2C:42:ED:BC:F7:B8:23:01:79:F3:9E:E1
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 49FDF94597314A18B09AA0E9D9AF9A4DC6CC490F
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS210703.roa
Signing time: Fri 01 Sep 2023 17:00:39 +0000
ROA not before: Fri 01 Sep 2023 16:55:39 +0000
ROA not after: Fri 30 Aug 2024 17:00:39 +0000
asID: 210703
IP address blocks: 140.99.57.0/24 maxlen: 24
140.99.59.0/24 maxlen: 24
140.99.73.0/24 maxlen: 24
140.99.95.0/24 maxlen: 24
140.99.141.0/24 maxlen: 24
140.99.159.0/24 maxlen: 24
140.99.171.0/24 maxlen: 24
140.99.194.0/24 maxlen: 24
140.99.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:fd:f9:45:97:31:4a:18:b0:9a:a0:e9:d9:af:9a:4d:c6:cc:49:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Sep 1 16:55:39 2023 GMT
Not After : Aug 30 17:00:39 2024 GMT
Subject: CN=DECC1A7CA4AF6F1E2C42EDBCF7B8230179F39EE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:5f:92:d1:b0:26:82:6c:d6:13:77:be:ae:
39:8d:14:9d:e4:89:8c:9a:e6:1d:01:ba:ef:f7:c6:
98:31:d9:d6:3d:59:f1:dd:e5:3f:c4:00:78:c9:fb:
24:85:69:c1:1c:35:28:82:64:2a:c9:31:63:e6:34:
bf:f3:73:e9:26:f8:b2:6f:78:0c:63:c7:22:49:eb:
c5:fc:24:be:5e:33:3b:5d:f8:9c:fa:54:92:3b:30:
76:be:9e:c8:f7:7e:44:44:ea:e4:d4:ea:d8:30:7f:
a6:3f:23:3f:83:83:30:e2:7d:fc:4e:bc:bf:c9:8e:
53:8e:bf:69:93:a3:cf:05:86:b5:5e:f3:08:91:be:
59:c0:a4:6f:41:09:b2:fc:a8:02:01:a1:d6:98:b6:
38:97:8c:b7:6d:4e:75:f1:d0:2c:92:73:c0:83:9a:
0c:70:65:73:a2:40:c2:f7:35:bd:66:0b:97:2a:5d:
28:04:9b:cb:57:19:ba:52:06:6a:3e:5f:34:e4:a3:
e9:33:f3:70:dd:21:f1:fd:61:f3:c0:f0:44:30:34:
24:f6:3d:db:d9:bf:a2:a1:d4:2a:18:d8:0b:80:bc:
a0:56:1d:d7:81:7d:e8:cb:a3:23:a7:f1:e3:f3:01:
1b:a0:2b:7c:36:b4:16:da:16:7a:66:be:69:eb:51:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CC:1A:7C:A4:AF:6F:1E:2C:42:ED:BC:F7:B8:23:01:79:F3:9E:E1
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS210703.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.57.0/24
140.99.59.0/24
140.99.73.0/24
140.99.95.0/24
140.99.141.0/24
140.99.159.0/24
140.99.171.0/24
140.99.194.0/24
140.99.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d4:78:de:a6:38:2e:45:ac:82:19:47:17:97:06:72:a3:6e:
ae:7c:d1:b4:51:b1:17:7c:4c:6a:11:6e:4f:3d:ba:79:09:36:
3f:be:95:0d:14:a1:b4:f0:90:50:fa:fe:ce:2a:25:09:5c:85:
14:ad:08:b7:fc:cd:c3:cb:3e:1d:fa:0c:80:0c:c5:4d:9e:f4:
ef:54:c1:43:d2:36:8d:8a:56:fd:f6:16:95:33:93:b0:c1:0c:
0c:0c:5c:9b:6c:97:e7:ac:74:a4:6b:7f:cb:e5:63:6a:6a:d3:
a1:9b:21:cf:22:d7:78:fc:1b:be:82:9a:3c:59:17:bb:08:e8:
29:8d:e5:87:56:fe:50:3c:17:fe:0d:d0:1f:41:a6:fe:9a:58:
1f:b9:3b:ba:21:2a:e5:6f:11:dc:d0:74:2e:81:60:e6:60:a5:
70:f0:28:5f:50:e3:35:b2:e7:15:4c:75:a3:e1:77:b1:d1:d2:
59:f1:38:9d:ec:90:0c:4c:09:84:2d:c6:c0:c4:2c:ae:03:b5:
95:05:ff:30:77:6f:d1:67:8c:a7:e3:f3:d7:97:1e:79:a1:d0:
33:16:5d:c9:0f:7a:82:7a:0f:a6:86:cc:12:64:0d:89:10:eb:
55:50:d6:53:0d:c2:cf:19:26:42:86:ad:d4:d8:fb:4b:fd:df:
50:ee:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 17:52:54 2023 by rpki-client on console-fra.rpki-client.org