Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS23033.roa
File: AS23033.roa (raw, json)
Hash identifier: KDFG47Ji8OUg6N7YfJsoxf8+0/YfIlMB2A2lO0ax9SY=
Subject key identifier: DD:2B:92:E7:43:78:19:53:5B:5C:00:BF:36:EC:F1:51:AE:27:40:C0
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 5FECF6B1C4CB7301D7FDEB274617EE9E4FC21781
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS23033.roa
Signing time: Tue 05 Sep 2023 22:50:33 +0000
ROA not before: Tue 05 Sep 2023 22:45:33 +0000
ROA not after: Tue 03 Sep 2024 22:50:33 +0000
asID: 23033
IP address blocks: 140.99.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ec:f6:b1:c4:cb:73:01:d7:fd:eb:27:46:17:ee:9e:4f:c2:17:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Sep 5 22:45:33 2023 GMT
Not After : Sep 3 22:50:33 2024 GMT
Subject: CN=DD2B92E7437819535B5C00BF36ECF151AE2740C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5a:31:ee:f2:19:f2:e8:a6:15:93:26:57:4a:
9b:f7:00:ab:d5:ab:ed:69:01:0a:c5:93:69:64:07:
69:c8:bb:0a:d8:29:c4:22:14:95:ce:a6:4a:58:6f:
e4:ee:53:e5:8c:96:2b:82:b9:c4:05:8a:d1:ec:81:
6b:8e:3b:38:18:3f:d3:8c:23:d3:d8:f4:ab:b2:81:
16:d3:4e:28:bc:7e:e1:60:7a:7f:8d:36:19:8b:bf:
c5:6b:45:39:ee:fa:5f:1d:a2:0c:93:a2:86:8f:de:
1c:48:48:c4:eb:ea:78:a3:3f:48:a5:3d:05:55:87:
fc:f7:e2:cc:d8:2e:61:79:13:8c:27:62:ed:aa:07:
96:7a:70:1c:c5:f4:db:98:c2:a4:6d:af:8e:af:05:
4d:f2:7d:40:b6:d9:f9:5c:3a:d1:d3:2c:f6:ba:11:
be:86:1b:4e:29:4c:69:06:2a:f1:4a:b7:c7:4a:6c:
6a:8a:93:81:a2:3f:52:68:15:88:f9:a0:8f:57:5a:
cf:fc:00:ec:0f:de:f2:d3:3c:e9:2a:29:5d:c4:77:
e0:3f:cf:17:63:ca:b1:e2:7c:d6:f0:01:0a:55:ac:
d0:db:fa:7f:ff:b1:0f:45:07:af:fa:8e:0b:16:7e:
17:4a:13:c3:d5:d4:f0:7a:f5:2d:63:8b:8f:7b:24:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2B:92:E7:43:78:19:53:5B:5C:00:BF:36:EC:F1:51:AE:27:40:C0
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS23033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.222.0/24
Signature Algorithm: sha256WithRSAEncryption
76:73:3e:12:4c:51:3d:d3:41:18:b9:19:4e:bb:49:9f:fe:7a:
15:86:7a:10:e3:65:94:9a:4c:4b:2d:cb:ac:35:ff:55:0d:0b:
47:27:67:a3:78:3d:d9:17:0d:9f:e6:e3:41:25:de:df:97:91:
b6:48:0c:2b:ce:53:2f:01:e6:2e:5c:7c:8c:a1:77:e9:5b:35:
10:3f:f9:43:e3:c5:63:c0:81:81:a8:13:c3:19:3e:13:ef:f2:
b7:1f:80:27:4b:98:d9:32:cf:ec:ec:ca:66:28:88:a2:04:3e:
0f:50:76:af:c7:9c:9d:03:83:28:97:8d:01:4f:eb:f3:9d:24:
32:9b:63:6e:76:e1:aa:03:0a:ad:49:f9:e3:ac:72:2b:e6:42:
e8:ec:27:a4:1f:1e:52:d5:0b:32:d4:0d:e6:0e:d8:d5:90:2d:
45:1a:d5:02:e2:6c:ca:54:e2:be:d2:3b:ec:bc:69:37:38:61:
bb:9d:3c:6e:1a:a6:56:12:d6:09:3f:45:e1:e3:7c:68:76:5a:
2e:ab:47:77:a2:f4:1f:36:81:32:3d:ee:04:83:ab:6e:84:23:
c7:9b:d9:41:94:40:e4:77:24:59:8b:e2:96:60:49:86:9c:a5:
eb:d5:3c:be:84:54:88:e1:75:62:52:aa:e5:82:41:f8:2c:5a:
4b:e2:5a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 20:33:57 2023 by rpki-client on console-fra.rpki-client.org