Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS270966.roa
File: AS270966.roa (raw, json)
Hash identifier: iCbPNshcqkBFksp1ctgauRpJ75/cALFZVYVbg4dkezM=
Subject key identifier: B5:3A:32:1F:38:B1:C3:36:0F:25:2F:28:58:62:FD:A9:99:07:DE:2D
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 7CAC3E86FB20AC770DF2DBFE811729268C60C184
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS270966.roa
Signing time: Tue 05 Dec 2023 05:01:11 +0000
ROA not before: Tue 05 Dec 2023 04:56:11 +0000
ROA not after: Tue 03 Dec 2024 05:01:11 +0000
asID: 270966
IP address blocks: 140.99.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ac:3e:86:fb:20:ac:77:0d:f2:db:fe:81:17:29:26:8c:60:c1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Dec 5 04:56:11 2023 GMT
Not After : Dec 3 05:01:11 2024 GMT
Subject: CN=B53A321F38B1C3360F252F285862FDA99907DE2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:2f:a0:f8:95:e6:57:36:e6:03:6b:72:c9:
a7:3a:18:72:ec:c1:ef:11:6e:58:e8:89:ee:38:56:
d9:0c:8b:ef:b3:1a:5f:8a:56:92:36:95:e1:e6:6d:
40:42:ce:52:41:14:e2:d8:e8:b3:7d:ae:4f:ff:6f:
60:72:e6:6b:90:1e:44:4a:d5:81:0c:45:90:ee:c5:
26:a7:19:0f:2f:bf:23:26:4f:89:2e:a9:6f:32:ce:
38:8f:9d:1d:f1:8d:e5:24:ff:e2:ed:89:15:2e:e8:
c8:5a:fe:ed:52:1c:ce:64:5b:e5:ad:59:50:cc:f9:
28:f2:9a:a3:58:c7:3c:66:b8:37:d5:68:0e:48:ca:
4e:96:07:7c:e2:4b:ab:01:25:a9:95:d2:e9:80:b2:
db:75:36:60:cf:b8:1e:02:28:e7:f2:5f:a9:ab:cf:
23:49:82:63:25:ef:de:4e:07:f0:5e:2c:37:31:4f:
a9:74:22:db:c0:d9:9b:09:9d:48:b5:3e:6f:23:86:
2a:08:b0:b8:38:ad:e2:a8:f7:fc:70:82:8b:07:90:
b5:23:ca:71:39:59:87:18:11:79:9c:55:0f:b5:ad:
4a:e2:1b:fd:55:90:b6:01:fa:69:77:59:00:2d:41:
4b:ac:29:2e:36:f6:eb:8e:c3:fe:44:81:6a:a6:4e:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3A:32:1F:38:B1:C3:36:0F:25:2F:28:58:62:FD:A9:99:07:DE:2D
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS270966.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.104.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e4:dd:3a:f5:e3:50:05:9b:81:f5:cb:ab:fe:f8:f3:10:db:
35:73:2c:63:de:e5:c6:cf:41:43:89:89:89:e8:66:be:6f:74:
c7:70:56:08:6b:77:d3:a0:f9:cb:da:00:d5:d7:f1:ca:8b:c0:
16:bb:d6:b2:d3:3e:a2:98:ac:b0:14:0f:9e:bb:91:6c:1d:5d:
55:59:5e:85:be:fc:d9:27:15:a4:3c:92:f7:c3:28:cf:0a:6f:
fe:c1:f7:7b:55:63:42:18:22:1e:47:69:12:0a:f2:ba:44:1c:
04:89:0b:1f:31:61:c3:26:69:83:e3:c4:38:cd:f4:b6:d3:e9:
b9:87:69:1f:60:b2:6a:8f:e7:9b:7c:06:08:b1:57:b5:b8:94:
21:18:15:d3:2e:2c:5a:4c:e1:e9:f4:12:f9:43:18:55:d8:d8:
cd:7b:5c:6e:6f:6a:51:d2:59:e0:32:6d:f1:3a:a1:f6:80:06:
cc:d1:95:bc:d1:1a:43:fd:3e:2b:7f:85:f7:f7:44:d8:7f:b8:
cf:de:59:4e:da:f8:77:31:54:50:04:96:7c:d1:0b:fa:71:0b:
e1:33:dc:e1:5b:b7:f0:7c:2d:e3:1f:29:f2:1e:7c:e0:fa:1e:
88:6b:a7:26:4b:c1:d1:34:1d:72:06:fa:a3:84:98:90:28:2c:
a7:98:1a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org