Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: g5beSxiRvW35nTeg/4xT9YPdbsxWEXQLf3cHiiodrog=
Subject key identifier: E3:89:48:8A:49:57:69:38:B6:A4:77:1C:42:44:F0:4A:AD:CA:29:9B
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 5300F96C0BE65A46EA12E269CF059B009385E59D
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS2914.roa
Signing time: Sat 24 Jun 2023 12:30:05 +0000
ROA not before: Sat 24 Jun 2023 12:25:05 +0000
ROA not after: Sat 22 Jun 2024 12:30:05 +0000
asID: 2914
IP address blocks: 140.99.64.0/24 maxlen: 24
140.99.65.0/24 maxlen: 24
140.99.67.0/24 maxlen: 24
140.99.68.0/24 maxlen: 24
140.99.69.0/24 maxlen: 24
140.99.72.0/24 maxlen: 24
140.99.74.0/24 maxlen: 24
140.99.76.0/24 maxlen: 24
140.99.80.0/24 maxlen: 24
140.99.82.0/24 maxlen: 24
140.99.89.0/24 maxlen: 24
140.99.105.0/24 maxlen: 24
140.99.106.0/24 maxlen: 24
140.99.110.0/24 maxlen: 24
140.99.111.0/24 maxlen: 24
140.99.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:00:f9:6c:0b:e6:5a:46:ea:12:e2:69:cf:05:9b:00:93:85:e5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Jun 24 12:25:05 2023 GMT
Not After : Jun 22 12:30:05 2024 GMT
Subject: CN=E389488A49576938B6A4771C4244F04AADCA299B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9c:07:db:42:fc:4e:a2:b3:61:7e:e9:1a:1b:
4d:58:fc:c8:fe:91:7e:f4:2b:8d:e5:55:a8:bb:0f:
2d:d1:0f:65:64:dd:12:ee:50:63:01:05:e0:35:39:
5d:a8:83:c8:9c:2e:2f:51:e3:91:93:cb:96:35:a4:
ba:ee:c0:72:72:82:2c:39:74:1a:84:0c:8a:14:08:
b0:7c:e9:b0:53:9b:ae:7b:b0:67:ce:b8:09:bc:ca:
c6:c0:f8:41:72:58:e0:99:47:d4:94:b9:cb:7b:87:
39:dc:14:ba:e7:33:a0:f5:74:ae:02:da:b1:f8:43:
0a:c3:97:f5:c8:5f:ac:6b:28:0a:b9:8a:44:ea:ff:
14:58:e9:49:91:33:6f:12:81:a2:74:51:55:44:b0:
3b:50:47:d1:43:0b:69:c7:19:a2:3f:92:bc:41:57:
d6:60:5d:be:08:42:83:50:22:4e:6c:e0:96:c5:a5:
dc:6d:8c:4c:97:38:13:fd:ec:b9:a8:75:43:5a:b5:
17:48:3b:7b:8a:26:94:45:ae:64:1d:78:d4:b5:a3:
41:80:ff:9c:40:96:fe:de:d4:be:a4:bf:44:81:f4:
8c:26:45:aa:ee:07:87:1e:fd:c4:d9:d5:7a:19:0c:
7b:aa:46:4b:9f:f4:9e:1d:1c:e0:e5:05:93:c2:7b:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:89:48:8A:49:57:69:38:B6:A4:77:1C:42:44:F0:4A:AD:CA:29:9B
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.64.0/23
140.99.67.0-140.99.69.255
140.99.72.0/24
140.99.74.0/24
140.99.76.0/24
140.99.80.0/24
140.99.82.0/24
140.99.89.0/24
140.99.105.0-140.99.106.255
140.99.110.0/23
140.99.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:de:88:06:16:9e:2f:13:6d:e4:bc:8c:a7:fe:fc:ac:52:bb:
82:2a:22:9b:3b:cd:13:21:6d:6a:9e:60:f0:12:98:fc:1f:3b:
01:5a:16:08:31:60:e8:d2:9a:49:b7:68:3e:73:ee:0f:af:c6:
83:64:7d:14:07:d5:6d:db:6c:3b:f9:5b:c3:8d:c3:57:39:18:
91:73:64:ed:24:da:88:b7:48:ae:c6:67:57:ef:05:a8:ce:20:
2b:99:3a:68:20:2d:be:7d:5e:49:21:22:75:8c:af:d8:91:40:
02:6d:36:d9:11:c0:76:04:20:43:85:4c:f1:5e:47:c3:8d:6a:
2f:6b:59:c9:cf:86:31:63:0c:84:89:f8:23:cd:9f:6e:0d:bb:
e6:9c:c5:e5:ad:b3:ac:80:6b:2c:d2:de:4e:3b:e2:28:fe:48:
63:6c:56:f0:2e:14:ab:72:32:fb:05:f6:aa:d2:37:ad:1b:6b:
aa:0e:62:db:21:51:8c:5f:da:df:44:8c:d3:25:f3:e9:8b:e6:
89:40:df:5c:75:2e:99:b2:ae:1a:b4:ca:20:4d:58:ff:42:ed:
18:e2:f7:02:0b:12:60:aa:98:c0:4f:1c:2e:42:84:0c:34:34:
c9:9e:bf:73:24:9e:c4:5d:a2:43:5d:5f:cd:5f:29:bb:04:86:
c7:70:b4:04
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUUwD5bAvmWkbqEuJpzwWbAJOF5Z0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjMwNjI0MTIyNTA1WhcNMjQwNjIyMTIzMDA1
WjAzMTEwLwYDVQQDEyhFMzg5NDg4QTQ5NTc2OTM4QjZBNDc3MUM0MjQ0RjA0QUFE
Q0EyOTlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JwH20L8TqKz
YX7pGhtNWPzI/pF+9CuN5VWouw8t0Q9lZN0S7lBjAQXgNTldqIPInC4vUeORk8uW
NaS67sBycoIsOXQahAyKFAiwfOmwU5uue7BnzrgJvMrGwPhBcljgmUfUlLnLe4c5
3BS65zOg9XSuAtqx+EMKw5f1yF+saygKuYpE6v8UWOlJkTNvEoGidFFVRLA7UEfR
QwtpxxmiP5K8QVfWYF2+CEKDUCJObOCWxaXcbYxMlzgT/ey5qHVDWrUXSDt7iiaU
Ra5kHXjUtaNBgP+cQJb+3tS+pL9EgfSMJkWq7geHHv3E2dV6GQx7qkZLn/SeHRzg
5QWTwns2ZwIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFOOJSIpJV2k4tqR3HEJE8Eqt
yimbMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzI5MTQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwawYI
KwYBBQUHAQcBAf8EXDBaMFgEAgABMFIDBAGMY0AwDAMEAIxjQwMEAYxjRAMEAIxj
SAMEAIxjSgMEAIxjTAMEAIxjUAMEAIxjUgMEAIxjWTAMAwQAjGNpAwQAjGNqAwQB
jGNuAwQAjGNxMA0GCSqGSIb3DQEBCwUAA4IBAQC33ogGFp4vE23kvIyn/vysUruC
KiKbO80TIW1qnmDwEpj8HzsBWhYIMWDo0ppJt2g+c+4Pr8aDZH0UB9Vt22w7+VvD
jcNXORiRc2TtJNqIt0iuxmdX7wWoziArmTpoIC2+fV5JISJ1jK/YkUACbTbZEcB2
BCBDhUzxXkfDjWova1nJz4YxYwyEifgjzZ9uDbvmnMXlrbOsgGss0t5OO+Io/khj
bFbwLhSrcjL7Bfaq0jetG2uqDmLbIVGMX9rfRIzTJfPpi+aJQN9cdS6Zsq4atMog
TVj/Qu0Y4vcCCxJgqpjATxwuQoQMNDTJnr9zJJ7EXaJDXV/NXym7BIbHcLQE
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:22 2023 by rpki-client on console-ams.rpki-client.org