Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33387.roa
File: AS33387.roa (raw, json)
Hash identifier: O+ysl34qlobbuOO7BekegTsLfBBMxzi8/JJN3BVmmyc=
Subject key identifier: EF:50:22:CD:B9:CE:EE:0A:B4:B3:1A:5C:46:64:55:2D:B6:A3:A1:21
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 354390B544F8B2B3DEF332FD1E4868B06560C3ED
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33387.roa
Signing time: Wed 26 Oct 2022 10:17:57 +0000
ROA not before: Wed 26 Oct 2022 10:12:57 +0000
ROA not after: Wed 25 Oct 2023 10:17:57 +0000
asID: 33387
IP address blocks: 140.99.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:43:90:b5:44:f8:b2:b3:de:f3:32:fd:1e:48:68:b0:65:60:c3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Oct 26 10:12:57 2022 GMT
Not After : Oct 25 10:17:57 2023 GMT
Subject: CN=EF5022CDB9CEEE0AB4B31A5C4664552DB6A3A121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:e9:17:8b:16:40:18:1f:11:20:98:e5:7e:
92:7c:6d:6b:f9:46:96:58:f7:9a:9c:ec:a3:8e:63:
cd:d9:9b:8f:4b:5c:d9:17:ab:83:49:d8:78:11:3c:
68:fc:f3:a6:30:c6:5b:3f:41:c1:30:4b:2c:e9:30:
21:1e:a0:26:c7:e5:2c:0d:0e:29:9e:68:c8:9f:b4:
1a:89:7c:6d:59:ef:c0:ca:a4:c9:5f:17:db:24:67:
6d:9f:31:3e:61:66:47:f7:6c:4f:0c:03:66:74:c7:
c0:d5:dd:67:24:ea:cb:f1:57:82:7e:94:f7:e0:d4:
8c:df:30:f8:ed:6a:4d:cf:8f:2a:59:8b:dd:2d:fb:
03:a6:30:1c:8c:a5:de:66:02:2e:fa:4c:c8:ba:04:
b7:3c:17:2f:11:1a:94:87:fb:54:d2:e3:4c:3c:74:
55:5e:1f:e1:8a:93:cf:e9:55:c2:e7:c5:8b:3d:6c:
b8:b7:fd:b5:ed:f9:0a:6a:cc:f9:6b:58:44:42:ea:
48:a7:c4:46:ab:82:a5:16:60:b7:fa:39:97:8d:6d:
3c:d1:6d:85:d5:62:ce:dc:0e:08:53:34:20:d0:e0:
24:8d:c2:5a:a5:46:99:2d:49:0c:00:b1:d9:86:67:
af:4d:7a:4c:0c:ea:8d:a4:97:47:b5:0b:3f:ee:d2:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:50:22:CD:B9:CE:EE:0A:B4:B3:1A:5C:46:64:55:2D:B6:A3:A1:21
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.33.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6b:a6:c1:14:fb:50:c2:a4:bd:60:c4:88:f4:9f:6b:72:69:
0a:bc:7a:3a:dc:18:72:cb:79:99:e7:58:51:55:04:c9:c7:3b:
b6:be:29:7b:7d:76:bb:f7:77:f3:33:4e:08:e1:4b:f5:db:cc:
52:37:2b:38:c4:05:8d:01:19:1e:22:94:90:02:84:a4:8d:74:
36:08:f6:ad:41:99:3e:17:ea:ae:e0:09:31:0f:25:17:fb:cd:
0d:bb:b5:04:0e:45:ad:68:3e:52:80:ee:fe:f1:c4:d1:fa:64:
5d:38:4f:e5:b4:69:5c:79:3d:23:54:b1:43:98:22:01:88:3d:
af:06:0e:41:5c:fe:68:d7:58:c3:30:db:63:cd:7d:bd:0e:00:
26:45:fc:24:23:1a:5a:2b:5d:34:63:9f:20:d0:f8:b3:9f:3b:
16:bb:33:5c:b3:00:9d:c2:81:eb:13:2d:b3:9f:e2:6e:bb:05:
fc:93:b1:6a:6c:d3:cc:35:40:46:d3:5a:0d:d9:ed:8d:da:6c:
c1:89:b6:67:8c:16:3c:4d:09:7e:88:7a:4e:99:10:0b:57:81:
5d:4e:c6:13:d6:17:cf:8d:4f:8f:77:53:51:73:05:e0:46:fb:
5f:7b:ea:cf:81:c3:5b:86:44:f2:7a:51:e7:26:ce:c0:16:18:
1e:e1:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 17:32:24 2023 by rpki-client on console-ams.rpki-client.org