Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: 9jh04m8fCFyXt+9ovy5bw7E7DrIlkgTsv2jywJxXNDc=
Subject key identifier: A3:C3:AB:F2:0F:8E:7B:5B:8C:01:D2:C4:29:D0:7C:78:0E:6F:FC:8F
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 67D2C6A21EEF415F4E65683B0FDE97DF84972733
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS40676.roa
Signing time: Wed 29 Mar 2023 22:15:30 +0000
ROA not before: Wed 29 Mar 2023 22:10:30 +0000
ROA not after: Wed 27 Mar 2024 22:15:30 +0000
asID: 40676
IP address blocks: 140.99.70.0/24 maxlen: 24
140.99.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d2:c6:a2:1e:ef:41:5f:4e:65:68:3b:0f:de:97:df:84:97:27:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Mar 29 22:10:30 2023 GMT
Not After : Mar 27 22:15:30 2024 GMT
Subject: CN=A3C3ABF20F8E7B5B8C01D2C429D07C780E6FFC8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:42:8f:58:1c:95:15:9b:c7:f3:1c:1e:8e:
14:21:74:84:c6:73:b1:ad:77:ce:1d:93:11:86:f5:
25:25:52:1c:78:fc:2b:d1:a3:e8:84:3b:c9:d0:1b:
f0:b1:9a:35:66:5e:9a:53:bf:6f:de:bd:e8:72:d6:
4c:1b:3b:a9:c8:c4:c5:43:9a:88:36:59:bf:34:71:
00:b3:ee:cf:60:6d:62:ab:39:aa:5b:4f:eb:5e:e2:
c1:9b:73:42:57:41:bb:c5:e9:4c:8e:4d:1b:9b:33:
a3:03:94:2c:f4:0b:02:7c:e3:1a:87:ab:0b:5a:43:
65:b2:7a:6e:bf:d6:b3:23:aa:0d:7b:83:0f:c0:5d:
19:83:39:3f:d2:8a:10:58:da:b0:31:9f:95:e5:da:
55:c5:41:1f:05:7d:d6:36:4a:7a:dc:c9:71:b4:c9:
97:b9:9b:55:6b:b8:2b:f1:79:43:0e:04:d4:ea:09:
49:bb:d1:3a:b0:60:2d:b5:a7:cf:be:0c:ea:fc:52:
e6:da:0e:49:ca:73:dd:61:a1:fe:c8:3a:c4:aa:87:
fe:a7:58:1d:d8:39:8d:ae:73:71:3f:57:44:e3:72:
70:a3:18:76:41:2f:b1:47:da:1c:bf:05:0c:62:9a:
0d:dd:05:3e:15:48:c6:42:d0:d6:93:fd:87:d5:be:
c8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C3:AB:F2:0F:8E:7B:5B:8C:01:D2:C4:29:D0:7C:78:0E:6F:FC:8F
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.70.0/24
140.99.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:89:17:b6:4b:ce:41:5d:b7:e1:94:97:24:39:b3:e4:ce:7e:
ac:d9:82:ce:14:82:51:a4:48:f7:b6:57:b5:e0:98:6b:59:48:
a4:38:9f:ab:4f:70:e6:8e:86:58:95:18:2b:ba:66:e4:75:ee:
fa:ff:9e:9d:dc:5d:68:40:84:48:83:a9:b7:73:07:d1:6a:b9:
41:ca:63:6c:0f:e8:84:a4:f8:af:83:3c:ef:46:14:3a:5c:4e:
4a:95:65:65:90:e8:38:6b:5d:42:57:42:c2:90:d3:5d:99:14:
ce:6b:de:99:28:f9:a7:8d:f4:dc:29:54:e6:ac:73:81:3f:27:
69:2a:ff:09:fa:b7:60:d5:94:8e:8d:a9:ce:a0:c2:de:18:ab:
27:3a:90:7f:f1:29:8d:9e:c7:c6:aa:57:56:d0:76:8e:70:5c:
7f:16:b9:40:03:aa:94:da:1c:02:14:ee:f4:06:28:c5:35:92:
59:5a:4a:c6:d9:20:d8:b5:f3:d1:be:03:ff:50:70:77:7d:d2:
e7:fe:07:a8:c2:0a:f1:1c:e7:50:f2:c5:f6:53:df:47:d4:e2:
16:d9:e6:39:b5:48:87:ad:94:4d:7f:ba:d5:65:f1:7a:03:14:
73:9a:79:c3:d8:f7:09:40:a4:02:c0:65:ec:1a:c1:7b:59:93:
f6:0f:d4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 17:52:54 2023 by rpki-client on console-fra.rpki-client.org