Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS43260.roa
File: AS43260.roa (raw, json)
Hash identifier: 7W65u/lQNmg392MNDgznep4I5QmWe2j4B6oF0LeRzKY=
Subject key identifier: AE:32:46:7B:1C:11:B3:F6:B6:2A:BE:1B:67:AC:28:2D:96:6B:F7:1A
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 36A30C84B4B7D8CDF568979ACBE11199443B7BC9
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS43260.roa
Signing time: Thu 07 Sep 2023 14:32:45 +0000
ROA not before: Thu 07 Sep 2023 14:27:45 +0000
ROA not after: Thu 05 Sep 2024 14:32:45 +0000
asID: 43260
IP address blocks: 140.99.2.0/24 maxlen: 24
140.99.3.0/24 maxlen: 24
140.99.4.0/24 maxlen: 24
140.99.5.0/24 maxlen: 24
140.99.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a3:0c:84:b4:b7:d8:cd:f5:68:97:9a:cb:e1:11:99:44:3b:7b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Sep 7 14:27:45 2023 GMT
Not After : Sep 5 14:32:45 2024 GMT
Subject: CN=AE32467B1C11B3F6B62ABE1B67AC282D966BF71A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:42:a9:dd:58:c9:32:b8:a1:6d:a0:e4:95:
a1:2b:94:c7:fc:c3:ff:dd:86:67:f7:a2:ae:3c:09:
85:61:1c:71:63:85:71:a6:db:bb:08:d0:d4:94:61:
6d:c3:d9:04:b5:aa:ea:dc:0b:df:18:dc:32:f2:e5:
79:8e:9d:29:e1:b5:7b:4f:26:e0:9d:31:4b:1e:ad:
43:a3:e1:ba:21:d4:bc:d9:9c:59:27:8e:4d:4e:43:
b3:2d:00:ff:0b:12:c5:41:6b:cc:83:af:d5:2f:13:
be:f0:e1:4c:9d:9d:3c:b6:67:30:f7:f6:8c:10:ab:
c0:b1:3f:0c:b1:c7:46:a4:e1:0d:a9:e5:ec:f4:6b:
e0:18:c5:0b:ce:a9:26:fa:4d:3b:83:c7:d1:27:a8:
8c:1a:ca:5e:e0:1b:58:e6:66:dc:92:47:19:96:26:
2f:33:c4:9b:b0:0e:56:53:ad:10:0b:f6:07:41:a9:
21:30:26:c9:28:7c:e2:b0:a1:96:fb:ff:0f:31:63:
36:0d:3f:93:eb:88:0d:c9:e0:4f:d3:4f:1a:5a:f0:
20:ea:db:01:f9:56:25:8b:99:3c:62:8a:67:4e:4a:
1e:dc:59:ed:c1:0a:4a:ac:d8:a9:b0:bd:43:d1:94:
ad:ea:52:25:7b:11:12:34:ff:6c:d7:35:7e:00:15:
97:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:32:46:7B:1C:11:B3:F6:B6:2A:BE:1B:67:AC:28:2D:96:6B:F7:1A
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS43260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.2.0-140.99.6.255
Signature Algorithm: sha256WithRSAEncryption
97:ed:c1:63:3a:ea:bd:c0:42:7e:67:1e:2a:a2:3c:84:ad:d3:
25:eb:1c:f3:3c:83:04:a2:57:01:ec:d8:c6:3b:eb:e4:f6:b7:
a3:c2:9d:b8:59:1c:ab:0c:44:47:53:ca:e1:9d:e3:d1:48:43:
ab:10:63:2a:d3:a0:95:2c:6c:14:c5:aa:ef:ad:51:f6:8e:bd:
d3:23:a1:e1:5e:dc:6e:8c:c9:db:b4:e6:02:7e:2c:93:47:8e:
da:cc:e1:91:87:59:28:0b:36:bd:cd:83:84:75:d1:a0:d5:08:
47:a8:8a:41:d2:b9:25:48:38:83:4d:f8:59:3e:24:85:63:e4:
40:da:5d:88:e5:95:85:f2:d6:9a:b5:7c:8c:44:3e:16:c1:ce:
63:1b:81:59:ac:39:0d:0b:3f:d4:90:89:62:4b:4d:84:1d:ab:
df:8b:32:87:98:26:3c:50:26:3f:9b:57:45:06:6a:97:5c:6b:
75:70:b4:a3:af:02:90:8a:0d:e5:4e:52:cd:f0:92:16:60:c0:
14:98:64:b1:89:2d:88:80:d7:59:65:03:9f:0d:1c:7b:dc:d0:
08:d8:11:d6:3b:3d:71:c6:41:a1:20:22:91:00:82:01:bd:e6:
be:b9:e9:ac:0d:20:90:76:9b:67:45:46:41:db:34:30:2d:d5:
2e:ec:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 10:43:14 2023 by rpki-client on console-ams.rpki-client.org