Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS43431.roa
File: AS43431.roa (raw, json)
Hash identifier: h6OfBnnea0GzmCncAYrrcBTvCc4zvf4NQ4RR7aTsW4c=
Subject key identifier: 42:DB:D5:B5:9D:13:6C:95:D7:38:65:00:4F:11:4A:AD:83:67:FA:57
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 2EED092BA2AE2C4C9AB1864DC931D3E84965FBFB
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS43431.roa
Signing time: Fri 21 Oct 2022 22:13:20 +0000
ROA not before: Fri 21 Oct 2022 22:08:20 +0000
ROA not after: Fri 20 Oct 2023 22:13:20 +0000
asID: 43431
IP address blocks: 140.99.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ed:09:2b:a2:ae:2c:4c:9a:b1:86:4d:c9:31:d3:e8:49:65:fb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Oct 21 22:08:20 2022 GMT
Not After : Oct 20 22:13:20 2023 GMT
Subject: CN=42DBD5B59D136C95D73865004F114AAD8367FA57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:98:93:b9:aa:21:75:cd:5f:5c:b8:6a:8d:
ec:d6:99:41:25:67:9a:19:95:25:c3:56:33:6f:26:
4e:16:99:db:6f:21:d2:6a:a1:78:36:45:40:e2:7f:
93:91:76:89:93:85:b1:83:86:35:ca:0a:1a:10:92:
e0:a0:5d:e2:0d:f4:44:e7:84:61:11:b8:2d:c5:97:
5f:c9:aa:c4:47:0d:ff:a8:be:ca:7b:c7:59:60:9b:
35:2f:19:5f:5e:0f:d6:1e:df:87:ca:b8:4c:a8:db:
e2:10:50:97:57:15:e9:7e:65:ed:ac:19:b3:a7:94:
2b:92:f9:d2:ad:fa:15:66:d1:cf:8e:43:ac:2f:8d:
63:eb:af:c7:c9:91:12:04:de:b4:9a:c3:ca:c1:bd:
c3:b2:f8:35:4d:48:c3:d2:9a:3f:17:e9:3c:5c:9b:
6a:ab:c0:d3:ef:26:16:51:4e:d6:4f:6e:05:96:a4:
05:29:62:b7:0d:19:aa:bf:81:ff:0d:a0:00:9a:51:
6f:d5:6c:50:00:94:30:1f:0d:09:14:78:b2:8b:f6:
fa:1d:53:0d:ab:94:67:0c:32:d0:00:58:01:e3:12:
13:1a:b8:b3:0e:ce:ed:cd:d7:fd:72:13:12:46:e2:
02:80:52:21:f7:a0:e1:2e:ac:24:49:1e:b4:6f:1d:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DB:D5:B5:9D:13:6C:95:D7:38:65:00:4F:11:4A:AD:83:67:FA:57
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS43431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.42.0/24
Signature Algorithm: sha256WithRSAEncryption
28:04:5a:f5:b7:7d:71:60:93:36:f5:9b:1a:f2:a8:12:e9:a2:
c5:c4:45:dd:6b:84:99:e2:19:08:3d:fe:47:56:b7:d0:12:d5:
d3:0e:82:09:08:f0:35:5e:f5:1f:45:01:3f:33:d1:4f:44:e5:
ba:cb:2f:b1:53:93:ff:c7:2d:0a:08:e0:5e:84:0e:09:ca:b1:
92:d0:08:50:3b:7c:95:38:da:77:bf:7e:1f:47:55:19:e8:dd:
c4:20:b1:30:98:73:91:e3:5e:fd:5c:77:a5:e2:40:3d:32:9d:
fd:a2:86:ff:25:0b:ed:0b:fc:fe:f7:2a:53:f3:0b:87:c4:4d:
40:d7:ad:f0:31:43:c8:65:d1:3c:52:5f:d1:5c:61:3c:51:4a:
7c:93:62:1f:fe:c9:eb:ea:3b:2a:2f:df:6c:e3:4b:eb:b9:7f:
2a:c5:02:5d:01:a9:cc:52:58:5a:4d:2f:10:91:a5:68:a9:00:
63:e9:e5:54:39:5c:8a:4d:f3:6f:90:4b:04:05:1d:70:04:c2:
5c:9d:49:ae:8f:a6:22:85:4b:50:c1:80:2a:60:9f:79:6f:95:
e5:22:7c:4f:63:fd:69:db:e9:cd:65:56:d5:92:44:2e:37:db:
9b:fa:26:ce:33:8f:ea:ce:c3:d8:9b:7c:9a:ca:0b:4c:8c:66:
01:79:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 18:00:49 2023 by rpki-client on console-ams.rpki-client.org