Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: Y0pRREKRgaEDwV9CRmlbmNXGUfVhIlY+3FiDSKNHTok=
Subject key identifier: 0D:1D:6B:49:07:BE:DE:6A:29:F3:90:6E:CC:C5:F6:08:5F:04:06:5F
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 6CC5B570E8B56A7200C0D46E45D53D9F9BE97AF0
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS53356.roa
Signing time: Thu 08 Feb 2024 10:34:49 +0000
ROA not before: Thu 08 Feb 2024 10:29:49 +0000
ROA not after: Thu 06 Feb 2025 10:34:49 +0000
asID: 53356
IP address blocks: 140.99.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 00:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c5:b5:70:e8:b5:6a:72:00:c0:d4:6e:45:d5:3d:9f:9b:e9:7a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Feb 8 10:29:49 2024 GMT
Not After : Feb 6 10:34:49 2025 GMT
Subject: CN=0D1D6B4907BEDE6A29F3906ECCC5F6085F04065F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:4c:62:12:14:55:c8:b3:68:e1:11:40:c1:
e0:8b:6e:5e:8d:c9:7f:b7:92:1b:3e:f3:77:ca:b8:
2b:60:36:3f:18:98:ff:16:27:df:d1:ec:dc:89:b9:
2f:fb:75:18:6e:ed:50:ae:fe:ed:0a:ad:a8:d7:11:
17:79:e8:e5:11:4b:04:97:b0:32:87:be:e1:cb:73:
ba:b5:08:51:4a:88:ab:5b:17:a4:4b:f8:01:e9:4f:
f3:33:b0:20:17:ac:26:ad:37:92:74:16:cd:aa:ed:
a1:d4:44:0c:23:28:6e:d4:e5:08:8f:b0:61:79:30:
e9:a1:18:18:d9:ac:9d:96:82:70:1b:d6:99:cb:a8:
12:7b:ad:12:96:db:d2:61:a9:b4:73:87:88:89:7a:
89:ad:7b:f3:5e:15:fb:67:4e:bd:ba:1f:25:5b:ef:
14:dd:fb:4f:fd:64:8c:a3:4a:d2:ef:6f:39:c7:75:
2a:8d:34:8d:6f:a9:6c:1b:eb:c1:de:0a:2e:8b:97:
43:78:a2:b4:29:8b:12:ec:1b:0d:21:1d:fb:a8:c7:
b0:c7:f6:09:e3:e0:38:3b:51:d0:fc:76:0c:e4:29:
be:29:5a:46:a9:7b:6f:1b:a3:01:f9:05:50:72:d5:
91:1d:9c:11:b5:68:1b:4d:67:54:c9:7c:dc:22:8e:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1D:6B:49:07:BE:DE:6A:29:F3:90:6E:CC:C5:F6:08:5F:04:06:5F
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.205.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:bf:19:a7:a5:73:2f:a7:95:99:db:ed:f5:71:f6:38:06:06:
95:df:d7:91:9c:2b:00:57:15:1a:98:e4:d6:e7:e6:59:38:14:
c8:70:16:d8:66:46:5b:5c:17:17:03:90:72:d9:13:b9:e9:50:
09:6b:e6:bb:2a:d0:4e:9f:fd:a0:49:3f:2a:26:3f:17:a8:38:
30:23:9b:4c:f9:63:fb:53:71:a1:78:53:a2:03:e2:52:0e:04:
04:b7:91:27:dd:a7:e6:de:07:68:7d:15:5b:1b:12:26:a4:f9:
de:03:6f:25:f4:f3:d9:45:27:b7:31:a1:d4:93:e9:da:13:9f:
fb:34:f2:0d:9c:a6:63:34:60:a2:d1:05:39:74:e9:68:df:d8:
29:b6:ad:d0:4a:cb:5c:5d:fd:b8:68:9f:f2:a0:81:42:b5:49:
de:50:3b:c8:90:22:ed:7d:b0:46:b6:b7:d7:72:e6:5b:54:ee:
a7:a2:ba:2c:64:35:f9:eb:f8:e9:d2:e2:45:4c:08:1a:67:6a:
66:c5:be:be:56:4d:a6:52:fc:b4:b6:d5:b3:ce:4d:ac:e9:b6:
a4:fc:c8:bf:f1:bd:39:37:41:a4:14:81:8c:69:fa:20:ec:75:
2f:95:51:80:2c:87:78:97:3d:71:97:51:36:e9:08:c2:98:a5:
20:fe:5e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 01:34:40 2024 by rpki-client on console-fra.rpki-client.org