Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60721.roa
File: AS60721.roa (raw, json)
Hash identifier: O6ufPw3HMHo4Ji0bBnVYT9/+04Jrt2ZaNHuMKJPXCYU=
Subject key identifier: C3:81:C2:12:8E:5D:A9:02:F6:D0:5D:EB:EC:6A:6F:5D:7B:1A:63:7D
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 7416F57E2B668E1AA4D2AF67E5E88D611B14CB28
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60721.roa
Signing time: Fri 14 Apr 2023 00:00:21 +0000
ROA not before: Thu 13 Apr 2023 23:55:21 +0000
ROA not after: Fri 12 Apr 2024 00:00:21 +0000
asID: 60721
IP address blocks: 140.99.187.0/24 maxlen: 24
140.99.205.0/24 maxlen: 24
140.99.222.0/24 maxlen: 24
140.99.235.0/24 maxlen: 24
140.99.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:16:f5:7e:2b:66:8e:1a:a4:d2:af:67:e5:e8:8d:61:1b:14:cb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Apr 13 23:55:21 2023 GMT
Not After : Apr 12 00:00:21 2024 GMT
Subject: CN=C381C2128E5DA902F6D05DEBEC6A6F5D7B1A637D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:16:ed:68:5b:0a:cb:f6:c3:0c:53:eb:ab:4b:
68:85:69:e5:31:27:ba:de:aa:f6:60:70:86:66:9e:
e1:1e:01:e0:19:5b:a3:40:de:d7:0d:62:1b:b6:3d:
e2:d3:6b:b0:77:97:37:ee:6a:51:f3:4b:0a:94:de:
20:bd:35:a1:bf:86:dc:6e:66:35:35:0f:00:7c:a8:
d0:36:6d:dd:33:32:f4:93:f4:0c:53:eb:c6:9f:c0:
9e:80:56:8d:79:a2:1a:be:69:98:ea:a1:b4:7a:b7:
9a:e2:83:6f:f5:ab:45:30:9b:41:5d:9e:c5:63:1b:
5b:7b:de:71:c4:fe:be:14:9e:e1:b8:de:c9:b8:14:
15:d2:e2:a3:5a:1c:b5:e5:8d:64:a8:da:6e:d0:ee:
bf:f8:19:af:6b:62:cc:1b:20:d6:05:e9:ae:70:b8:
e1:9c:45:f0:33:63:1d:54:d0:b6:51:bd:8f:a1:80:
1d:bb:c2:fc:ee:7a:f1:61:8d:dd:a5:9f:0b:ec:cf:
9e:34:6b:e6:4e:ff:b1:5e:d7:98:21:9a:70:d3:3c:
0f:77:3f:71:e4:e1:30:83:36:6f:66:27:32:e8:3e:
a4:76:ea:c1:31:70:2f:01:96:3a:55:15:2f:61:18:
ee:50:ee:d2:09:b2:79:61:27:8e:01:c2:5e:de:e6:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:C2:12:8E:5D:A9:02:F6:D0:5D:EB:EC:6A:6F:5D:7B:1A:63:7D
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60721.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.187.0/24
140.99.205.0/24
140.99.222.0/24
140.99.235.0/24
140.99.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:58:29:75:c4:19:d2:7b:aa:75:82:82:a0:e6:a5:29:f3:b4:
9b:4b:e2:de:84:a3:78:e8:e1:22:8f:e8:00:2d:fb:0d:3f:b2:
db:58:0e:16:fd:ef:be:34:7b:ff:74:b4:a0:4d:c6:e3:97:de:
9d:c2:3c:89:00:cc:47:0d:5a:78:13:b3:69:bf:09:b3:2d:45:
26:22:d5:5e:62:5a:64:46:d3:4b:6c:f3:fd:2a:e0:1d:42:4a:
fb:aa:7f:0f:47:82:d8:8f:2f:62:0e:48:e2:96:78:50:84:b0:
52:68:1b:54:49:61:e8:46:ed:af:37:62:e5:4e:ac:c0:b1:e7:
d8:45:2b:00:a1:c7:d3:2a:3d:c9:8e:12:4e:03:0b:ec:b5:02:
07:c8:4d:2a:88:fb:e6:10:6d:bb:08:af:ac:78:09:16:13:b9:
3a:14:0d:78:b0:d5:49:32:23:3b:36:73:d0:e1:1b:1d:c5:8f:
bb:de:d8:19:9c:0f:20:48:60:61:0e:b6:74:9f:5a:9f:09:76:
fb:dc:cb:4e:dd:e5:b4:0d:4d:98:3e:fb:b2:a4:da:78:be:06:
13:5d:31:8c:41:82:a0:1e:6a:23:e6:e8:88:47:6e:98:aa:83:
1f:c8:79:82:04:18:99:d7:43:2d:f3:1f:aa:f2:a0:a2:56:2e:
41:11:0e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 17:52:54 2023 by rpki-client on console-fra.rpki-client.org