Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS400042.roa
File: AS400042.roa (raw, json)
Hash identifier: QW8TkKst5NTDOSFhfX0hi6sZbs8/AUBP1KpCnaBvsFE=
Subject key identifier: B9:D2:12:06:3B:D8:03:A3:AF:F2:2D:8F:9C:D7:26:7B:29:A2:A9:41
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 754A869978A357CEF3C01C224315E31EC45E02C9
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS400042.roa
Signing time: Mon 02 Oct 2023 22:55:40 +0000
ROA not before: Mon 02 Oct 2023 22:50:40 +0000
ROA not after: Mon 30 Sep 2024 22:55:40 +0000
asID: 400042
IP address blocks: 66.85.248.0/24 maxlen: 24
148.163.200.0/24 maxlen: 24
209.170.130.0/24 maxlen: 24
209.170.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4a:86:99:78:a3:57:ce:f3:c0:1c:22:43:15:e3:1e:c4:5e:02:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Oct 2 22:50:40 2023 GMT
Not After : Sep 30 22:55:40 2024 GMT
Subject: CN=B9D212063BD803A3AFF22D8F9CD7267B29A2A941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:fe:01:a9:e8:6f:42:99:5b:cf:84:96:89:
bc:53:1f:fb:ba:41:79:aa:67:57:59:88:48:65:1e:
7d:f8:b0:01:65:ea:82:8b:35:0b:4e:5b:70:01:3e:
df:f2:c9:eb:e8:89:55:0e:be:66:f5:60:8d:b6:64:
10:ac:4e:a5:e9:d5:c0:68:46:cc:9e:68:ff:24:17:
98:25:ea:ff:ab:da:00:e8:81:25:ec:46:32:a5:60:
12:a3:b7:da:6c:3a:84:54:e3:89:c4:7f:6f:5b:d6:
09:fd:9d:43:41:40:2f:4d:f9:e9:07:da:6f:b3:10:
f4:7b:a2:0b:f3:46:38:38:f4:1a:bc:55:c9:04:0c:
22:c1:9b:88:08:2a:24:0e:9b:44:2d:cd:0d:80:40:
ab:a8:c5:e0:4d:fe:12:08:cb:c6:6e:f3:fd:a3:e5:
f2:81:c2:a3:27:b5:ca:d1:5b:e6:a8:07:f0:39:42:
d7:5f:d3:1c:76:65:72:42:20:3c:5f:95:b3:ed:4e:
dd:ca:2b:f7:08:17:72:60:80:22:0f:ef:0a:1a:a4:
e8:85:3e:82:c2:37:cb:cc:c7:b8:e9:e0:00:83:53:
d8:58:de:c5:92:57:94:dc:da:cb:e8:b0:c6:31:e3:
a8:33:83:0b:6e:a9:a8:0f:7e:f2:65:7a:ae:78:69:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D2:12:06:3B:D8:03:A3:AF:F2:2D:8F:9C:D7:26:7B:29:A2:A9:41
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS400042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.85.248.0/24
148.163.200.0/24
209.170.130.0/24
209.170.157.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:28:93:78:61:77:31:e1:67:9f:bc:71:3e:d3:62:f2:8a:57:
4e:a8:67:bf:69:a4:a3:54:61:17:1e:48:4d:39:53:d5:a2:32:
73:29:f2:a0:83:16:c6:d2:41:79:96:48:14:af:82:5d:7e:07:
b0:19:e7:ce:a3:10:42:4d:52:6e:85:94:a0:08:72:dc:6c:33:
ee:2d:69:2c:39:8a:d4:13:e1:89:cf:c9:a9:4a:77:d9:98:37:
4a:43:ef:9c:50:c2:82:24:45:db:03:a7:0e:cc:0f:9e:78:7c:
bc:54:ee:cb:ee:98:7a:3d:f8:3f:2b:4e:b6:67:79:dd:98:31:
e2:d0:84:ed:55:d6:38:67:b5:20:a9:87:93:d9:e4:01:05:75:
af:63:cd:ce:55:ab:14:13:07:aa:c4:0d:61:58:17:61:10:09:
a4:d9:78:4a:d6:a5:35:a3:bd:82:ef:57:71:e4:07:76:ae:68:
39:5b:8b:19:2a:72:18:8b:c8:ab:1e:36:c5:d6:5d:30:4a:cc:
8a:af:1d:43:81:5f:d7:68:96:7d:32:a8:bb:48:a6:bd:47:7b:
97:06:1d:79:4d:9e:fa:6d:ae:a0:a4:d3:93:e5:f7:d5:51:c0:
e2:31:f9:e2:d1:85:85:5e:c1:be:78:c8:71:61:c8:2c:6c:a4:
c9:51:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 15:38:54 2023 by rpki-client on console-ams.rpki-client.org