Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS208949.roa
File: AS208949.roa (raw, json)
Hash identifier: swtAMgtKyrCtuFJipaZFZiXQkrcR6wnHGwicCnk9Gqs=
Subject key identifier: B9:0D:77:36:DE:58:88:C8:74:11:81:F3:12:80:AA:97:69:51:46:2F
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 2A7FC59772705B9751B52433F47DFA8DD025B0B6
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS208949.roa
Signing time: Wed 10 May 2023 18:40:34 +0000
ROA not before: Wed 10 May 2023 18:35:34 +0000
ROA not after: Wed 08 May 2024 18:40:34 +0000
asID: 208949
IP address blocks: 206.53.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7f:c5:97:72:70:5b:97:51:b5:24:33:f4:7d:fa:8d:d0:25:b0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: May 10 18:35:34 2023 GMT
Not After : May 8 18:40:34 2024 GMT
Subject: CN=B90D7736DE5888C8741181F31280AA976951462F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:5b:08:1c:ef:bb:51:8a:18:09:b6:42:99:
96:98:56:73:19:dc:fe:3e:6c:b6:0a:db:04:b8:6e:
80:7a:57:46:fb:ec:38:92:e3:d8:2f:bc:e0:80:c9:
91:73:f5:46:82:16:c4:05:82:fa:4b:f9:e0:57:98:
f9:bd:f1:15:c1:cb:5b:8e:7c:bd:34:25:d5:88:41:
fb:35:c7:0c:9f:29:7d:28:ea:c3:bf:eb:92:ef:e7:
db:bc:d9:77:ee:a4:e1:bf:71:5e:ab:50:53:bc:c7:
fe:b5:f3:09:c7:58:4d:22:0f:a7:7a:9a:c5:ff:24:
e1:e7:8d:09:d0:a3:80:42:48:a0:62:0f:2a:b5:52:
04:56:22:b8:43:03:4c:ab:7e:e7:dc:f3:a6:b5:66:
4d:b2:17:2c:1c:4d:04:47:68:4c:ca:ac:a0:33:e3:
a5:40:c3:62:e0:2a:52:d2:1a:d8:46:5e:9c:82:90:
e0:b8:96:1c:80:45:a1:fb:a0:b7:e3:f7:89:24:96:
60:b5:74:dc:ee:1f:f5:a8:ef:9b:f9:42:61:1a:77:
b3:ba:7d:a6:24:10:78:61:d5:b5:cc:b7:ba:85:0e:
e6:44:e9:55:4c:09:11:d1:80:5f:ef:1a:88:38:99:
57:3f:9e:a1:e6:22:40:98:0a:48:b3:20:dd:4a:ea:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0D:77:36:DE:58:88:C8:74:11:81:F3:12:80:AA:97:69:51:46:2F
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS208949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.53.53.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f9:f3:67:73:d9:2c:40:c2:50:67:ab:49:a4:51:10:d8:85:
39:8b:c1:34:9f:9f:55:0a:d7:89:d1:52:2a:69:7a:3c:ae:3f:
e8:dd:ed:55:cc:d7:a4:d3:40:29:6f:de:bb:2c:fc:d0:4b:41:
77:18:ef:67:a3:a6:f5:53:bb:e2:ff:61:98:a6:76:d6:b6:7f:
d5:76:21:55:ff:5b:4b:fc:e0:38:fa:cf:da:e4:0f:ea:4b:d2:
4b:e4:0d:23:ed:72:52:b8:71:38:44:b7:2b:5d:45:7c:7a:03:
a8:33:ca:4f:79:05:54:73:ea:98:ac:68:98:09:47:6b:87:d2:
ba:07:5e:eb:88:45:f2:79:2f:02:06:3e:86:13:74:a5:d2:11:
f8:80:9a:90:d8:9f:72:80:99:35:c6:ff:2c:ae:2b:38:63:43:
2b:23:90:3d:41:12:4c:0a:cd:0c:03:28:1e:90:c9:89:2d:8f:
db:78:27:61:16:e0:c5:90:7a:bc:42:e8:6c:a4:05:17:9e:01:
6a:66:50:22:ac:c6:67:18:38:3f:57:f0:dd:82:75:75:c3:f2:
4f:b2:12:57:dc:b8:8a:20:88:5a:aa:38:0e:9d:bb:f7:17:58:
c2:44:6c:75:f3:52:c3:6a:0b:85:dd:5c:2d:99:69:b2:97:b4:
d2:57:57:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 00:32:28 2023 by rpki-client on console-fra.rpki-client.org