Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63023.roa
File: AS63023.roa (raw, json)
Hash identifier: dpbXzkonrKjUPPIzXwNL0ScfOvXQhb8VIcXJXVFLuZI=
Subject key identifier: A1:2E:EB:AB:07:F2:FA:51:C8:55:61:70:C3:2D:44:9E:47:65:EE:E1
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 0E231E56A5A5D18DB46CB596D7D8807FF6098A2D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63023.roa
Signing time: Thu 07 Mar 2024 23:32:58 +0000
ROA not before: Thu 07 Mar 2024 23:27:58 +0000
ROA not after: Thu 06 Mar 2025 23:32:58 +0000
asID: 63023
IP address blocks: 98.142.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 00:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:23:1e:56:a5:a5:d1:8d:b4:6c:b5:96:d7:d8:80:7f:f6:09:8a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 7 23:27:58 2024 GMT
Not After : Mar 6 23:32:58 2025 GMT
Subject: CN=A12EEBAB07F2FA51C8556170C32D449E4765EEE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:e3:32:5a:91:a1:c6:2c:4c:f7:be:dc:dd:
b2:e8:23:af:ed:d7:db:b8:f8:35:2a:a8:82:aa:55:
62:c4:a4:c4:36:f8:e9:eb:c8:7b:e5:21:d6:14:dd:
d0:30:c3:60:95:31:59:64:0a:7c:48:c9:19:42:9b:
1e:b5:5e:47:8f:b2:58:e8:7a:4e:e8:82:b1:7b:55:
ce:a1:c5:26:fc:a1:23:6c:8c:37:45:b3:8d:18:6e:
9c:7b:4e:15:8f:5a:55:3d:22:f4:1b:45:74:80:ce:
4e:00:8f:32:73:18:81:e2:f6:ca:44:e3:b9:bd:a1:
fa:d2:0d:2b:bb:85:e8:c3:95:19:6a:09:48:ff:3b:
61:63:a8:5c:e8:6c:fe:15:91:fd:2c:e7:a8:c3:0c:
6b:05:5c:41:62:bf:e3:bb:fc:f5:eb:23:e1:d2:19:
e3:7f:d4:22:1f:a7:1a:f4:82:80:99:12:db:82:34:
9c:76:5f:18:2b:33:d0:4e:c7:6c:7c:a3:45:fe:58:
22:df:db:71:f0:3f:27:91:53:f0:dd:f7:ea:1f:af:
77:53:73:d9:a8:66:d1:64:05:65:3f:43:6b:80:7b:
c9:a7:90:29:72:22:59:66:e3:14:d8:37:6d:9c:41:
07:96:29:76:a5:aa:12:17:b6:ad:e3:e0:86:e2:e1:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2E:EB:AB:07:F2:FA:51:C8:55:61:70:C3:2D:44:9E:47:65:EE:E1
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.250.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fa:19:f2:2a:b9:d7:59:31:7c:2e:71:97:48:e8:3c:0e:e4:
d8:56:f2:4b:57:7e:1a:19:e0:03:37:f7:fd:f4:39:f4:bb:7b:
c3:41:41:a4:7a:61:9e:ab:92:c1:4b:be:01:74:77:11:14:3b:
8f:23:9d:39:46:2c:2d:27:dd:d5:9c:1c:f9:0d:e2:28:97:64:
f5:39:4e:58:40:3a:36:25:dc:36:51:f7:4d:35:80:91:9c:80:
95:23:17:72:0c:73:42:4b:c8:ed:4c:d4:f8:05:3e:57:e0:41:
6d:b3:d7:91:5e:22:c5:26:e0:22:18:6b:12:c6:5a:c0:8d:60:
da:db:64:88:38:01:d1:42:55:dd:29:8c:de:65:b5:58:b3:82:
ae:80:4d:a4:53:83:8b:f8:4a:94:ae:7d:80:08:01:a8:70:97:
15:d4:5f:d8:c7:47:ed:78:94:f2:d1:dc:1a:2c:f2:3e:8b:3b:
fb:03:c6:0f:a0:82:76:d9:af:53:81:76:ec:a4:9a:f4:8b:1d:
33:31:51:70:e3:b4:46:46:f8:04:73:fc:9e:4b:f7:ad:c3:a1:
f1:d9:b1:0b:06:0c:2c:a9:ae:ee:41:1e:71:79:ba:75:c0:6f:
a9:09:34:dc:01:86:ac:47:2a:35:63:a0:08:6f:19:28:ce:2d:
08:16:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 01:08:51 2024 by rpki-client on console-fra.rpki-client.org