Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS49999.roa
File: AS49999.roa (raw, json)
Hash identifier: 9XllAZi9nZiM1ZE/3rgYY4L9isKLExFpvZxO3NXSDXI=
Subject key identifier: 3B:D1:07:99:51:14:FC:AF:C0:D5:AD:AF:E4:B7:45:B5:F2:A5:4E:E9
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 4D5D8BFEB7BD7E5160A6C8C1D49F4FB2117CF311
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS49999.roa
Signing time: Sat 19 Aug 2023 00:00:04 +0000
ROA not before: Fri 18 Aug 2023 23:55:04 +0000
ROA not after: Sat 17 Aug 2024 00:00:04 +0000
asID: 49999
IP address blocks: 66.225.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Aug 2023 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:5d:8b:fe:b7:bd:7e:51:60:a6:c8:c1:d4:9f:4f:b2:11:7c:f3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Aug 18 23:55:04 2023 GMT
Not After : Aug 17 00:00:04 2024 GMT
Subject: CN=3BD107995114FCAFC0D5ADAFE4B745B5F2A54EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:a0:b5:41:b1:61:42:3c:a0:22:d4:87:4e:
b4:e0:7a:1b:96:be:7c:80:77:74:35:a9:02:32:88:
7e:2f:b3:da:c7:ed:e0:d2:a9:39:bb:9f:e9:a3:fb:
bf:f6:30:24:7e:66:a1:13:f2:5c:0b:33:28:a8:60:
6e:6c:5e:c3:b9:fd:37:53:84:79:f3:fd:05:f1:1e:
f5:61:e1:c0:f8:4e:1e:8b:cf:0e:0b:b4:b2:15:28:
a0:3d:54:bd:ba:ef:ef:9d:c9:1d:49:68:8a:cc:66:
85:cc:e0:d7:37:38:5f:85:1b:14:4a:e3:86:ee:b7:
ae:76:ec:48:a2:1c:83:c2:8f:e4:d2:f6:45:fe:70:
2b:07:c7:9e:fc:6e:57:12:64:40:03:dc:b8:6f:b9:
bd:e5:7d:7d:92:b5:be:8c:3e:9a:02:64:a8:de:1e:
c0:55:1c:44:e6:25:d5:1d:72:02:ed:23:ef:1f:a5:
45:9d:ad:41:dc:26:82:64:17:07:00:63:61:c9:b7:
ff:21:2b:d8:ae:e0:27:0c:63:c3:61:83:52:e4:30:
db:f2:25:fb:44:a1:0c:1f:03:cd:02:8b:e3:39:7f:
c1:d8:27:26:46:f2:62:df:b6:a1:6d:97:9b:74:29:
82:c4:ff:ea:43:d4:e4:f5:5f:4a:61:16:66:6e:84:
0a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D1:07:99:51:14:FC:AF:C0:D5:AD:AF:E4:B7:45:B5:F2:A5:4E:E9
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS49999.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.230.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:d9:c3:f3:9f:a6:ed:09:65:64:7a:62:5c:88:48:00:08:ac:
69:b9:e8:91:41:99:4f:28:ea:ee:c9:c2:05:3b:b6:45:c3:05:
34:b1:cd:6d:d5:9c:4d:87:d0:d6:ae:4f:20:b9:e8:c9:de:b1:
d1:92:9b:94:e6:5c:c6:b3:a2:7f:e8:6e:8f:a9:c1:42:40:2e:
23:e7:60:c7:9a:60:d0:b7:2f:d5:58:65:a7:59:d1:9f:66:24:
81:7a:45:73:2d:dc:0e:3a:9f:50:f1:37:39:bf:02:94:9e:ff:
5c:0e:bb:68:da:4d:a6:e7:c6:3c:ba:10:ef:8f:af:3b:77:07:
a6:2d:bc:b8:b0:2a:3e:89:4a:dc:d5:1a:1f:fa:bd:8a:6f:39:
9e:01:85:82:aa:a2:18:2e:5b:15:71:79:bd:f4:f1:b5:b1:c0:
26:01:f1:a0:e4:9d:da:1f:4b:5b:f5:af:8d:97:cf:71:82:a6:
2c:3f:ec:a9:e4:05:89:38:4a:e5:ee:cc:37:ba:f3:7e:ae:27:
a0:85:d1:36:45:b9:20:a7:2d:7a:d7:91:37:ab:48:40:b8:1b:
0c:35:2a:2a:38:b4:9b:90:55:bc:f7:82:eb:eb:78:f6:36:d9:
00:05:4e:40:42:93:5f:e9:38:a1:4a:cb:be:8e:32:14:8f:3f:
5c:27:e5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org