Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211936.roa
File: AS211936.roa (raw, json)
Hash identifier: zejc/d6IdKNvUclVsTpKVloR/ZZqjHuHrnZCM8GEmEw=
Subject key identifier: D2:31:0D:E0:E6:FF:43:95:B9:B8:02:81:F4:B2:35:C2:9F:5A:70:C5
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 10D5D802FEFC65F378B71AB051BDF9026BA4A8AC
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211936.roa
Signing time: Tue 03 Jan 2023 19:49:44 +0000
ROA not before: Tue 03 Jan 2023 19:44:44 +0000
ROA not after: Tue 02 Jan 2024 19:49:44 +0000
asID: 211936
IP address blocks: 64.50.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d5:d8:02:fe:fc:65:f3:78:b7:1a:b0:51:bd:f9:02:6b:a4:a8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jan 3 19:44:44 2023 GMT
Not After : Jan 2 19:49:44 2024 GMT
Subject: CN=D2310DE0E6FF4395B9B80281F4B235C29F5A70C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e6:c0:13:7f:06:ed:b8:ff:c7:64:ff:22:1c:
d4:4b:a3:28:38:9c:f8:ab:03:9f:39:7e:1f:f3:aa:
a9:4d:ed:94:7a:8b:d3:fe:f1:cb:0f:68:7b:88:35:
54:93:ff:0d:b0:cc:39:06:f6:fa:f7:cb:48:0b:c1:
e7:9c:c3:fc:8e:35:e3:78:8e:7f:3c:2b:1d:c3:fc:
fd:2c:72:e8:9c:71:20:64:8e:8a:a2:39:6f:a1:c7:
67:86:e1:a3:b6:25:ff:63:0f:e7:ab:30:46:cf:67:
13:d0:a4:c9:4c:a5:23:2c:35:62:b4:f9:9e:05:74:
c7:99:a8:be:84:ae:73:e0:61:db:77:83:51:d1:ec:
2a:96:6e:15:73:45:4e:3b:9e:80:0c:cf:6f:40:50:
6e:a0:e3:f2:31:a2:93:13:5a:f6:ce:a3:85:13:21:
cc:5e:78:8c:39:e4:63:c3:d7:b1:ec:2c:89:62:d6:
f5:42:8e:40:85:36:53:6e:c4:fe:64:8b:e9:87:43:
20:3a:e4:81:c6:3d:56:04:7d:10:5a:d4:8d:a7:9e:
a4:cf:11:dc:d8:d7:d0:87:a4:06:b4:85:34:f5:52:
aa:9d:55:0b:9b:ac:d2:57:49:86:dd:cb:ea:de:b2:
d8:9d:ec:a5:5d:4c:4a:2c:1a:2b:03:26:8f:c1:00:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:31:0D:E0:E6:FF:43:95:B9:B8:02:81:F4:B2:35:C2:9F:5A:70:C5
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.50.174.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:dc:74:96:17:26:9a:c8:5b:2b:e7:71:8c:aa:b8:01:87:ae:
b0:2d:1e:e3:f4:75:77:85:6d:b1:93:40:ee:7f:16:de:01:e1:
c3:c9:ca:d0:70:e7:07:29:bf:6c:9a:3b:5f:36:b7:d3:bb:a2:
48:b8:13:c1:41:81:33:12:48:96:6f:c1:d1:eb:fb:82:a3:32:
2d:c2:33:04:b2:6b:ae:28:50:e8:92:12:96:0e:93:9e:3e:c7:
98:51:28:7c:a5:33:ca:f3:d1:97:82:90:aa:87:5c:9e:53:25:
26:07:34:b4:c4:c7:09:be:ce:4b:3b:16:ec:34:56:37:c9:29:
82:0f:6c:5f:14:0e:d5:23:20:c1:28:3b:25:4a:ca:58:47:b4:
c3:ac:30:43:fb:b8:71:67:5e:c9:91:97:b9:48:01:43:87:2c:
ef:0c:8e:f5:5c:ff:68:55:39:24:6b:d1:8b:50:d9:9f:3b:9e:
47:d9:d6:9e:fa:1e:dd:1b:45:d1:12:f5:e7:19:27:f9:86:4d:
e3:21:db:72:16:91:e4:ec:cc:58:73:a7:f1:0a:65:80:32:91:
1b:eb:36:41:34:c1:76:8c:1f:bc:1e:98:38:92:8e:51:80:9f:
f5:26:88:71:4f:95:a6:6e:1d:22:62:76:6b:97:ff:4e:54:ea:
bf:58:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:26 2023 by rpki-client on console-ams.rpki-client.org