Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397423.roa
File: AS397423.roa (raw, json)
Hash identifier: O+Oj8qLPJEDxiV850Mc+k6d0gLOiD193J3nzezdvtP4=
Subject key identifier: 9B:F9:77:B4:30:BC:E4:86:C4:35:C0:38:7C:F4:60:71:A2:5D:07:C9
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 609E9867FB5F8A3BC16276DBC990F7ADE6A83C68
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397423.roa
Signing time: Wed 06 Sep 2023 00:00:10 +0000
ROA not before: Tue 05 Sep 2023 23:55:10 +0000
ROA not after: Wed 04 Sep 2024 00:00:10 +0000
asID: 397423
IP address blocks: 209.200.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Nov 2023 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:9e:98:67:fb:5f:8a:3b:c1:62:76:db:c9:90:f7:ad:e6:a8:3c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Sep 5 23:55:10 2023 GMT
Not After : Sep 4 00:00:10 2024 GMT
Subject: CN=9BF977B430BCE486C435C0387CF46071A25D07C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3b:6c:0f:44:d1:bf:5d:e5:48:6c:9f:f0:78:
ca:f8:e3:b2:ee:9f:be:ac:12:7c:64:e6:22:00:8b:
66:45:e7:3a:3d:29:36:8e:64:25:ae:bc:34:59:e4:
9e:57:90:28:d9:30:4c:1a:53:c1:d0:77:d3:95:f0:
d1:14:a0:3e:62:47:e8:5f:8a:fe:dd:d4:3b:46:cc:
89:ea:29:97:de:94:81:9b:ed:3d:22:fd:18:ed:6a:
ec:eb:cb:67:16:47:2b:88:09:9e:98:21:b9:3c:c8:
99:4a:70:75:5b:0f:61:aa:c7:9d:55:bd:87:93:6c:
75:a9:a9:a0:ba:05:e0:21:b5:de:f2:b4:40:e7:17:
4b:e4:69:49:40:25:30:52:9a:cc:32:9c:f8:77:4e:
ca:95:19:9e:f5:96:2d:0f:0f:16:61:d3:92:8a:0c:
04:7e:f1:c5:e5:29:53:f1:ce:ca:0f:61:63:bf:c6:
31:b6:74:6e:16:6e:56:b8:08:36:ba:ab:b5:0d:e6:
ed:29:d2:49:82:e2:c3:fd:2f:3d:4b:03:b3:26:89:
d5:34:c2:6a:02:8f:fe:24:7a:f9:81:06:ac:67:13:
cd:f8:dc:bc:62:1d:43:12:ac:3a:46:a8:e9:74:ae:
83:60:58:07:b9:6a:10:59:84:8e:fe:50:79:c4:4f:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F9:77:B4:30:BC:E4:86:C4:35:C0:38:7C:F4:60:71:A2:5D:07:C9
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.200.224.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f1:ec:11:8b:d7:ad:90:b4:d7:d4:ee:93:63:c5:0c:bc:81:
9a:22:3f:04:8d:e6:37:92:9e:71:0b:1a:97:35:ca:b7:0d:b7:
83:4a:b3:e7:45:43:69:03:cd:24:dd:9c:f6:16:e1:d3:97:5f:
1a:f4:1f:53:52:0c:b6:a3:75:6d:6b:19:2b:c9:98:56:ae:b1:
a7:40:3e:b2:91:66:9f:64:14:a5:49:98:c2:71:c0:14:c0:44:
4a:a1:ef:6c:7e:c8:e7:f2:e5:6b:cd:4b:a8:d3:b3:6b:5e:12:
64:f9:84:2d:5e:e6:9a:de:ec:f9:9e:9b:d0:b6:2c:4c:cc:32:
04:2f:7f:0b:73:04:67:b5:d8:fd:fb:0a:17:12:c5:f1:c0:d2:
de:71:47:fd:c1:04:14:f5:9c:48:1b:bc:59:74:1a:7d:2f:a7:
04:07:5a:ea:a1:df:26:d6:88:81:37:a0:27:d0:60:bb:18:81:
46:24:76:6b:64:4f:46:09:f1:ec:3f:17:26:73:62:cf:43:98:
90:96:ad:28:18:f7:78:49:41:51:a9:d9:3c:99:c0:72:4c:2d:
10:5e:42:ae:da:cd:d4:1b:1a:60:87:f6:57:52:46:40:db:4a:
2b:9d:a1:3c:92:04:08:7d:ae:df:9a:ab:d2:21:0a:6b:92:d8:
ae:87:72:a1
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUYJ6YZ/tfijvBYnbbyZD3reaoPGgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjMwOTA1MjM1NTEwWhcNMjQwOTA0MDAwMDEw
WjAzMTEwLwYDVQQDEyg5QkY5NzdCNDMwQkNFNDg2QzQzNUMwMzg3Q0Y0NjA3MUEy
NUQwN0M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTtsD0TRv13l
SGyf8HjK+OOy7p++rBJ8ZOYiAItmRec6PSk2jmQlrrw0WeSeV5Ao2TBMGlPB0HfT
lfDRFKA+YkfoX4r+3dQ7RsyJ6imX3pSBm+09Iv0Y7Wrs68tnFkcriAmemCG5PMiZ
SnB1Ww9hqsedVb2Hk2x1qamgugXgIbXe8rRA5xdL5GlJQCUwUprMMpz4d07KlRme
9ZYtDw8WYdOSigwEfvHF5SlT8c7KD2Fjv8YxtnRuFm5WuAg2uqu1DebtKdJJguLD
/S89SwOzJonVNMJqAo/+JHr5gQasZxPN+Ny8Yh1DEqw6RqjpdK6DYFgHuWoQWYSO
/lB5xE94gwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFJv5d7QwvOSGxDXAOHz0YHGi
XQfJMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzM5NzQyMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANHI4DANBgkqhkiG9w0BAQsFAAOC
AQEAZvHsEYvXrZC019Tuk2PFDLyBmiI/BI3mN5KecQsalzXKtw23g0qz50VDaQPN
JN2c9hbh05dfGvQfU1IMtqN1bWsZK8mYVq6xp0A+spFmn2QUpUmYwnHAFMBESqHv
bH7I5/Lla81LqNOza14SZPmELV7mmt7s+Z6b0LYsTMwyBC9/C3MEZ7XY/fsKFxLF
8cDS3nFH/cEEFPWcSBu8WXQafS+nBAda6qHfJtaIgTegJ9BguxiBRiR2a2RPRgnx
7D8XJnNiz0OYkJatKBj3eElBUanZPJnAckwtEF5CrtrN1BsaYIf2V1JGQNtKK52h
PJIECH2u35qr0iEKa5LYrodyoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org