Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e20323034373239.roa
File: 3230392e38372e3137302e302f32342d3234203d3e20323034373239.roa (raw, json)
Hash identifier: B2KoARls+5lIwlhrEJ7Ml4Xx9cw8rjOYFa4kY3vkw08=
Subject key identifier: 6F:54:ED:01:00:6F:63:8C:B9:37:12:66:F1:05:64:68:3A:73:4B:00
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 3558CA72228B6B5690A4A16A95FB9CE03FCFE7A6
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e20323034373239.roa
Signing time: Tue 04 Jun 2024 06:40:47 +0000
ROA not before: Tue 04 Jun 2024 06:35:47 +0000
ROA not after: Tue 03 Jun 2025 06:40:47 +0000
asID: 204729
IP address blocks: 209.87.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 13:14:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:58:ca:72:22:8b:6b:56:90:a4:a1:6a:95:fb:9c:e0:3f:cf:e7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: Jun 4 06:35:47 2024 GMT
Not After : Jun 3 06:40:47 2025 GMT
Subject: CN=6F54ED01006F638CB9371266F10564683A734B00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:89:e5:09:1e:db:95:cb:92:00:be:e0:f5:
e8:6a:02:d2:3a:4b:5f:3d:89:46:56:41:a1:7e:1b:
a5:40:f0:40:36:7e:ad:58:15:25:2d:51:9a:62:cd:
b4:59:36:3a:ee:18:78:0b:1b:cb:f2:b0:ad:cb:e0:
65:78:d6:83:6a:5f:fd:ab:56:f2:d5:46:e9:64:9a:
7a:42:ec:74:6b:69:e9:31:f1:8c:10:22:11:1e:57:
15:e4:7b:c8:54:ce:9f:67:d1:f3:e5:ff:6e:61:2e:
b5:dc:3a:39:82:36:1c:bf:22:71:ce:fb:95:89:c7:
18:95:9e:57:ef:f8:c2:d2:4d:af:66:47:73:0a:e9:
a9:c7:59:66:a9:1b:a9:e1:9a:18:5c:43:2e:a2:36:
84:46:68:ba:fd:9b:79:83:57:4c:9e:a3:32:cf:d9:
bf:c6:0a:37:5e:f7:3e:8b:7c:2f:38:79:ae:95:87:
3e:3f:47:e3:1d:fe:9e:75:72:66:c4:58:1e:b2:d2:
df:43:9b:c6:cc:ac:16:8f:3d:1b:9d:8b:9a:43:86:
7e:00:3b:68:ad:12:6a:3e:83:8a:bf:8a:50:eb:cf:
96:ea:f3:60:3e:13:5a:af:e1:9e:72:9c:9e:ff:bc:
20:60:60:97:a8:8f:8a:ee:62:7e:ae:9f:61:38:fe:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:54:ED:01:00:6F:63:8C:B9:37:12:66:F1:05:64:68:3A:73:4B:00
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e20323034373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.170.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f9:8b:8b:32:a6:78:67:7c:10:b7:a4:8b:d1:67:4c:e2:5a:
e3:45:78:bf:b4:43:c1:02:94:dc:72:a4:19:74:e5:f7:04:51:
92:ca:ad:0a:32:dc:8f:a6:78:9a:27:d6:7c:87:07:13:7f:1a:
21:e8:6e:7f:de:ee:97:c5:e4:e7:dd:8a:c5:a5:f2:a6:d6:ea:
34:ce:ec:07:eb:20:14:3b:42:21:c2:fc:b6:4f:4c:db:41:5b:
eb:27:76:94:95:f5:34:67:46:58:da:9f:c7:53:39:59:20:6b:
79:6b:80:8a:17:d6:c8:2f:c0:33:be:b2:94:29:00:95:62:7e:
ab:33:c5:f7:75:86:bd:b7:27:11:74:27:bd:52:c3:1c:d1:87:
4a:55:f2:95:e2:6d:f7:8e:ea:f4:6d:17:d2:c9:48:a0:09:d1:
e5:31:67:35:56:73:15:11:1c:51:e1:28:7e:a5:7f:65:fa:d9:
8f:5b:a9:45:35:ff:4d:6a:3f:7d:03:d5:21:3c:74:85:ae:2b:
8b:cb:20:dd:13:a3:d9:f3:95:19:0f:49:7b:6d:eb:e2:a6:44:
44:e6:45:c1:2f:bc:92:3d:fb:6c:30:97:a1:4c:fe:75:e8:9d:
f5:67:f4:14:b7:e7:28:61:b9:77:17:4b:01:af:a4:64:f2:0b:
6a:2a:b5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 16:30:41 2024 by rpki-client on console-ams.rpki-client.org