Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e2033323830.roa
File: 3137322e38322e38382e302f32342d3234203d3e2033323830.roa (raw, json)
Hash identifier: 9fP4i/HzdLTs3MhNkmqhhiWYwt2ux6VbWnndnFOmcZY=
Subject key identifier: D9:BB:B7:4B:BA:B4:8F:CC:86:F6:B5:2E:AA:C6:BA:CE:BF:47:77:B1
Certificate issuer: /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial: 3CED2B6F20F0A22DB1364CD71E9DF6B7E5646F5F
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e2033323830.roa
Signing time: Fri 19 Apr 2024 21:16:21 +0000
ROA not before: Fri 19 Apr 2024 21:11:21 +0000
ROA not after: Fri 18 Apr 2025 21:16:21 +0000
asID: 3280
IP address blocks: 172.82.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 17:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ed:2b:6f:20:f0:a2:2d:b1:36:4c:d7:1e:9d:f6:b7:e5:64:6f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Validity
Not Before: Apr 19 21:11:21 2024 GMT
Not After : Apr 18 21:16:21 2025 GMT
Subject: CN=D9BBB74BBAB48FCC86F6B52EAAC6BACEBF4777B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:2b:99:c6:31:ee:c4:ae:a1:61:54:46:97:
50:d3:20:72:bb:d2:2b:65:f9:1e:f0:be:0a:ed:2d:
43:7f:f5:c0:af:16:8d:80:6a:96:e3:26:63:ff:f2:
a7:51:97:1f:34:fc:54:8b:3b:6e:1d:c5:49:15:af:
1c:26:44:0a:ef:85:57:c9:eb:86:6e:d6:86:fd:3d:
c6:d3:d9:0b:1e:77:c8:b2:0e:6f:b5:b7:af:5d:e4:
df:64:91:93:96:2b:c7:aa:b2:d3:50:3e:70:c5:2a:
f2:9b:f4:43:8b:28:d5:28:91:68:5b:10:41:77:f6:
94:c7:e6:ba:73:00:32:4d:fe:88:34:a9:83:ec:c4:
75:62:66:8e:7e:58:d6:67:a4:da:a6:50:8d:11:cd:
93:4d:e6:f1:ef:2d:85:61:90:33:73:8f:53:70:5e:
24:f7:2f:ec:de:80:26:f7:e0:3b:db:d7:ec:29:28:
64:a8:96:6d:a5:22:20:da:77:e3:d0:18:f0:2d:37:
e2:70:46:4c:ea:9d:e9:33:e6:e0:9e:d2:fb:54:3f:
9d:1b:43:94:1c:0d:b4:28:d6:ba:79:29:f7:7b:cd:
64:b0:38:82:e3:1a:25:d1:00:02:49:ee:b1:af:27:
ee:69:4c:4a:fa:4b:04:8f:d3:95:b9:83:ff:8f:67:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BB:B7:4B:BA:B4:8F:CC:86:F6:B5:2E:AA:C6:BA:CE:BF:47:77:B1
X509v3 Authority Key Identifier:
keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e2033323830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.82.88.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b3:7c:0c:11:7e:e9:c4:51:46:bd:b0:5d:b3:a8:b0:35:f3:
3c:4a:cb:d9:c9:f4:29:1b:42:46:29:aa:d7:ee:4d:25:4b:8f:
76:9f:a1:63:16:4b:6d:d9:f4:de:4f:57:08:29:ce:d5:c6:c2:
f7:dc:83:ae:9d:36:19:b1:0e:9c:00:10:74:59:a4:88:1d:cb:
bc:6f:13:eb:3c:f1:76:91:50:a6:51:3b:f0:6f:5d:0f:4f:2c:
de:2a:fe:89:e4:44:b3:94:96:f0:bb:d1:f2:b3:4a:47:0e:4a:
7b:55:51:39:aa:e1:73:7a:d6:51:bd:0a:a9:41:46:39:05:d3:
ea:31:a1:e9:21:2e:5d:12:0e:25:4d:5a:8a:d4:24:f9:91:7f:
52:78:b4:85:6d:2a:21:48:0d:26:83:5e:18:fb:ac:73:64:dd:
6e:c5:e7:c3:ed:96:b9:3a:29:50:2b:55:e8:6a:85:a6:65:83:
8d:c6:be:98:89:c2:64:08:77:48:20:31:56:d2:96:36:18:c2:
22:b8:4a:eb:06:ca:43:a1:33:89:02:1b:3f:87:1c:e4:45:af:
b1:86:05:b0:47:60:46:0d:72:73:34:23:8a:9c:b1:17:d3:e2:
b6:25:be:52:78:18:21:32:e2:76:84:bf:74:a4:a3:ea:e9:de:
1e:f1:57:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 19:03:38 2024 by rpki-client on console-ams.rpki-client.org