Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e203632393433.roa
File: 3137322e38322e38392e302f32342d3234203d3e203632393433.roa (raw, json)
Hash identifier: Qc4afiZLKNX2fVic5NKA5KMP/3zmiBMaOArxrA1Kp6g=
Subject key identifier: 2A:9F:0D:7F:A5:8A:89:AB:18:8E:BC:F3:08:09:4A:D7:EB:5A:A1:2E
Certificate issuer: /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial: 75D335D33EFD355A3E453ECBA8892FF27E943C8C
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e203632393433.roa
Signing time: Tue 07 May 2024 19:50:47 +0000
ROA not before: Tue 07 May 2024 19:45:47 +0000
ROA not after: Tue 06 May 2025 19:50:47 +0000
asID: 62943
IP address blocks: 172.82.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 18:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:d3:35:d3:3e:fd:35:5a:3e:45:3e:cb:a8:89:2f:f2:7e:94:3c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Validity
Not Before: May 7 19:45:47 2024 GMT
Not After : May 6 19:50:47 2025 GMT
Subject: CN=2A9F0D7FA58A89AB188EBCF308094AD7EB5AA12E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:ee:50:82:ee:1d:ba:e3:d8:dd:39:03:e7:
59:36:fd:d5:87:0b:42:95:a9:00:92:bd:7c:4d:bf:
86:6c:4e:49:84:75:43:8d:4a:d9:b1:22:a0:cc:13:
d4:f9:da:8e:91:02:28:d8:64:32:c0:f0:20:2f:8a:
c3:0c:30:e6:96:4c:bf:0a:f6:e3:bc:3c:4b:01:e7:
f2:6d:fd:8d:19:e4:8e:30:e8:01:33:81:54:44:cf:
0c:2a:9a:49:3b:98:d7:a4:04:4e:f9:66:f1:4f:dc:
2f:2a:cf:9c:5a:74:c9:1d:14:e8:2f:96:bd:f9:af:
9f:a5:cf:fe:79:19:f8:16:bb:e1:5d:12:f7:e3:a6:
26:f0:00:d9:fa:fb:75:cc:2d:e1:50:35:28:aa:bf:
6e:fb:16:1e:85:39:97:1c:15:bc:9b:7c:2f:b0:67:
17:51:47:36:df:23:22:7a:d7:ce:e2:64:e6:63:f8:
aa:0d:27:19:c2:d6:06:ad:26:c5:0a:72:ce:9e:d7:
0d:30:71:bd:b9:6f:73:91:86:57:fc:b6:70:36:29:
2a:46:3b:3d:31:5b:fc:1f:ab:08:5f:e7:81:cd:d8:
ce:f4:6b:1b:a7:c4:09:76:a2:82:78:3d:c4:ab:42:
26:dd:8e:89:af:52:37:44:64:6f:65:67:bc:63:93:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9F:0D:7F:A5:8A:89:AB:18:8E:BC:F3:08:09:4A:D7:EB:5A:A1:2E
X509v3 Authority Key Identifier:
keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e203632393433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.82.89.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:1d:36:91:bf:2e:28:55:a7:a5:95:dd:be:8e:c1:0d:d6:16:
04:88:7e:2a:8d:9e:be:ad:b9:c3:6a:ad:25:8f:0c:b2:c0:13:
d3:22:4a:a8:47:6d:55:71:19:02:de:b9:b8:7b:cc:23:39:90:
10:7d:b3:57:40:e6:5f:75:f2:ae:d7:48:7c:d0:13:c1:7c:e4:
1a:67:08:a6:1d:bf:e0:a0:54:c7:97:4d:c2:ef:95:c5:46:16:
a6:6b:b2:ee:26:ab:e2:b5:da:6d:ea:50:f9:c8:fe:5b:8f:d7:
97:b2:2e:a2:17:f2:e6:d1:0a:9d:17:f5:0a:90:55:23:b4:d3:
2b:7e:4c:f1:96:91:43:b0:6f:34:c4:77:9c:84:74:0f:06:fc:
27:77:ba:b6:85:29:ac:a8:ba:84:41:4b:c7:ff:82:27:6e:84:
a5:1b:2c:3f:31:f9:de:ab:24:90:9c:bb:0c:e7:7f:fb:8d:c0:
a6:a1:94:6e:a6:cb:1c:43:bd:90:7c:01:f5:f9:79:ff:3d:bd:
51:5f:c7:17:b1:33:e6:16:f2:05:44:aa:d0:ca:73:8d:68:72:
4d:cd:7c:38:85:d0:a8:fe:d2:b3:7b:8f:81:b6:56:71:4e:31:
8b:96:c6:2a:02:8e:cc:85:33:a2:88:74:9e:74:3b:28:76:d8:
64:54:d5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 19:49:22 2024 by rpki-client on console-fra.rpki-client.org