Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e20333934343839.roa
File: 36362e3131382e3234352e302f32342d3234203d3e20333934343839.roa (raw, json)
Hash identifier: JgRIl9XRiTU0W7RmdDLpZZzuBgvzOngVMIZt+ikEDgA=
Subject key identifier: 88:B3:C4:6C:6C:E5:40:CC:2F:C3:EB:A6:45:04:C1:8D:94:72:F9:92
Certificate issuer: /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial: 11784AE41AE8B98BC03FAB8EB3C5AAEB81B7EAD9
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e20333934343839.roa
Signing time: Thu 04 Jan 2024 20:27:06 +0000
ROA not before: Thu 04 Jan 2024 20:22:06 +0000
ROA not after: Thu 02 Jan 2025 20:27:06 +0000
asID: 394489
IP address blocks: 66.118.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 18:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:78:4a:e4:1a:e8:b9:8b:c0:3f:ab:8e:b3:c5:aa:eb:81:b7:ea:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Validity
Not Before: Jan 4 20:22:06 2024 GMT
Not After : Jan 2 20:27:06 2025 GMT
Subject: CN=88B3C46C6CE540CC2FC3EBA64504C18D9472F992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d8:2a:a0:be:70:0d:1a:f5:35:a7:9f:ff:79:
0b:48:a4:67:6d:90:6f:54:c7:a3:bd:88:34:ea:d4:
73:ba:56:0e:20:e1:ed:78:c5:81:8e:fe:d8:17:92:
2c:83:53:fd:80:c8:a0:ad:92:46:82:09:f8:c8:97:
fd:6a:f9:7b:b5:c5:47:dc:a5:3e:33:46:7b:05:27:
ab:2b:79:cd:94:f0:b4:a8:41:b2:75:4e:42:b2:67:
ae:f0:b5:ef:85:60:19:e6:b1:bd:97:cc:0c:f3:b8:
d4:2b:d6:53:00:99:f4:d8:24:8d:4f:0f:41:26:20:
49:37:11:95:84:5e:b9:96:54:b4:cc:2c:07:8d:90:
30:07:2c:3c:70:31:5b:81:c0:2e:15:43:f0:76:27:
ef:b3:97:c1:4e:bd:c6:4d:92:7c:b2:28:e4:08:1a:
5f:5b:fa:97:b5:35:54:a7:2e:ba:e9:42:89:b3:3d:
45:10:1c:33:4a:32:70:8b:17:67:12:0e:ca:d2:54:
7b:d1:4c:e7:7c:a8:fb:8b:a6:b5:39:ed:00:69:b0:
21:0c:f6:89:b3:11:02:d7:a6:09:12:5d:6a:04:79:
5a:71:f0:a2:21:84:b4:f3:9c:fd:0f:ba:2c:9a:2c:
12:7d:c2:3e:10:d7:07:08:f7:0e:52:3a:5f:b1:89:
df:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B3:C4:6C:6C:E5:40:CC:2F:C3:EB:A6:45:04:C1:8D:94:72:F9:92
X509v3 Authority Key Identifier:
keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e20333934343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.118.245.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:3a:b9:8a:7e:e7:03:ff:f2:df:be:c1:fd:b5:78:0f:ee:15:
9a:de:ee:5a:7d:37:8a:1e:b8:12:90:e0:7d:99:9e:d5:91:0c:
ff:21:40:35:49:9e:42:bf:94:71:16:82:59:51:5d:66:64:9a:
4b:ef:d6:2c:d6:87:f2:84:7b:8d:88:a8:c1:b3:67:f8:a5:6d:
d0:a5:51:03:ba:65:14:eb:33:3e:d8:f8:37:86:18:c3:05:68:
55:dd:1e:c0:4f:7d:5b:e8:9f:87:28:4f:23:b2:18:23:7f:58:
d3:15:b2:9d:11:fe:d5:5d:d3:9c:f2:85:7a:db:de:6b:9a:b0:
ad:5c:14:80:8f:6c:09:6e:ef:76:dd:8d:b2:9d:c4:6c:bf:29:
98:be:ba:46:f4:b7:06:16:2b:b2:45:6b:6b:b4:82:73:81:2f:
30:87:be:27:66:79:c7:c3:a7:71:1b:0a:f2:b1:88:1f:bf:65:
35:af:94:0c:d9:b9:0e:b8:d9:ba:83:c8:94:1f:28:35:63:75:
7f:5f:1e:50:44:02:b7:4b:7b:e2:60:c5:4e:a7:17:9b:b8:93:
36:ff:5d:de:a6:ca:10:b8:b1:ba:ed:be:46:bf:91:e0:34:86:
7a:db:19:1a:10:16:a7:43:d4:cf:d3:27:96:64:c8:f3:94:7b:
b9:3e:5e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org