Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e20343031313034.roa
File: 3231362e3234372e39362e302f32342d3234203d3e20343031313034.roa (raw, json)
Hash identifier: i7aN8+/3xyLdPte8538e+EKSPv1AKn0ynnNN0BCtjj4=
Subject key identifier: DA:DB:E1:44:00:76:06:A4:F1:A2:3C:FA:24:7F:93:CA:96:00:62:B3
Certificate issuer: /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial: 3378CD40BCD13740918BEB2E776679726178EB46
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e20343031313034.roa
Signing time: Wed 17 Jul 2024 22:03:13 +0000
ROA not before: Wed 17 Jul 2024 21:58:13 +0000
ROA not after: Wed 16 Jul 2025 22:03:13 +0000
asID: 401104
IP address blocks: 216.247.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 00:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:78:cd:40:bc:d1:37:40:91:8b:eb:2e:77:66:79:72:61:78:eb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Validity
Not Before: Jul 17 21:58:13 2024 GMT
Not After : Jul 16 22:03:13 2025 GMT
Subject: CN=DADBE144007606A4F1A23CFA247F93CA960062B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:78:d7:52:be:e8:60:62:9a:e5:ee:c7:5b:
d8:af:8e:46:7b:d5:ad:cd:77:b7:38:e5:1d:4d:85:
01:76:96:d8:85:6e:67:a7:8a:f1:1d:59:ea:3e:b9:
d6:bb:bf:a7:3e:d9:36:d0:86:2a:6b:8e:8d:41:21:
84:10:7e:3a:3e:70:a1:7b:72:a2:f4:c2:fc:62:08:
f9:f5:6b:da:cc:65:3e:dc:f3:f2:b1:05:ca:b6:42:
2c:ea:2a:52:15:24:eb:a0:d7:e8:7f:7c:4d:91:09:
9d:66:74:42:e6:fe:23:2e:28:02:75:9b:63:24:a8:
8f:e4:c7:b8:c9:f6:ef:1e:a8:a9:a4:64:ac:82:ab:
51:9e:c5:87:1a:d3:af:90:7d:34:7b:84:ba:22:76:
7e:4f:80:61:f7:80:76:07:0d:2b:a2:f3:cb:5f:fc:
dd:93:58:f9:f5:f6:87:ca:89:a3:2c:bd:a3:f5:0b:
1e:f6:2e:ce:1b:5f:32:24:fd:2f:03:b7:a8:37:61:
16:c5:da:03:0c:01:66:0b:7a:5a:d4:33:9a:eb:2b:
9b:53:12:7b:0a:60:b6:79:31:c0:b6:82:60:e8:f2:
8d:26:f2:ef:16:62:7d:e4:80:4d:29:3a:95:bd:d3:
c2:e5:57:c7:67:41:c6:40:03:9b:9e:17:d5:9c:a5:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DB:E1:44:00:76:06:A4:F1:A2:3C:FA:24:7F:93:CA:96:00:62:B3
X509v3 Authority Key Identifier:
keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e20343031313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.247.96.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c8:4c:a3:ec:82:61:0e:92:75:82:32:36:57:54:1d:62:12:
33:80:48:63:b5:81:77:76:45:df:5f:d5:c4:b7:0a:d6:2e:4a:
b8:0a:29:68:e6:13:ca:c1:c9:eb:43:14:26:fd:80:7d:79:aa:
29:94:aa:46:fb:56:1d:bb:71:28:b8:a4:c2:d9:fe:e0:4e:73:
a4:cb:39:58:5f:61:90:f8:af:7b:a6:38:0e:6d:fe:50:5e:36:
22:8a:82:72:13:8c:0d:11:6b:37:62:5a:12:9c:b4:bf:33:1a:
62:95:c2:00:7d:6d:09:63:4c:ba:12:d4:f6:bc:07:95:8e:a3:
25:0a:fc:87:97:1f:10:f8:40:62:bf:2c:0b:f7:d2:63:d2:6c:
83:4c:f2:72:b3:71:99:66:45:78:4b:db:26:e7:cd:b4:8a:22:
c5:9e:93:94:c3:f3:18:c6:ce:fd:1f:1d:76:eb:bd:4f:07:6d:
a2:b3:1f:82:e1:98:6b:cf:57:21:2a:8e:4b:d4:f7:e9:e6:f0:
7a:be:df:3a:be:ca:83:9d:7c:df:68:fe:5e:93:1e:ff:30:be:
22:3b:61:49:36:03:b5:f3:25:57:a3:c6:0d:36:b7:e3:bf:33:
db:6b:b7:70:ae:e7:e0:66:d1:85:dd:cf:da:5b:11:17:57:21:
bb:5e:ba:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 03:35:39 2024 by rpki-client on console-fra.rpki-client.org