Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e20323132323338.roa
File: 3231362e3234372e39392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: zxWpgeiCOP990p3ZwgxyAz/VvaHs+UiyzWSiVGcatD0=
Subject key identifier: AD:E4:7A:75:D3:37:D4:6E:58:CD:5B:9A:B7:D2:11:04:C7:A9:45:CD
Certificate issuer: /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial: 525CF99E1B33988C4CC2E3051EE1BE63F0E69C63
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e20323132323338.roa
Signing time: Sat 02 Dec 2023 06:50:58 +0000
ROA not before: Sat 02 Dec 2023 06:45:58 +0000
ROA not after: Sat 30 Nov 2024 06:50:58 +0000
asID: 212238
IP address blocks: 216.247.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5c:f9:9e:1b:33:98:8c:4c:c2:e3:05:1e:e1:be:63:f0:e6:9c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Validity
Not Before: Dec 2 06:45:58 2023 GMT
Not After : Nov 30 06:50:58 2024 GMT
Subject: CN=ADE47A75D337D46E58CD5B9AB7D21104C7A945CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:fc:4f:e6:48:28:c6:8d:f0:b7:1f:43:a6:
48:46:35:57:2a:b8:f4:f5:ba:77:20:75:2d:78:9a:
68:fe:96:e6:b9:3e:66:27:3e:55:4b:0b:ff:4a:4a:
fc:7f:39:cb:b1:80:ad:72:b3:a3:7b:f2:14:15:a4:
cd:6d:47:eb:c3:ed:26:2b:24:c9:9c:aa:fd:66:58:
d0:12:1f:94:89:3d:21:a2:95:61:99:75:74:fe:fb:
67:22:77:fd:81:81:3a:63:62:9b:b6:0d:18:44:85:
e2:72:f0:88:21:43:f6:e9:74:bb:a2:98:4f:7f:dc:
de:40:28:d8:43:0e:4d:18:8c:e2:1a:83:4a:a1:4c:
42:69:99:02:45:ac:7c:c7:4e:e5:f8:12:06:b0:11:
8e:38:28:7f:d3:82:d0:a7:30:57:90:6b:00:0a:04:
d1:82:eb:e8:35:4b:9f:dd:97:0b:df:0d:04:b6:53:
5c:3a:fa:62:15:01:e3:03:dd:a9:34:04:ad:7b:4d:
11:cd:14:00:96:3c:5d:c2:a4:32:b5:45:54:61:f4:
b6:c2:aa:f8:ad:e9:ac:7c:37:fd:df:4e:e6:22:89:
43:04:ae:fc:82:cb:79:cd:ca:3b:99:cf:d1:e1:4b:
0e:c2:46:01:f6:69:a2:73:81:a7:7c:3b:f3:57:df:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E4:7A:75:D3:37:D4:6E:58:CD:5B:9A:B7:D2:11:04:C7:A9:45:CD
X509v3 Authority Key Identifier:
keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.247.99.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3c:93:78:26:66:e7:89:4e:df:05:03:cf:0f:4d:36:85:18:
24:45:e3:be:d5:90:8e:76:ff:df:7e:02:6a:91:44:f7:1b:ec:
1a:2e:3c:80:4c:42:56:e5:e3:5d:7d:79:d7:4f:fd:8d:99:6f:
58:90:40:51:b5:1f:70:ee:b8:51:82:af:6d:e3:44:01:03:28:
dc:f3:f8:d4:3a:94:6b:a3:ad:24:c0:14:11:b2:4a:65:33:46:
2f:17:41:c4:e5:e0:78:03:92:6f:a6:68:7d:3c:c9:44:47:b3:
82:97:f4:7a:8e:2b:39:4a:9c:32:fb:f7:08:4b:1e:d5:f6:e9:
6e:7e:d9:f9:a3:cf:df:70:02:6c:45:38:d7:48:04:62:8f:4b:
83:4f:97:da:77:a9:e0:04:e1:38:a7:12:70:a3:19:16:f8:b7:
d1:c8:1c:97:e0:5a:83:09:81:46:3c:3f:f7:10:92:ca:6c:fa:
33:99:21:be:3e:2f:3d:eb:57:03:58:f6:c6:84:53:99:15:11:
1a:22:9d:38:d6:d8:41:b9:77:02:9c:7a:85:c3:e8:07:bd:65:
41:e9:b7:e5:6d:8e:96:3c:af:dd:3a:32:30:29:92:95:27:c8:
a1:24:e5:ee:23:2d:17:3b:f9:31:29:0a:1c:59:36:01:e5:a7:
67:48:c9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org