Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e302e302f32322d3232203d3e203132383433.roa
File: 3138352e33342e302e302f32322d3232203d3e203132383433.roa (raw, json)
Hash identifier: TwMXfizC5FIGc3Y1RhXO9mPf8ZV/St2+XaRwOKu6bwA=
Subject key identifier: 51:40:37:C0:D9:51:BB:E0:68:EC:C5:7A:40:40:C2:D5:87:D4:A4:10
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 3894D66C3043DD1E82ECCF068FCC53DE68B3897E
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e302e302f32322d3232203d3e203132383433.roa
Signing time: Thu 20 Oct 2022 18:31:02 +0000
ROA not before: Thu 20 Oct 2022 18:26:02 +0000
ROA not after: Thu 19 Oct 2023 18:31:02 +0000
asID: 12843
IP address blocks: 185.34.0.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:94:d6:6c:30:43:dd:1e:82:ec:cf:06:8f:cc:53:de:68:b3:89:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Oct 20 18:26:02 2022 GMT
Not After : Oct 19 18:31:02 2023 GMT
Subject: CN=514037C0D951BBE068ECC57A4040C2D587D4A410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:91:44:da:ba:40:03:63:bb:e3:8e:45:4e:
4e:e2:f0:79:51:32:7e:c0:f5:d0:1b:5f:a7:c2:71:
38:e2:e9:09:ca:89:fe:fb:41:7c:7d:c0:79:42:e4:
bb:95:7a:31:58:23:fa:1d:ff:05:62:ed:69:95:75:
73:1e:e2:e9:f3:34:d2:04:1b:e3:5c:86:3e:11:c2:
5f:ad:f7:27:b6:84:86:68:42:f3:e6:30:5d:7d:ab:
cd:21:3b:79:e0:cd:2c:97:c1:88:f4:98:a8:92:11:
8b:0c:e3:dd:6b:f8:f5:14:18:55:9c:a0:1e:7b:3d:
28:e7:ab:24:27:82:38:9c:ce:cb:d0:b3:a0:93:fb:
ae:39:4a:f8:c8:0e:8c:8c:36:32:29:8d:2e:4e:d3:
30:6d:27:44:80:27:10:dc:57:f2:91:7b:4f:9a:a5:
26:37:ca:89:93:2d:6c:c4:af:33:d0:c7:80:e4:00:
f8:88:24:d6:de:e5:1b:82:fa:6a:ce:69:4b:aa:a6:
60:e3:6c:8d:f4:69:a9:cf:0c:16:0b:e6:27:8d:8b:
9c:b6:e8:6b:24:9b:d1:7a:ac:c0:59:d0:a3:2e:7b:
b9:fb:a9:ad:24:40:a8:54:8d:a7:48:89:44:40:f6:
86:2b:c1:97:dd:8b:fb:f0:8b:68:da:ad:d5:bf:d6:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:40:37:C0:D9:51:BB:E0:68:EC:C5:7A:40:40:C2:D5:87:D4:A4:10
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e302e302f32322d3232203d3e203132383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.0.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:6e:3b:d1:09:a4:7d:da:ba:85:5f:83:ff:7e:32:1c:63:cb:
f9:18:b0:2e:ce:7b:ae:b8:b4:8e:f5:79:00:16:13:cc:da:5f:
ff:90:94:73:f3:dc:ea:69:2e:4e:4c:9f:b4:cb:07:5b:27:eb:
1d:dc:c7:23:ed:dd:0f:f7:87:d7:c2:81:33:ee:fd:3a:66:50:
8f:9e:8a:99:ec:42:54:e0:f6:a3:bd:01:bd:7b:f4:76:4c:af:
2f:79:69:f4:68:c5:83:bf:ae:a5:8a:dc:09:99:f1:ce:2e:57:
81:da:b7:96:62:f3:1b:99:80:82:6a:b5:05:b1:fb:43:71:ba:
5c:06:61:69:ea:a9:e3:2f:1c:de:37:d4:50:f3:87:95:93:6e:
57:c3:16:78:66:3f:5e:bc:6f:39:b8:06:eb:bb:99:31:17:b4:
83:78:ff:a1:d1:56:67:aa:26:84:5b:67:76:f0:db:52:e7:d3:
27:2f:77:bf:ce:31:89:c5:02:b7:30:39:75:71:80:7a:d1:a9:
99:1a:b2:e5:50:9c:b7:9f:77:d7:b9:bb:e0:e9:4f:41:e1:28:
c3:30:b8:5a:d2:88:b8:51:1d:b3:7c:4a:50:aa:bd:b2:5d:1c:
0c:35:79:8b:5f:1d:1e:61:cd:cd:b9:5f:8f:a5:5f:5c:de:24:
7c:14:12:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 19:12:47 2023 by rpki-client on console-fra.rpki-client.org