Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32342d3234203d3e203336323336.roa
File: 35392e3135332e31322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: ML+tbd0yYCKD7AGlH/Mag77G2OaJIAghiLqgSzGGXCk=
Subject key identifier: 8B:E5:4F:74:16:61:06:6B:C3:8C:55:BF:F0:3D:22:E7:C6:C3:BA:13
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 49AD2FCBDB20C7940A7D388DDA04C6CC7321E40B
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32342d3234203d3e203336323336.roa
Signing time: Mon 31 Oct 2022 22:20:50 +0000
ROA not before: Mon 31 Oct 2022 22:15:50 +0000
ROA not after: Mon 30 Oct 2023 22:20:50 +0000
asID: 36236
IP address blocks: 59.153.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ad:2f:cb:db:20:c7:94:0a:7d:38:8d:da:04:c6:cc:73:21:e4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Validity
Not Before: Oct 31 22:15:50 2022 GMT
Not After : Oct 30 22:20:50 2023 GMT
Subject: CN=8BE54F741661066BC38C55BFF03D22E7C6C3BA13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:9f:d9:86:2b:f3:b5:40:a8:59:7f:0e:f9:
ce:bb:d5:01:42:4c:2c:9a:fb:44:1e:7e:f2:b9:ac:
35:cf:55:e0:ea:87:c4:07:57:31:b9:31:84:03:61:
bb:8c:49:85:5d:ee:12:75:ea:a5:e1:b2:67:0c:72:
8e:e1:55:35:dc:09:7a:eb:39:28:c7:17:de:0a:b4:
64:2d:10:ff:26:7c:e3:16:00:8a:6a:f6:bc:72:28:
88:00:27:83:71:18:98:63:8e:06:40:21:42:ff:27:
ef:21:16:bb:1b:96:03:58:ab:7a:69:54:12:56:60:
71:62:18:c1:d8:34:69:f1:75:15:6b:0b:7f:bd:82:
2a:3d:97:bc:78:c4:33:25:67:a3:cb:e3:1a:11:83:
d2:b3:53:91:30:43:df:69:dc:9f:7a:85:f2:c0:68:
04:9b:11:b4:e2:79:9d:36:48:78:2b:15:18:fc:87:
85:6f:76:a2:5f:79:6f:21:64:ec:22:01:9f:f3:62:
9a:1f:c8:a3:0e:82:62:e3:87:3f:b7:59:5c:48:13:
a8:0f:31:5a:1d:d6:32:f0:32:ff:86:24:e3:6f:35:
cd:18:39:b3:b8:41:33:ce:d6:71:46:68:ef:07:38:
7c:8d:8a:9a:4a:7c:c1:5e:4a:33:4b:d0:c5:7b:e9:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E5:4F:74:16:61:06:6B:C3:8C:55:BF:F0:3D:22:E7:C6:C3:BA:13
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.153.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:09:75:90:cd:ef:7d:33:ef:55:72:1c:8f:40:d2:95:3d:e0:
cc:70:b2:a2:1b:a9:91:c5:a8:d9:4d:2a:ad:ff:7d:2e:e5:15:
87:02:2a:02:a0:0b:4a:03:51:74:a8:58:f5:50:32:cb:44:fc:
2d:7c:56:98:dd:7e:01:7f:5e:c8:d7:ee:be:02:58:b4:06:c5:
3d:59:6a:69:c6:16:8a:7c:1d:f5:b6:a3:44:24:5a:a4:1c:0d:
c1:cc:6c:44:a1:06:da:a4:96:1c:3b:eb:0e:79:a3:06:c2:76:
26:9d:cb:f7:38:1b:4a:f7:68:cc:30:05:8b:bd:d5:67:5b:5f:
b3:8b:af:41:4b:73:b2:e7:f7:bb:7b:89:d1:50:45:c3:ef:51:
fb:48:56:2a:d3:9f:cf:ec:e7:79:df:19:d0:b4:1a:85:e7:3a:
b5:7d:35:19:0a:6f:96:b5:59:cd:a1:da:c1:ea:3d:e8:0e:d9:
06:47:aa:c9:92:81:bf:23:59:60:fb:cd:b9:e6:37:ec:ae:aa:
bc:73:03:6e:7b:bc:94:55:45:b1:af:08:3a:2a:e4:79:c3:cf:
cf:01:e9:23:f7:38:26:5d:6c:d9:cb:f7:2f:30:2e:36:b9:85:
6f:79:b4:7d:4f:51:e9:cb:d3:aa:b9:0d:28:83:17:af:ae:28:
b9:50:8d:9e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSa0vy9sgx5QKfTiN2gTGzHMh5AswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0
QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTIyMTAzMTIyMTU1MFoX
DTIzMTAzMDIyMjA1MFowMzExMC8GA1UEAxMoOEJFNTRGNzQxNjYxMDY2QkMzOEM1
NUJGRjAzRDIyRTdDNkMzQkExMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKX5n9mGK/O1QKhZfw75zrvVAUJMLJr7RB5+8rmsNc9V4OqHxAdXMbkxhANh
u4xJhV3uEnXqpeGyZwxyjuFVNdwJeus5KMcX3gq0ZC0Q/yZ84xYAimr2vHIoiAAn
g3EYmGOOBkAhQv8n7yEWuxuWA1iremlUElZgcWIYwdg0afF1FWsLf72CKj2XvHjE
MyVno8vjGhGD0rNTkTBD32ncn3qF8sBoBJsRtOJ5nTZIeCsVGPyHhW92ol95byFk
7CIBn/Nimh/Iow6CYuOHP7dZXEgTqA8xWh3WMvAy/4Yk4281zRg5s7hBM87WcUZo
7wc4fI2Kmkp8wV5KM0vQxXvpvbUCAwEAAaOCAjowggI2MB0GA1UdDgQWBBSL5U90
FmEGa8OMVb/wPSLnxsO6EzAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x
hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE
RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgaAGCCsG
AQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4
Ni8zLzM1MzkyZTMxMzUzMzJlMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMz
MzYzMjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAA7mQwwDQYJKoZIhvcNAQELBQADggEBADsJdZDN
730z71VyHI9A0pU94MxwsqIbqZHFqNlNKq3/fS7lFYcCKgKgC0oDUXSoWPVQMstE
/C18VpjdfgF/XsjX7r4CWLQGxT1ZamnGFop8HfW2o0QkWqQcDcHMbEShBtqklhw7
6w55owbCdiady/c4G0r3aMwwBYu91WdbX7OLr0FLc7Ln97t7idFQRcPvUftIVirT
n8/s53nfGdC0GoXnOrV9NRkKb5a1Wc2h2sHqPegO2QZHqsmSgb8jWWD7zbnmN+yu
qrxzA257vJRVRbGvCDoq5HnDz88B6SP3OCZdbNnL9y8wLja5hW95tH1PUenL06q5
DSiDF6+uKLlQjZ4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:20 2023 by rpki-client on console-fra.rpki-client.org