Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e203135343430.roa
File: 3230352e3231312e3135342e302f32342d3234203d3e203135343430.roa (raw, json)
Hash identifier: tkeMKgtayfb2ofHY2G2S00D0WHwIpWIcQX/z/MLckTk=
Subject key identifier: A2:F1:87:0D:DA:3F:AA:CF:F6:AD:2B:D8:46:67:58:A0:E9:BE:87:B3
Certificate issuer: /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial: 014EDB7FD5B0A06A2F39364AF96C477ECABB5F8D
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e203135343430.roa
Signing time: Mon 11 Mar 2024 13:32:19 +0000
ROA not before: Mon 11 Mar 2024 13:27:19 +0000
ROA not after: Mon 10 Mar 2025 13:32:19 +0000
asID: 15440
IP address blocks: 205.211.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jul 2024 10:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:4e:db:7f:d5:b0:a0:6a:2f:39:36:4a:f9:6c:47:7e:ca:bb:5f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Validity
Not Before: Mar 11 13:27:19 2024 GMT
Not After : Mar 10 13:32:19 2025 GMT
Subject: CN=A2F1870DDA3FAACFF6AD2BD8466758A0E9BE87B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:45:78:cf:7b:93:05:13:f3:f7:74:58:a2:
11:5a:8b:7e:fd:20:9c:eb:a6:53:46:ab:43:cd:45:
20:b1:b5:34:45:33:64:08:58:bc:43:bf:0d:11:44:
bd:dc:cb:2d:78:30:df:a1:cb:13:06:72:2b:ee:3c:
8b:1a:7a:fa:cf:f8:39:8d:8c:c6:75:99:23:ff:30:
70:f0:59:d4:e8:ba:a0:40:11:37:b8:39:5b:91:05:
fb:f4:03:e6:4d:b4:6c:b8:63:d4:47:54:18:d4:3b:
df:d1:b6:5b:54:99:da:9d:1a:28:e1:1f:a2:a8:bc:
cb:a1:5e:83:0c:86:97:db:d4:6a:d5:32:80:be:77:
6d:50:db:60:2d:7e:24:f6:c9:77:2c:ce:46:1b:9c:
d2:58:d0:fd:b6:3b:8b:2d:29:83:75:a4:4c:8c:9b:
33:79:13:a7:79:c3:4e:5d:e6:49:48:bd:3b:43:c6:
14:92:0e:81:55:a2:b9:b4:1e:a7:6f:ad:c5:3a:e0:
ff:46:21:03:8d:36:7c:29:5e:52:15:ef:86:9b:cb:
2d:98:ae:a5:3c:fe:65:4d:cb:3c:71:33:ee:f8:1b:
5c:55:9f:ec:46:aa:d1:55:ee:25:93:3a:ac:12:1d:
30:4c:9f:bb:6f:6c:ea:1f:63:d1:3f:2e:12:e9:88:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F1:87:0D:DA:3F:AA:CF:F6:AD:2B:D8:46:67:58:A0:E9:BE:87:B3
X509v3 Authority Key Identifier:
keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e203135343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.211.154.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:0a:19:20:34:39:86:3a:15:bf:0c:bd:22:82:ed:8e:c9:38:
a1:34:e0:16:d9:94:59:c0:fd:b9:5a:d9:b8:44:ec:4c:db:d1:
7b:36:cc:4d:d8:b0:f8:63:11:db:50:b8:a6:3b:10:85:60:09:
4a:9b:54:94:76:52:d9:10:1d:2a:49:37:e1:81:94:d8:52:75:
47:0f:d7:6c:f1:5e:31:00:2c:3f:80:57:4c:8f:52:12:eb:6e:
98:82:f1:db:88:a4:24:99:26:5c:5d:53:ee:7c:ad:76:13:9e:
f6:4d:89:b3:b8:a2:b5:fa:cc:af:ed:c5:e5:9e:47:98:34:f2:
cb:f5:d4:bf:e8:89:06:a9:60:46:85:e7:0d:67:6e:21:df:f8:
81:17:a2:99:62:db:63:86:77:4f:cd:e1:ab:f8:6b:19:cf:ab:
2c:fe:b3:73:b8:cc:e8:32:e4:e9:7d:c1:1d:30:da:ef:08:7e:
f2:99:9d:0e:1b:59:e2:21:61:fc:92:3f:90:e9:8c:99:b1:68:
08:fe:89:fa:ff:c3:16:db:13:b8:a3:e0:76:16:02:8a:cb:d0:
c6:c8:8b:33:8b:a1:55:5a:4c:9a:ec:f4:ff:25:64:34:21:70:
eb:07:55:58:4f:bd:e7:27:22:76:2e:84:85:97:21:e4:a5:d9:
c1:07:f9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 11:42:07 2024 by rpki-client on console-fra.rpki-client.org