Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e20383334.roa
File: 3230352e3231312e3135342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: eiNDJaYhOEaJYccojZwJUjM66jkd5ygA4MhxNmlQ0ak=
Subject key identifier: A8:67:0C:0E:BF:B0:5E:C0:7B:97:A0:24:92:07:7B:36:BF:EC:AA:69
Certificate issuer: /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial: 68D447EF822DC2CF98DCEFF76F3939486581EF1F
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e20383334.roa
Signing time: Fri 09 Feb 2024 10:03:33 +0000
ROA not before: Fri 09 Feb 2024 09:58:33 +0000
ROA not after: Fri 07 Feb 2025 10:03:33 +0000
asID: 834
IP address blocks: 205.211.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 14:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d4:47:ef:82:2d:c2:cf:98:dc:ef:f7:6f:39:39:48:65:81:ef:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Validity
Not Before: Feb 9 09:58:33 2024 GMT
Not After : Feb 7 10:03:33 2025 GMT
Subject: CN=A8670C0EBFB05EC07B97A02492077B36BFECAA69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:c3:e7:d6:22:30:29:32:eb:40:3c:2a:0e:
69:56:ab:23:cf:b2:42:cc:09:d6:72:ba:49:49:fc:
61:c8:0f:60:5c:72:3d:50:31:e7:9b:cf:80:71:ac:
3f:ed:d0:e7:1e:30:43:e3:21:95:3e:b2:fd:1e:69:
69:5e:28:2f:e6:32:5f:7a:dc:e8:57:89:2b:61:ae:
7c:9e:f8:81:a7:c6:21:6a:9b:a4:27:46:8a:0b:4d:
bc:6d:ca:b4:97:02:70:00:5f:64:60:b9:34:ef:03:
33:d5:d8:2e:aa:e1:b2:e7:db:82:0e:98:8e:65:b2:
ac:1c:54:20:0a:a3:cc:72:a8:46:25:6a:d4:8d:d6:
39:16:e8:0e:96:79:ae:8d:d1:e6:b0:81:3b:1f:14:
35:e6:f0:48:3f:a4:a9:05:9f:16:68:57:0c:73:c6:
39:a3:fe:09:60:0a:d1:45:8d:a5:a1:07:5e:3d:d9:
fb:42:26:e5:26:77:6c:47:7c:34:3a:e3:b9:8f:19:
c3:bd:06:4e:7a:4d:2e:0f:19:aa:a9:dd:92:5c:32:
85:9a:f2:14:9b:1f:29:e4:41:40:41:99:cf:87:dd:
84:6a:34:63:46:db:5f:0f:08:80:35:3c:fb:25:2d:
dc:bf:a6:49:87:e6:f9:f2:df:68:4e:ef:bd:01:77:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:67:0C:0E:BF:B0:5E:C0:7B:97:A0:24:92:07:7B:36:BF:EC:AA:69
X509v3 Authority Key Identifier:
keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.211.154.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:66:1a:e0:de:f7:00:1d:a2:58:4f:d2:2d:de:4a:4f:40:12:
7b:0c:90:69:74:ac:8c:49:17:26:01:e9:5b:34:ed:ca:d0:b3:
6e:7a:e5:93:0e:f3:a9:43:27:48:80:b9:c1:c3:a7:f1:a2:ad:
96:df:74:4a:21:44:fe:b1:31:95:15:70:86:d8:31:72:40:ba:
a8:09:30:af:43:2a:ed:e1:b6:f3:62:3b:4f:a7:2e:bf:0b:bb:
df:1b:8a:67:1a:84:54:63:96:d5:9f:29:16:69:a0:38:74:df:
cd:a5:ee:72:92:e4:13:e5:54:05:a3:18:83:f9:fe:e7:e1:0e:
2d:aa:72:57:fb:ac:d1:95:c0:e3:6f:bf:7d:1c:2a:df:8b:d5:
ea:2d:45:94:96:dd:cd:6c:c9:e4:b8:76:48:49:d1:0d:a4:fc:
88:e6:e2:a7:5d:35:ba:9d:82:33:30:6f:27:d5:00:0b:e0:d8:
89:c4:42:9c:69:36:3a:9d:4f:a3:de:06:00:af:03:66:e3:42:
fc:fc:61:44:47:b0:0a:35:49:0e:6a:7f:67:43:3b:8e:7d:0a:
6d:b2:ee:35:ac:49:49:0f:fc:06:bb:e2:02:cb:c5:1d:ed:99:
4c:27:bd:b3:ee:11:15:94:6a:c3:3e:42:3a:49:e1:98:a2:00:
35:e0:ba:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 20:34:22 2024 by rpki-client on console-fra.rpki-client.org