Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e39362e302f31392d3234203d3e20383334.roa
File: 34302e3138332e39362e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier: I6JACJZRqQtJoijcEywi0FSCPCbrdeIRW9YgEPxcfgI=
Subject key identifier: 59:FF:E7:AC:B8:E9:F0:36:E6:7A:68:97:10:F3:A1:CA:8F:96:0D:F5
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 67BF6CD00D4B7D6634D590F6B57667B9D861288C
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e39362e302f31392d3234203d3e20383334.roa
Signing time: Sun 01 Sep 2024 00:03:05 +0000
ROA not before: Sat 31 Aug 2024 23:58:05 +0000
ROA not after: Sun 31 Aug 2025 00:03:05 +0000
asID: 834
IP address blocks: 40.183.96.0/19 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Nov 2024 10:22:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:bf:6c:d0:0d:4b:7d:66:34:d5:90:f6:b5:76:67:b9:d8:61:28:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Aug 31 23:58:05 2024 GMT
Not After : Aug 31 00:03:05 2025 GMT
Subject: CN=59FFE7ACB8E9F036E67A689710F3A1CA8F960DF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:29:8d:8b:4e:04:6e:2a:3b:9f:8e:83:da:
7d:bc:b4:30:03:33:dd:79:79:1b:c9:36:24:18:60:
17:76:b3:3c:b7:d1:d7:04:f9:4a:4d:d6:5a:62:f1:
43:4f:43:82:4d:ee:ca:87:5b:6a:2b:e7:0d:8b:1c:
e8:95:66:a6:eb:4a:b0:43:4a:50:d6:b9:3d:c2:22:
c5:2e:2c:3c:f5:04:60:98:c6:e9:a8:61:40:2d:25:
92:7e:44:68:58:be:43:0c:d2:2d:6b:3d:6f:a0:62:
94:d5:e6:11:a2:0d:e0:f6:6e:7a:ed:72:f5:1d:79:
2d:27:20:c4:d8:b7:0d:4e:c0:1a:7a:0c:fa:7a:38:
6f:73:e7:d4:49:f3:d1:09:23:45:c5:e2:8c:6e:cf:
da:0f:66:5b:0d:f2:14:6e:fc:e9:00:8a:2a:6b:bc:
23:02:20:40:42:3d:dd:3e:a3:10:fa:47:bb:73:26:
78:e1:38:61:00:19:02:0b:35:ce:b5:9b:32:d7:8b:
9f:92:62:a4:c3:02:24:da:5c:97:e9:8f:04:c1:b8:
5a:a7:ed:47:93:70:f5:7d:83:d1:3f:d8:27:2d:8e:
5b:1c:6d:be:c8:a5:62:9d:67:7a:1b:17:70:6e:fb:
66:fb:88:eb:f4:0f:fa:84:cd:d0:1f:63:78:4d:5a:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FF:E7:AC:B8:E9:F0:36:E6:7A:68:97:10:F3:A1:CA:8F:96:0D:F5
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e39362e302f31392d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.183.96.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:93:a9:28:94:bb:1f:8a:f3:52:b5:7b:9a:d5:34:cd:9e:f1:
85:8f:e4:51:7f:ab:09:24:e6:43:e9:14:dc:84:fb:d7:2e:b8:
12:14:80:c0:b3:39:a5:5e:37:f9:80:d8:09:20:fa:b1:ff:c1:
ed:46:e5:9c:c4:52:55:d7:14:21:d3:6c:ba:dc:ee:a0:7c:04:
61:5d:dd:5d:a7:96:78:02:ff:01:7d:7f:b0:f1:96:92:cd:65:
56:fd:93:00:b7:60:c9:59:84:27:4e:62:de:f2:fe:00:ce:4e:
73:89:8d:37:76:c7:64:34:86:e6:1e:e8:83:a8:0a:b8:9d:80:
19:c3:b3:01:93:17:ab:35:50:40:d1:bb:69:6c:c9:f4:98:97:
72:f9:a2:b7:bf:6f:f8:3e:83:93:9a:ef:3a:ac:c2:7b:5f:17:
f3:b2:07:4b:d2:e9:d9:0d:5d:6f:26:3a:4a:da:77:7d:21:03:
ce:e0:2f:a7:76:44:57:67:6c:77:48:46:4f:c4:5f:db:ff:f6:
ef:12:04:82:4a:0a:8e:43:66:ff:40:08:5d:99:2e:47:f3:f2:
d7:9f:f6:29:13:70:99:98:91:57:ef:1b:34:6c:19:7b:4c:e5:
4a:aa:57:10:d1:a6:d0:65:b8:33:8f:ee:1c:12:6e:d5:01:d0:
e0:97:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:12 2025 by rpki-client