Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7849.roa
File: AS7849.roa (raw, json)
Hash identifier: QUsFj1khWfxag70DMZm43jKK2pbOxJdet5O3jz10wsA=
Subject key identifier: B9:51:21:2F:50:B8:40:34:7D:4B:C1:7D:3C:25:86:B9:22:81:40:EB
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 3C62270AFF7FEA311BEEA157832F35E43882EDA4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7849.roa
Signing time: Sun 11 Feb 2024 00:01:14 +0000
ROA not before: Sat 10 Feb 2024 23:56:14 +0000
ROA not after: Sun 09 Feb 2025 00:01:14 +0000
asID: 7849
IP address blocks: 98.142.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:62:27:0a:ff:7f:ea:31:1b:ee:a1:57:83:2f:35:e4:38:82:ed:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 10 23:56:14 2024 GMT
Not After : Feb 9 00:01:14 2025 GMT
Subject: CN=B951212F50B840347D4BC17D3C2586B9228140EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:37:57:e2:52:ed:77:20:a7:41:77:93:19:
7f:eb:18:b0:d0:46:85:69:bf:88:60:98:79:76:e0:
b8:4e:be:45:be:2a:1b:59:0e:ff:29:50:6b:ab:d5:
db:ec:58:c5:e4:bc:f8:f2:9c:25:dd:8c:39:70:3d:
20:6f:14:a2:d2:c0:da:6b:d4:05:4d:3a:99:9d:95:
85:41:60:81:e2:9e:a1:f2:4e:37:7b:3a:63:03:a2:
82:94:e3:2e:3f:0b:bd:8b:05:a1:72:58:14:ea:0e:
43:6d:e6:47:46:3d:1c:3d:10:88:3d:fc:c4:d6:1f:
5d:14:ed:a2:db:9e:e0:08:62:de:1d:92:db:f0:a9:
2b:94:8c:39:ac:5c:49:50:de:4f:be:2c:6a:a0:ea:
6b:04:d7:ca:31:45:d3:1a:cb:c0:74:92:24:fa:f8:
49:24:41:4c:d4:ae:55:9a:e1:f0:29:61:e5:7c:c2:
d3:c6:77:2d:db:90:27:b6:66:1b:d2:96:15:73:e8:
35:9d:f2:40:96:08:b2:15:a2:56:0c:bf:dc:eb:55:
8c:38:af:6d:a0:00:f3:ed:70:8b:f2:16:16:5a:cc:
3e:f2:b2:23:54:94:93:63:e9:73:17:ad:2a:00:c4:
d4:45:34:8b:28:d8:dc:24:71:c9:ef:d0:98:91:41:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:51:21:2F:50:B8:40:34:7D:4B:C1:7D:3C:25:86:B9:22:81:40:EB
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7849.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.242.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8f:09:a0:06:1d:12:c5:12:93:ec:f5:12:6b:51:ca:43:0e:
be:32:73:f6:89:13:03:c3:d9:43:03:fc:5a:aa:18:be:90:0a:
a7:c4:86:8a:df:21:46:55:b3:48:e2:0c:e5:4a:3d:1d:74:00:
c2:d9:8b:c7:24:b7:8e:c9:fe:0e:0a:e0:ba:dc:62:8f:55:99:
a7:3a:54:d3:6e:ed:8a:98:be:4c:6d:61:69:00:26:e3:0e:2d:
7b:b4:9f:40:79:6a:6d:52:2e:1d:6d:2e:16:90:99:93:75:30:
7f:c0:bd:d3:a7:2a:d6:c4:6a:85:d8:6e:b1:d4:0e:ef:56:80:
0f:d1:02:29:3a:07:93:2d:07:98:87:6f:d9:b3:29:bd:b8:b8:
5c:d6:ea:b6:4d:cc:28:67:9d:76:c3:b8:0d:8e:ee:55:67:a5:
c0:2b:8a:53:dd:bd:e8:fd:20:36:c6:0e:4d:38:4e:18:15:47:
3a:7f:18:d8:fc:ac:31:fe:95:bc:4e:75:04:20:08:f8:a2:8a:
45:9b:71:a7:25:23:c3:22:9b:55:6f:30:7f:66:04:00:d3:33:
f2:e3:9c:1e:7a:35:7a:78:6a:f0:5a:a3:38:fe:05:1b:1e:e9:
01:97:8f:9a:50:12:5f:be:2c:b4:b2:c4:01:94:ca:40:9c:bd:
33:13:26:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org