Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234362e302f32342d3234203d3e203631313338.roa
File: 36362e3232352e3234362e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: NiRM0wpgBmWxQNGCypFyDQ6+8pI8RLTc8hau7qPJYXU=
Subject key identifier: CE:81:85:5A:24:25:85:EF:69:FE:06:52:64:67:7F:1A:F0:FC:88:48
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 6B1A6E631986C8540F11676ABD49769A93D396EE
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234362e302f32342d3234203d3e203631313338.roa
Signing time: Fri 28 Apr 2023 00:34:18 +0000
ROA not before: Fri 28 Apr 2023 00:29:18 +0000
ROA not after: Fri 26 Apr 2024 00:34:18 +0000
asID: 61138
IP address blocks: 66.225.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:1a:6e:63:19:86:c8:54:0f:11:67:6a:bd:49:76:9a:93:d3:96:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Apr 28 00:29:18 2023 GMT
Not After : Apr 26 00:34:18 2024 GMT
Subject: CN=CE81855A242585EF69FE065264677F1AF0FC8848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:0f:e8:2e:d8:09:d4:31:e9:72:55:6b:f1:
85:d5:f2:d5:03:dd:88:49:d0:b2:a3:2c:3b:1c:d5:
6d:02:2c:ff:2f:c6:67:cf:5c:6c:3f:cf:5a:ef:ac:
65:01:84:b7:72:7a:5e:52:6b:68:0b:79:db:21:aa:
fe:e2:bd:f2:b1:37:8c:0a:7e:2a:d2:2e:59:e2:0a:
af:23:f5:ec:60:e0:2a:6a:a9:de:e2:ad:13:2a:6f:
78:f2:80:73:61:ac:6e:45:30:8b:d6:b5:e9:0d:93:
5d:68:5a:8b:59:01:6c:23:30:05:fd:8d:92:04:42:
ba:6f:97:1b:ed:09:5e:6e:dc:63:65:b1:9f:ea:c9:
f3:ce:52:bd:c8:bf:db:3b:f6:5c:2b:f5:93:6a:be:
b7:d4:44:fa:71:d1:89:2b:bb:89:b5:59:80:a9:33:
47:6b:54:80:76:57:00:ae:55:77:50:9e:0a:1c:9b:
dd:b2:c4:e3:33:42:87:6b:ec:a1:30:df:29:49:3c:
28:ab:57:71:d5:60:c7:4e:0f:a0:64:36:9a:43:c5:
d5:13:cc:5d:89:22:52:72:9d:21:1e:b0:d3:91:f4:
f7:c2:d3:2c:0d:0c:df:05:0f:17:d1:b0:ca:da:e2:
dc:2a:ff:73:53:b1:ac:25:4f:52:5c:7a:89:8b:f8:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:81:85:5A:24:25:85:EF:69:FE:06:52:64:67:7F:1A:F0:FC:88:48
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234362e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.246.0/24
Signature Algorithm: sha256WithRSAEncryption
63:0d:e9:be:0d:c4:e4:5f:93:b7:4e:78:e8:bc:73:0e:03:18:
13:a7:6c:96:59:b5:94:96:14:3c:13:3b:86:f6:d9:ab:5f:0c:
e7:c9:b2:44:b9:e4:19:cb:01:2b:e4:a6:d5:b6:b5:4d:5c:5c:
54:d0:ea:f2:0d:bc:32:e6:b6:a1:52:4c:74:ab:1f:f8:c8:b7:
4c:82:34:de:77:27:9f:1e:d6:54:e1:4e:a4:11:82:5f:26:31:
43:20:4d:d6:3c:e3:56:60:5a:de:24:9f:15:0a:03:0c:14:90:
6e:b4:0d:0d:1a:35:7d:16:e6:8b:3e:cd:df:c5:5f:b0:d0:fa:
7a:c2:ea:35:16:df:f9:42:6a:03:dc:2e:86:a3:1f:82:f6:0a:
77:a8:5b:1c:32:3a:7a:cd:94:ab:ea:98:11:4e:24:38:56:14:
19:92:e5:87:0b:ac:83:15:43:f5:be:c6:e5:32:f4:08:88:9d:
d1:a8:a3:82:de:25:a5:3a:c1:dd:e8:9e:73:93:c6:ce:8d:46:
ac:22:0a:c9:cc:08:7e:ea:dd:db:c9:82:ff:5d:5f:fb:c6:e8:
18:ca:74:9d:34:27:85:05:37:e4:1f:16:5e:57:a5:90:82:14:
a0:bb:b1:59:45:be:7c:eb:fc:a1:cc:0e:df:f5:8c:3e:2d:e8:
4d:f0:65:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:21 2023 by rpki-client on console-fra.rpki-client.org