Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: 0ZyGrb2tUo58CvaxUnGexlR7WbaxJ7FBjlmGRtnX8qg=
Subject key identifier: C8:BB:38:E7:BA:A6:AF:A9:AA:55:F5:F9:A2:C3:90:10:85:9D:33:CC
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 4E95865F9023981AE9096B548D2D3B35AA8BDEAF
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS0.roa
Signing time: Thu 25 Apr 2024 18:26:10 +0000
ROA not before: Thu 25 Apr 2024 18:21:10 +0000
ROA not after: Thu 24 Apr 2025 18:26:10 +0000
asID: 0
IP address blocks: 75.102.8.0/23 maxlen: 23
75.102.62.0/24 maxlen: 24
75.102.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 17:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:95:86:5f:90:23:98:1a:e9:09:6b:54:8d:2d:3b:35:aa:8b:de:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Apr 25 18:21:10 2024 GMT
Not After : Apr 24 18:26:10 2025 GMT
Subject: CN=C8BB38E7BAA6AFA9AA55F5F9A2C39010859D33CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:05:62:d8:c2:24:46:ac:be:f4:82:b6:0d:d3:
b5:7e:a1:4c:8c:d4:a6:0b:fc:fe:60:73:cf:e5:e7:
9e:0c:6e:b7:df:46:b5:f2:ec:7d:f9:56:8b:f1:3a:
75:36:f8:5a:7c:04:bd:7d:7e:dc:92:fa:65:ba:6c:
02:d6:cd:9c:42:55:9d:0a:0c:db:c7:0f:1e:64:1e:
ce:d3:1d:6c:34:a2:29:8a:d5:de:2e:9d:e1:82:ad:
c0:72:93:25:73:c2:2e:fd:0d:17:9e:4d:96:18:ba:
ca:fb:77:35:05:f8:4c:1f:e0:a5:f0:f6:5e:90:1d:
80:37:f1:9b:91:9a:83:9a:11:c3:a8:1e:bb:43:99:
12:99:26:07:60:b2:e1:be:fb:2c:87:ca:33:74:2d:
d1:34:a7:ed:1d:c4:94:3b:5b:9b:21:e6:66:82:b4:
62:dd:81:5e:06:23:5a:4e:6f:c7:c6:e2:39:1c:7e:
14:dd:94:85:61:67:af:9d:27:4f:39:ac:b9:a8:93:
d2:81:36:83:5a:91:21:60:f2:18:bf:dd:0a:38:43:
50:a6:6f:a5:a8:76:43:fa:ad:13:70:2a:19:2c:f4:
da:76:d0:5f:b6:98:14:5f:d8:cd:4e:c2:a9:cc:f4:
df:ee:b8:86:2f:62:09:66:0a:e6:36:1d:d5:3b:95:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BB:38:E7:BA:A6:AF:A9:AA:55:F5:F9:A2:C3:90:10:85:9D:33:CC
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.102.8.0/23
75.102.62.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:95:66:b6:29:9b:5a:a7:c6:fa:59:a4:52:32:1f:2f:1d:62:
9d:20:fa:48:f2:4f:aa:c1:a7:6a:41:84:98:1f:9b:fe:10:ba:
24:3b:5e:8a:20:7d:5d:3a:65:8f:e4:5d:42:6c:ba:2f:5b:d0:
41:36:8b:21:94:33:26:d1:b1:a1:4e:97:d7:c4:fe:2d:b2:f9:
c6:b9:ff:1f:2a:19:b9:83:0e:b9:da:1e:90:46:01:80:b7:2a:
14:7f:df:0f:8e:a8:64:b7:fc:7d:fa:00:f8:bf:40:37:be:e3:
ed:4a:2d:f4:5b:a5:9c:60:00:47:14:86:63:35:81:94:c6:8e:
5f:e7:65:7a:76:c5:d6:42:87:c4:7f:0c:aa:1f:ab:e2:83:81:
58:20:38:d4:4d:a3:34:aa:0b:ad:97:33:dc:a1:24:53:de:99:
f9:85:1e:81:23:a2:24:b1:fc:af:8e:62:22:ba:30:96:83:f5:
20:d0:4b:83:f9:67:e0:41:3f:06:8c:0e:8d:ec:5d:c3:6e:68:
f9:0e:0d:e6:fc:7e:50:2a:5b:c7:34:0a:37:18:48:13:ad:7b:
d5:bb:a9:e4:bc:d1:b6:a8:ed:a4:ac:30:55:8a:83:e3:be:ad:
53:2e:d0:97:26:bf:70:f4:e3:6b:6f:b1:c5:55:ec:55:3d:c7:
be:a2:68:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:13:53 2024 by rpki-client on console-fra.rpki-client.org