Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS36113.roa
File: AS36113.roa (raw, json)
Hash identifier: JjlElNID/pDctsZwV532zzDVLqeGbkOg/tpNEGdM714=
Subject key identifier: D0:78:FC:34:BF:B4:AF:1B:02:9B:D0:AB:80:F4:17:AC:19:28:28:C9
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 2A9ED74488EDE40725047510AE21D2FA1843B257
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS36113.roa
Signing time: Wed 02 Aug 2023 16:35:39 +0000
ROA not before: Wed 02 Aug 2023 16:30:39 +0000
ROA not after: Wed 31 Jul 2024 16:35:39 +0000
asID: 36113
IP address blocks: 66.225.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 14:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:9e:d7:44:88:ed:e4:07:25:04:75:10:ae:21:d2:fa:18:43:b2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Aug 2 16:30:39 2023 GMT
Not After : Jul 31 16:35:39 2024 GMT
Subject: CN=D078FC34BFB4AF1B029BD0AB80F417AC192828C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:8e:ad:ee:fc:a5:da:52:87:75:ee:d5:31:
c8:04:d9:c3:1d:cb:80:70:a3:04:7e:1e:4a:57:52:
91:0c:bb:96:b5:9f:b2:8c:ae:5a:d4:07:2e:24:63:
9e:18:15:b1:26:96:48:98:10:cb:59:3b:25:04:39:
27:8c:bb:90:a5:8f:3c:30:0d:7e:a8:4c:32:52:14:
7a:c3:1b:0d:75:6c:22:7a:ae:65:c4:4e:a1:ee:4c:
f2:67:49:84:68:68:62:05:09:c1:bb:ed:aa:d9:85:
d4:59:a2:3e:e2:25:ef:c8:09:f9:a6:5c:af:7f:47:
95:bb:d2:4a:40:31:7d:be:a3:d2:81:ed:cd:31:88:
6d:a7:79:83:23:c8:ab:55:c3:6d:88:ac:cd:47:7a:
7b:de:ea:d3:33:81:0b:4c:1c:99:61:e9:eb:f9:9a:
bb:fd:3b:0b:d3:99:de:95:5c:43:0f:79:7b:50:82:
f8:ed:ca:43:33:d6:a3:84:8e:ca:03:91:41:1d:c5:
2a:5a:f5:40:4a:4f:b2:b1:20:a6:cc:fd:c0:8e:d0:
97:2a:93:75:0d:67:28:24:a1:86:41:0f:6e:b0:66:
31:24:18:74:87:91:6c:a2:63:fe:59:f5:fe:81:e4:
b0:23:ea:27:d1:cd:b8:e4:7b:74:0a:1e:87:a3:03:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:78:FC:34:BF:B4:AF:1B:02:9B:D0:AB:80:F4:17:AC:19:28:28:C9
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS36113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
93:72:57:30:2a:bc:b6:f1:52:e6:df:bc:17:ce:c9:3e:d2:8e:
26:81:60:59:83:40:9c:78:f9:04:a1:ec:1b:e9:a2:9a:8e:f7:
55:45:0a:e9:6f:17:78:5a:99:41:85:c8:fe:34:b5:7b:7f:45:
37:2e:8e:d8:be:93:83:2a:e6:7c:80:4c:64:c4:e6:cd:d8:fd:
30:77:16:88:ef:9f:70:f0:19:d4:dd:70:05:f8:d3:b3:07:90:
09:cf:da:2f:9e:c7:cc:da:39:b9:30:f5:3e:df:ff:5b:bf:e0:
0f:32:97:7c:ae:ca:f7:18:18:ef:8b:7a:5b:45:ea:28:e1:50:
71:ad:ba:ed:45:cd:46:79:17:3b:2f:b4:8d:96:40:93:6e:70:
b6:f5:78:d5:c4:b9:28:f2:3c:16:ab:1f:20:ac:e8:6b:44:b8:
65:fd:26:92:55:b1:bb:4d:23:f1:a8:5c:59:75:66:68:83:7b:
5a:86:20:9d:9f:99:10:49:0b:d3:cd:37:b8:71:62:2a:16:9a:
80:2c:84:1d:16:33:a5:d4:84:e6:2a:b0:9a:18:31:f9:2e:4f:
d4:6c:61:38:87:ff:05:70:30:dd:04:f2:ba:70:a3:58:87:5b:
ef:8f:4a:04:47:a7:14:7a:14:9b:9a:7e:cb:32:15:21:f4:e4:
b4:78:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org