Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130342e302f32342d3234203d3e2035363530.roa
File: 3137322e3130382e3130342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: XM7y1c7Zu0oER4l7YQo2ke/WzmB56XhnhzNhBL+EIys=
Subject key identifier: 77:11:57:57:B5:E3:1F:FF:41:59:63:00:A8:E9:10:20:ED:D5:5F:5C
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 485CBA9AAEF204EDD86FAA9DC1AD3039A31FFCED
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130342e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:40:04 +0000
ROA not before: Thu 02 Nov 2023 11:35:04 +0000
ROA not after: Thu 31 Oct 2024 11:40:04 +0000
asID: 5650
IP address blocks: 172.108.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5c:ba:9a:ae:f2:04:ed:d8:6f:aa:9d:c1:ad:30:39:a3:1f:fc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:35:04 2023 GMT
Not After : Oct 31 11:40:04 2024 GMT
Subject: CN=77115757B5E31FFF41596300A8E91020EDD55F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:a7:28:84:17:ac:38:a6:77:05:df:9a:ac:
15:5f:97:6e:a8:8c:05:f6:24:21:d2:8f:c5:c3:1d:
d3:1d:d0:52:a6:16:3b:a3:c9:f7:3a:c4:a1:9d:77:
3c:e6:9a:10:6f:04:b1:eb:91:aa:f0:5e:ba:09:32:
44:c6:2e:59:1a:1b:cd:21:7a:18:48:b7:3d:17:b6:
c3:31:35:84:57:ab:32:5e:68:70:b3:34:72:26:5e:
d1:49:d7:85:85:75:22:ba:b6:49:61:e9:c0:18:af:
25:42:28:5d:e6:87:9c:31:89:f4:99:50:41:76:8f:
92:4d:da:81:c6:42:89:90:f1:12:51:5a:47:16:59:
79:f4:ad:e9:98:e1:29:c1:0c:ed:32:8e:21:2d:65:
3d:da:d9:10:52:b4:70:f1:b1:2c:d0:d7:b5:c9:57:
a5:b4:51:56:37:de:cd:69:69:9c:2a:19:e0:d2:72:
b1:3e:bc:5c:c1:f7:4d:64:85:49:f9:14:e3:3a:9a:
8b:6b:37:09:e0:df:72:30:ba:a7:50:bc:d5:06:90:
06:60:15:70:16:44:c7:41:06:fb:c8:bf:b0:25:d9:
56:fc:e0:89:3a:df:eb:03:ab:e2:d2:0a:6e:8c:08:
27:3b:bb:af:33:24:1d:4b:c1:d3:2e:4f:04:b6:8d:
76:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:11:57:57:B5:E3:1F:FF:41:59:63:00:A8:E9:10:20:ED:D5:5F:5C
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130342e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.108.104.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:89:42:f3:cc:88:25:6c:09:cf:ba:30:95:e1:2c:c7:74:5d:
09:58:bc:7f:1a:1f:fc:3d:55:e2:7a:a0:af:33:c2:db:f1:56:
b4:d2:f5:8c:fa:d7:a3:ff:74:24:b0:c7:67:07:eb:4f:8a:a7:
1f:38:80:35:79:20:50:04:18:94:e6:bc:42:5c:19:89:7a:d0:
8a:c6:ff:65:fa:1b:01:af:c4:30:18:73:df:06:e5:3e:b4:02:
b2:6e:17:16:12:fc:36:66:75:f8:56:a5:22:75:79:33:3a:5b:
e3:5c:48:74:3e:36:41:c7:65:83:9b:a1:61:92:64:1d:16:2b:
68:54:94:06:eb:0a:ab:9b:cb:17:8f:f3:a1:8c:e2:b3:1e:ae:
57:56:44:76:a0:8f:9c:99:d0:12:f0:3a:50:0a:f0:7b:21:18:
f5:f3:e9:04:de:a0:55:65:e5:51:26:5c:76:83:11:a7:8d:74:
8d:ce:fd:4c:f3:2f:79:4c:64:f3:af:2e:3f:fd:68:77:0d:1f:
e1:c3:65:9c:99:6b:fb:fc:4e:50:97:13:4b:c0:09:62:41:43:
90:50:fd:14:84:d5:85:3f:f3:54:6d:9f:66:2a:d5:24:b7:1f:
f9:fa:68:6d:16:7b:d5:d2:57:df:29:13:58:47:29:c8:59:19:
85:2d:61:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org