Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130372e302f32342d3234203d3e2035363530.roa
File: 3137322e3130382e3130372e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: EPXOLxbJ8btCar+Q9bLPLn60nVnBkUb2d4jCVWj22QA=
Subject key identifier: DD:E3:5F:85:E8:12:36:CC:A3:E8:F8:8B:FE:52:B0:BA:DB:E0:46:F7
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 6AA22F9E802EA58875B78A06C0AA1731BED16A76
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130372e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:40:32 +0000
ROA not before: Thu 02 Nov 2023 11:35:32 +0000
ROA not after: Thu 31 Oct 2024 11:40:32 +0000
asID: 5650
IP address blocks: 172.108.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a2:2f:9e:80:2e:a5:88:75:b7:8a:06:c0:aa:17:31:be:d1:6a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:35:32 2023 GMT
Not After : Oct 31 11:40:32 2024 GMT
Subject: CN=DDE35F85E81236CCA3E8F88BFE52B0BADBE046F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:cf:9c:8c:76:f7:f6:ae:8b:a6:42:46:67:
06:f0:7a:9e:1d:65:08:fd:01:00:0d:69:15:5b:1f:
21:2c:b2:ac:c3:34:05:08:04:2e:38:2a:f9:36:dc:
a2:b6:76:b3:0a:35:9e:60:bd:6e:a6:84:09:37:d3:
08:23:37:d5:83:f3:1e:f0:09:9c:5a:be:8e:bf:b8:
8c:bc:fb:04:fc:df:8b:cc:52:87:13:38:8b:92:db:
4c:3b:f6:b1:a7:f2:de:2e:fc:2e:64:73:4d:2c:5f:
64:e4:05:7a:64:4e:07:96:a1:dc:a4:f7:4d:a0:8a:
40:47:88:98:89:fc:64:17:61:01:7c:22:86:fe:a0:
0b:a3:6e:e4:32:c3:1c:aa:d6:eb:51:c0:69:b8:06:
af:aa:76:a4:1e:90:b2:15:b7:5f:40:1d:6b:89:87:
d0:5e:70:28:76:1b:17:18:cd:0f:c5:f9:0f:89:58:
b2:75:5d:e6:9b:00:52:41:72:ff:31:96:c5:44:5f:
55:c1:f4:5b:b5:84:11:07:a3:68:fa:19:13:b3:ee:
69:ca:5f:b8:11:67:1d:f9:a8:8b:aa:76:c1:2a:2f:
d0:d1:94:a1:c0:5d:e9:2d:10:31:22:0f:7b:e0:4e:
ff:1d:3a:7b:a0:08:f4:a7:1d:29:95:06:65:3c:c2:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E3:5F:85:E8:12:36:CC:A3:E8:F8:8B:FE:52:B0:BA:DB:E0:46:F7
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130372e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.108.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f5:6a:a7:61:41:df:ad:e3:d0:fc:94:a7:d6:31:b6:17:8f:
22:09:6c:05:fb:33:ea:4f:8a:39:de:75:da:d7:c5:8b:66:93:
32:8f:27:3b:69:86:28:79:bc:d1:98:6a:ed:28:c6:72:44:f3:
78:ed:32:57:fa:1d:e1:bc:ac:47:f8:d1:76:a8:2a:44:09:11:
a9:88:8c:5f:0a:59:f6:91:57:30:fe:3b:dc:a1:5f:cf:bc:3e:
87:d2:8c:62:9d:35:7a:cb:74:e6:3f:1d:e2:75:e1:6f:d6:63:
f5:45:6d:69:0c:67:ae:d9:4f:df:d2:0f:5f:ee:68:85:d7:4a:
22:e0:a2:88:b8:fe:42:85:ed:08:3c:e3:0c:25:ea:ed:fd:cb:
4f:e3:2c:35:2a:f9:c9:42:f1:25:41:ac:96:bc:78:d6:80:a6:
be:f5:b5:5e:22:95:35:93:5a:f7:dd:c5:2b:74:49:47:50:3f:
fc:df:0e:25:3a:91:66:ec:26:f5:aa:ba:2a:9b:ad:08:75:fb:
44:3a:82:ef:69:1f:6a:b8:1c:c5:ab:e4:ee:07:6f:05:1f:2e:
c1:ab:c0:b8:b5:45:52:81:b3:47:bd:1f:7f:b2:15:3f:8d:53:
ab:61:c2:d4:47:27:e1:8c:bd:07:d5:6b:49:23:4c:b6:cb:7e:
77:90:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org