Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130392e302f32342d3234203d3e2035363530.roa
File: 3137322e3130382e3130392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: XY7sfvmlx1tNZBUixVD89XVS0ArgI1F/j8DH/bG/yaw=
Subject key identifier: A1:3B:E4:77:24:41:EE:0D:90:50:CA:3C:25:25:B1:F1:CF:E8:38:08
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 04ECAF38F8E1BC2CD85C071110467A73B94049B9
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130392e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:40:50 +0000
ROA not before: Thu 02 Nov 2023 11:35:50 +0000
ROA not after: Thu 31 Oct 2024 11:40:50 +0000
asID: 5650
IP address blocks: 172.108.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ec:af:38:f8:e1:bc:2c:d8:5c:07:11:10:46:7a:73:b9:40:49:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:35:50 2023 GMT
Not After : Oct 31 11:40:50 2024 GMT
Subject: CN=A13BE4772441EE0D9050CA3C2525B1F1CFE83808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:41:5d:d6:20:01:c7:17:c4:99:f0:7a:15:
8e:6f:4d:7f:00:64:50:0b:37:bb:f3:db:2e:86:f4:
e8:3c:ad:87:d5:66:95:84:58:70:94:72:e8:c5:19:
a4:d2:a3:0b:25:b7:f0:9a:51:96:9e:40:d6:0b:dd:
ff:72:32:86:7c:b3:31:62:14:fd:e0:b8:3e:b7:15:
e1:78:47:e3:0c:ee:dc:d3:1e:f1:ec:00:91:7f:0f:
09:83:22:a7:18:04:a5:d2:5c:42:a6:1d:62:50:80:
15:ff:37:26:1a:87:19:1f:e0:92:7b:2a:57:48:21:
ee:1d:5c:7d:d6:32:3b:fb:09:9a:4d:7a:79:48:65:
e0:ad:b9:88:e2:46:9c:07:78:ff:cc:12:f3:29:c1:
5c:d9:41:02:76:ef:b3:ec:4c:63:10:99:2b:b6:30:
30:78:d1:d8:92:97:74:98:05:bb:9e:e9:35:f4:36:
46:32:7d:6a:7b:1a:27:bf:55:8a:58:a6:b2:68:e8:
d0:bd:f0:40:af:37:42:c9:9f:c0:68:ea:81:00:f1:
ef:bc:35:da:54:4f:2f:31:15:17:92:a8:db:07:a7:
0c:22:f4:3d:61:13:e7:03:33:b3:fb:21:a2:31:20:
b0:19:f6:ca:35:29:16:eb:51:22:79:4b:a0:8d:10:
b3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3B:E4:77:24:41:EE:0D:90:50:CA:3C:25:25:B1:F1:CF:E8:38:08
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130392e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.108.109.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2e:9f:4d:88:67:84:02:0f:6e:9d:d5:c8:56:35:dd:0e:c3:
7c:31:7b:a5:8c:e8:e7:7b:18:06:08:00:d9:ea:2d:67:16:75:
31:31:a5:77:4e:a3:31:52:79:f0:6d:7a:03:8f:c2:52:b3:55:
41:57:2b:83:3c:8d:de:79:35:f8:39:ff:17:9c:a1:c1:0f:28:
6d:f4:39:32:6c:f9:b8:46:92:4c:95:0e:39:94:61:99:3b:c4:
cc:2d:d0:b5:16:61:2b:6d:9f:1c:d9:9a:3c:7f:7e:d7:32:a2:
c4:4c:bc:ca:61:f8:7e:1a:a4:c4:83:bb:1b:f8:58:ca:d2:ab:
72:f8:03:a3:cc:bd:1a:61:07:dc:ed:d9:38:f2:2a:5c:8f:2e:
55:06:da:69:da:e1:86:87:a3:2b:b0:b2:43:c1:fa:03:d7:00:
23:84:de:68:85:cf:f7:ca:ac:87:9a:b3:51:ef:55:73:8d:7a:
b0:e2:80:40:3c:00:10:04:2d:da:0c:6d:6d:21:a0:d1:97:b3:
77:4a:8c:77:b2:38:69:ad:c6:55:ce:10:2f:79:70:71:2c:05:
28:8a:2f:24:5d:1b:24:f6:af:bd:81:c2:3a:d8:ab:2e:61:8e:
17:8d:4f:c0:cf:11:c0:cd:05:cf:cf:bc:ab:6f:6c:66:ef:01:
5b:d0:b6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org