Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131322e302f32342d3234203d3e2035363530.roa
File: 3137322e3130382e3131322e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: 9kqahcMISBYIVVvPdJEcmU4AxQC0fZlvjJWAFTGFWJ8=
Subject key identifier: 87:25:8F:3B:80:D1:B6:7C:02:47:31:D1:D1:13:53:E0:32:41:5F:2D
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 3A822F6D63D945DB5F14C451D12CE0F4511CB8ED
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131322e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:41:01 +0000
ROA not before: Thu 02 Nov 2023 11:36:01 +0000
ROA not after: Thu 31 Oct 2024 11:41:01 +0000
asID: 5650
IP address blocks: 172.108.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:82:2f:6d:63:d9:45:db:5f:14:c4:51:d1:2c:e0:f4:51:1c:b8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:36:01 2023 GMT
Not After : Oct 31 11:41:01 2024 GMT
Subject: CN=87258F3B80D1B67C024731D1D11353E032415F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:cc:db:e6:1e:4e:f6:3a:d9:bf:2e:b5:ca:
81:9c:ef:73:47:fd:6a:14:19:39:3e:8c:a2:e9:fa:
3e:10:5c:25:aa:d3:88:11:d8:63:12:18:fb:60:99:
17:47:4e:3e:74:2c:23:1a:3e:f8:41:d3:dc:02:6d:
04:9c:fc:c0:e3:b5:be:8b:8b:96:b9:b5:1a:62:d8:
71:c8:cd:64:98:f2:7b:82:f0:71:d6:e1:d7:ee:63:
86:57:2e:e2:73:de:d5:37:f7:a6:c6:0e:12:f0:38:
e6:a7:fd:98:ca:63:1c:84:16:ab:89:aa:da:69:c8:
c9:1a:b3:d0:71:4c:48:e4:8a:f5:8d:56:7e:28:bb:
37:da:8d:e3:11:65:95:43:51:1d:59:88:0e:5a:ba:
ff:af:c7:b8:3e:11:ad:09:5f:a5:0c:a8:d1:75:a0:
c8:73:d3:4f:f1:5c:3b:ad:be:c1:e1:0d:37:0f:ce:
e4:5c:ac:6c:ee:53:ec:25:12:d0:46:c2:1e:85:15:
16:06:be:aa:0f:49:c8:06:ba:e0:82:29:e1:97:f6:
f9:df:70:2a:d8:e9:b0:43:e4:92:25:7e:20:9d:cd:
7d:9a:97:bb:bb:c5:12:e7:62:e9:17:1e:dc:9e:45:
84:0b:cb:21:43:a6:85:68:b1:ae:a4:55:a8:4d:8a:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:25:8F:3B:80:D1:B6:7C:02:47:31:D1:D1:13:53:E0:32:41:5F:2D
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131322e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.108.112.0/24
Signature Algorithm: sha256WithRSAEncryption
10:0c:7c:a3:9f:9d:01:7c:de:a8:7d:49:51:99:4f:59:d5:72:
84:8d:e1:3d:34:7f:0d:d5:3c:c4:55:7f:c1:91:6e:76:0c:05:
84:3c:aa:4e:21:4e:6c:b3:b1:97:99:52:2c:60:5c:f6:7a:8d:
d4:aa:aa:16:0b:ac:b5:95:80:88:0a:c1:e0:70:d1:40:9f:e8:
aa:9e:e0:97:5e:c8:01:03:78:19:36:9e:a9:d4:38:3d:a1:f4:
c5:eb:c5:a5:96:f4:fd:cb:fc:31:c6:18:3e:56:1a:bd:3a:4a:
31:fd:e5:2a:de:60:d3:e4:ce:58:43:ca:e1:9b:83:f7:58:61:
ad:f0:ec:c9:90:90:af:ce:88:f4:bf:be:69:3f:af:b7:44:1a:
d9:f1:cb:e7:a4:91:7b:4f:21:b7:ef:cf:95:90:92:57:c7:22:
b7:89:46:b3:3c:0c:39:ee:4f:fd:4d:d0:53:ea:d7:2c:f2:dd:
5c:10:fb:af:11:15:ee:40:b7:92:3c:91:75:4c:a3:8c:35:11:
97:8a:dd:4d:5d:52:91:6d:3e:9f:24:89:04:dc:13:35:a5:e3:
b8:ac:7b:7a:dc:42:19:1a:30:a7:09:17:a4:26:4a:7a:c5:8d:
02:6a:3a:4c:17:7c:2e:86:78:4a:e9:25:bc:d6:7c:11:48:df:
61:bf:2c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org