Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131352e302f32342d3234203d3e2035363530.roa
File: 3137322e3130382e3131352e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: 5ERNP9bYMaz0j5JyLljbqn0iverYiGLmDD2kRM21OeQ=
Subject key identifier: 6E:CB:4E:59:A0:DF:A4:FC:42:9B:3F:82:13:D4:9F:BE:98:E5:F4:6E
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 60DEBFFBF871D5B1422F26F95901086CCBA322FB
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131352e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:41:34 +0000
ROA not before: Thu 02 Nov 2023 11:36:34 +0000
ROA not after: Thu 31 Oct 2024 11:41:34 +0000
asID: 5650
IP address blocks: 172.108.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:de:bf:fb:f8:71:d5:b1:42:2f:26:f9:59:01:08:6c:cb:a3:22:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:36:34 2023 GMT
Not After : Oct 31 11:41:34 2024 GMT
Subject: CN=6ECB4E59A0DFA4FC429B3F8213D49FBE98E5F46E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:7e:ba:dd:72:d3:62:8c:02:44:b7:5e:0c:
91:82:51:68:4d:dd:e8:aa:fe:fc:00:4a:30:f2:a4:
dd:1e:e2:47:de:60:29:65:a4:59:eb:a7:92:72:c0:
90:b6:98:d5:25:7b:71:c5:24:1a:ed:c6:0b:39:2a:
72:87:f0:a1:28:56:7e:94:2c:7b:d3:72:63:20:c4:
1b:66:92:9b:25:40:6c:25:1b:07:db:38:f5:f8:9d:
be:90:d8:fa:11:6d:66:3f:3c:da:3f:7e:1e:b4:6f:
50:18:cb:e3:34:12:c9:08:bd:28:02:76:32:ee:86:
d9:c8:c1:58:c5:3d:ff:fe:1c:1f:c7:ac:09:09:33:
7d:a9:75:83:2d:1c:6c:d0:e0:f8:e8:62:0c:7b:e1:
b3:13:5a:49:14:7a:83:f4:85:97:15:fb:46:8a:f8:
77:83:85:0a:f6:59:95:df:56:49:f6:69:95:2d:ad:
56:10:f6:49:67:18:9e:23:bd:7b:01:9b:52:a5:4a:
a5:e5:27:c4:e8:b5:4f:b3:d5:3e:64:a4:7e:1b:e8:
07:89:8b:69:a2:71:94:3b:ef:d3:c5:a2:cd:c4:5f:
32:10:20:8e:96:eb:c9:aa:00:a7:6d:b3:55:8f:3b:
63:05:f6:54:bd:5b:b6:14:52:04:68:5e:5b:2c:06:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CB:4E:59:A0:DF:A4:FC:42:9B:3F:82:13:D4:9F:BE:98:E5:F4:6E
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131352e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.108.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5b:03:b1:bc:17:38:66:ad:2d:58:c1:be:6a:9c:87:be:b0:
eb:bd:c4:03:2f:28:20:99:27:38:0b:b5:9d:5d:dd:7b:b1:4b:
a8:4f:6d:a8:f3:32:cb:3e:ab:eb:9e:20:a1:15:f6:c4:b3:3a:
09:07:c1:4f:13:66:a7:16:6b:17:00:3f:56:3b:9c:d1:32:e7:
9d:0e:0f:31:5b:f4:48:4f:5e:6a:5c:b7:22:cf:48:89:b6:ab:
86:5c:ea:be:a4:13:15:43:5f:aa:35:60:da:63:df:74:3d:00:
63:13:f8:3e:64:5c:ad:07:61:42:b4:b6:5c:9a:dc:64:48:5d:
9f:5d:3d:9d:32:b5:57:8d:ee:da:39:d4:98:ae:11:f5:38:3e:
cd:1a:2a:39:a1:c2:41:ca:94:30:74:15:87:10:3d:f9:d0:75:
08:54:9f:e6:d9:37:0b:f3:99:f9:7f:1f:b5:ec:0b:c3:cc:bf:
1e:8f:27:81:41:49:e8:e6:b0:41:e7:61:7e:a8:91:ec:37:90:
19:e9:e8:c2:e3:ef:61:82:26:ea:13:16:c5:79:e7:fe:39:cd:
8a:af:31:68:dd:95:0e:63:ae:48:3c:32:b8:f1:76:93:90:b1:
09:1e:2b:15:a8:a9:22:6d:00:89:a0:2a:89:ab:3f:a0:d5:4a:
54:6c:11:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org