Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e39362e302f32342d3234203d3e2035363530.roa
File: 3137322e3130382e39362e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: pxroXORM0Xipbp4BIhwsliZFag5AORxeBwX5emk79+U=
Subject key identifier: 97:F5:BE:83:25:D3:38:9C:DD:0D:C8:32:F7:56:84:9C:34:7C:4B:7E
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 31E1EEA18618DE199A3F39B86D660DD3BE91DA0E
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e39362e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:38:54 +0000
ROA not before: Thu 02 Nov 2023 11:33:54 +0000
ROA not after: Thu 31 Oct 2024 11:38:54 +0000
asID: 5650
IP address blocks: 172.108.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e1:ee:a1:86:18:de:19:9a:3f:39:b8:6d:66:0d:d3:be:91:da:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:33:54 2023 GMT
Not After : Oct 31 11:38:54 2024 GMT
Subject: CN=97F5BE8325D3389CDD0DC832F756849C347C4B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:cf:6d:c2:ee:3d:86:15:10:7a:2e:f9:6e:
9c:05:a6:89:c3:39:ca:04:78:ad:e9:88:ef:02:b4:
e7:3f:b2:72:06:9e:90:de:37:3b:78:26:7c:a1:ce:
8d:ff:83:49:ea:5b:50:64:d3:57:7c:9f:cf:69:a0:
df:d4:17:2f:92:d8:e2:fc:03:8f:82:e3:81:8a:53:
5a:60:e9:db:65:76:46:bd:7a:37:fb:9e:3b:a8:49:
87:81:d2:d3:fd:31:f4:97:fb:68:39:7e:1f:2c:eb:
d5:81:f5:9b:5a:8b:7c:3f:ee:bc:13:9c:22:6c:96:
0d:97:1a:26:7b:42:35:c1:9b:aa:6f:89:a7:01:22:
ce:b3:8d:70:9c:27:9c:93:ba:aa:51:d7:6c:7d:33:
9d:d1:d9:80:d4:29:7f:e7:71:d9:14:8a:fb:53:6f:
67:57:9f:ec:5e:e8:02:fd:b5:6d:8c:50:04:0d:e1:
f1:48:3f:de:8f:20:f5:88:b2:5b:2e:79:e0:ea:7f:
8a:6c:ea:d7:7c:73:11:ec:43:96:a2:e4:01:7b:ed:
2c:c9:1b:31:a2:55:c4:8e:74:0f:f3:f9:cf:18:a9:
a7:02:41:0a:e0:6c:67:21:70:0b:7a:c3:07:6a:20:
ef:7f:2e:34:ed:4a:f4:69:21:25:11:1e:dd:6b:6d:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F5:BE:83:25:D3:38:9C:DD:0D:C8:32:F7:56:84:9C:34:7C:4B:7E
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e39362e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.108.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:0a:03:35:10:c9:a3:3d:59:9f:70:aa:22:0f:fb:59:15:56:
9d:33:49:8a:f6:63:f9:1a:f3:69:06:07:d7:5d:f1:bf:67:ef:
fc:8a:f7:7a:38:ef:2e:36:34:8e:a1:29:c3:61:cd:fb:97:e4:
83:df:7a:70:8c:ef:1f:d2:3a:6f:14:8c:12:3b:2c:0a:f5:ab:
6c:37:10:1c:18:a8:9e:e2:37:c6:62:73:57:37:a6:8e:fe:1f:
e4:5f:29:59:d5:1c:6b:34:c1:7b:26:89:c9:ed:f1:a2:94:af:
55:0c:90:b3:9a:40:17:96:37:45:e5:fe:bf:19:08:3b:6a:3a:
64:b8:e6:70:2b:da:f4:ed:0a:b8:66:5c:12:9f:04:84:cf:ec:
77:8d:7a:70:db:f0:54:d7:ea:63:f7:fa:c9:56:4a:a8:4d:ac:
3f:b3:af:48:eb:fd:15:c4:1f:9d:50:f8:1e:94:4f:24:0b:d5:
9f:08:d3:04:9a:8f:b5:0d:b7:6c:c1:c8:50:fb:45:13:0e:89:
22:19:02:a0:85:7b:f0:93:6d:19:c5:cb:89:77:ef:d0:6d:c0:
6d:ee:25:7f:0f:35:12:ab:17:99:a5:e7:25:2f:1f:2a:a6:9f:
e8:d2:4f:e1:30:07:3d:c5:88:b9:e4:de:23:19:b0:55:71:b4:
79:c8:43:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org