Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e39382e302f32342d3234203d3e2035363530.roa
File: 3137322e3130382e39382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: lG6nG0dfgNZBUTg5KJ/Su2Fm8ST47V40+rWd3AVX1/4=
Subject key identifier: E0:80:9C:31:F4:DB:47:9B:74:10:76:6E:2D:8E:DB:D7:DB:A6:63:FB
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 25B73A09EA9A2CC364409C38D4E6CF536F6DBBA9
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e39382e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:39:13 +0000
ROA not before: Thu 02 Nov 2023 11:34:13 +0000
ROA not after: Thu 31 Oct 2024 11:39:13 +0000
asID: 5650
IP address blocks: 172.108.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b7:3a:09:ea:9a:2c:c3:64:40:9c:38:d4:e6:cf:53:6f:6d:bb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:34:13 2023 GMT
Not After : Oct 31 11:39:13 2024 GMT
Subject: CN=E0809C31F4DB479B7410766E2D8EDBD7DBA663FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:94:e1:4f:7c:06:6e:21:a4:25:84:95:c3:
52:71:d9:c4:37:89:1f:cb:a9:bc:55:d4:d6:21:b5:
0d:1d:fe:19:88:8c:62:09:8d:02:f4:29:03:2f:15:
f4:78:c8:1d:4c:f2:53:39:93:00:95:77:5f:68:2f:
6e:ab:48:6d:1c:2d:dd:bd:8b:25:53:ef:a2:fe:c7:
54:a8:a1:5c:9c:0a:d2:6c:10:09:21:98:25:68:d8:
5a:2d:7e:97:02:07:53:4c:13:68:c0:36:04:a7:d1:
33:1a:2e:d4:4e:40:f2:00:5d:e8:b6:70:cc:10:61:
c8:cd:c3:69:f9:3c:72:ce:b8:09:28:6a:7f:0b:92:
31:ad:b2:da:91:24:ff:34:17:fa:fe:72:ca:51:1d:
51:ca:9b:7d:9d:a2:6c:f0:7a:12:cb:ff:e4:7f:ad:
f5:52:47:f6:8d:13:81:3c:e7:73:59:93:b4:31:fd:
dd:c7:5c:d1:b4:98:e8:8e:1b:0d:f6:77:f2:6f:21:
b9:c9:58:20:e3:2e:ed:e1:06:27:6e:c1:a1:66:4d:
e1:cd:18:e3:4e:b6:1f:4b:4f:93:55:54:18:16:35:
41:9c:df:3a:92:8c:c8:6f:ab:6d:21:b4:18:20:7e:
b1:ff:14:e1:2f:f6:ce:87:e8:41:27:fe:40:d3:cf:
b9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:80:9C:31:F4:DB:47:9B:74:10:76:6E:2D:8E:DB:D7:DB:A6:63:FB
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e39382e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.108.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:6a:d7:71:10:8c:29:7c:cc:33:f9:3d:79:0f:c7:34:fc:6f:
b5:b4:17:b3:95:68:d9:8e:4e:c9:a0:88:fa:62:19:31:5b:50:
93:95:2e:1d:29:0f:3d:6b:b8:1f:6f:63:3d:7f:c0:f0:e5:e2:
1d:2d:87:35:97:54:7d:8c:8c:3d:f9:8f:64:23:aa:6c:32:fb:
0b:00:51:38:4b:16:2c:c2:b7:19:23:2a:da:c1:42:37:26:e6:
f2:1f:86:ab:a7:9f:70:a1:0d:45:ff:e0:c8:e9:37:82:4b:c0:
ce:8a:a6:b6:12:a1:4a:ff:e3:ff:31:98:7a:25:1c:d6:1e:e0:
da:16:90:a9:af:51:4f:8c:b9:ef:e5:ac:c8:7d:8a:fa:c3:db:
43:b6:1a:ae:5f:88:48:c2:ae:a2:38:9b:61:af:73:c1:6b:8e:
9b:59:66:37:8e:ea:5f:3c:28:e4:c2:b5:01:c8:13:72:db:ac:
14:f1:45:b9:21:bb:f3:ab:33:b5:12:12:7d:00:16:cd:b0:3b:
3a:c7:f9:26:00:f0:47:8c:61:35:6a:8d:e4:82:f4:c0:0f:4a:
1a:fd:5a:a7:7b:71:a9:45:b2:80:f5:34:25:c2:53:d4:15:76:
57:7c:0a:91:a1:ff:c8:3c:ca:64:0d:37:ed:2f:3a:1d:30:86:
1c:d9:8e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org