Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e39392e302f32342d3234203d3e2035363530.roa
File: 3137322e3130382e39392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: yAvEx/dJg3Qn9THNQTpapycK8erYGXSsnisztYCRCwc=
Subject key identifier: 20:30:42:1A:17:30:2F:96:80:79:D9:4E:FC:27:4F:26:F0:0D:CE:74
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 1CA4ECE6973B39F9E1AA41101E11CDC110196FAF
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e39392e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:39:27 +0000
ROA not before: Thu 02 Nov 2023 11:34:27 +0000
ROA not after: Thu 31 Oct 2024 11:39:27 +0000
asID: 5650
IP address blocks: 172.108.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a4:ec:e6:97:3b:39:f9:e1:aa:41:10:1e:11:cd:c1:10:19:6f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:34:27 2023 GMT
Not After : Oct 31 11:39:27 2024 GMT
Subject: CN=2030421A17302F968079D94EFC274F26F00DCE74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:8f:b1:77:56:7b:4a:44:a2:66:b1:45:93:
8d:e2:67:81:a2:5a:1e:97:02:74:36:49:6e:55:70:
bf:fc:ff:99:20:b2:0d:b9:20:6e:bd:e8:2a:13:4c:
ce:23:59:84:2d:0b:c6:eb:12:c8:66:89:ec:3a:73:
e2:e5:fe:3b:4c:6d:e9:c9:dd:ac:11:47:3d:e0:cf:
2e:a5:f0:fe:1f:f7:ff:88:c0:30:71:ed:18:6e:54:
23:1f:19:37:51:00:30:33:fd:59:f0:8b:1e:11:35:
b0:58:2d:0a:58:34:91:f2:e8:a2:f1:20:f3:36:d2:
d3:07:04:7c:51:b0:69:21:98:c1:e6:8b:81:d1:c0:
5f:31:11:ea:03:1a:04:87:a3:5f:5d:65:af:01:e0:
af:72:45:71:ec:09:16:c0:80:ee:f7:07:0a:c3:4e:
6a:40:4f:5a:3e:74:91:61:41:5b:9f:b7:d8:4c:48:
c4:63:3e:42:e3:d0:be:51:ac:92:b0:c2:9d:1b:89:
3c:3e:aa:4a:34:0e:2b:2a:ab:11:82:5b:17:1c:2e:
14:84:8c:ed:5b:f1:24:3f:ec:5a:fc:d4:8c:c0:08:
1e:0e:f1:b3:71:ad:15:90:d8:d1:d5:68:04:7a:cd:
ba:da:ee:c0:cb:7c:44:cc:ee:0d:41:51:65:79:1f:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:30:42:1A:17:30:2F:96:80:79:D9:4E:FC:27:4F:26:F0:0D:CE:74
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e39392e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.108.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:3c:2d:20:10:98:e4:67:60:bd:f1:da:08:eb:ec:7d:f8:3d:
a1:00:0b:19:02:90:b4:fe:86:6a:3c:9e:5f:41:a3:81:33:5d:
eb:14:e3:96:94:7a:b6:96:9a:6a:45:7a:02:bd:22:8f:b2:6c:
2e:3e:51:b2:33:67:c7:5d:e5:1b:42:04:09:f4:d6:0c:c2:b0:
95:49:53:1a:94:fe:d7:2b:32:dc:69:3c:55:48:ff:a1:2e:b4:
a4:20:ce:9b:b2:b6:0d:d0:50:e2:98:05:98:4c:91:1b:e6:21:
45:63:fe:d0:2b:d9:20:a9:57:2c:7c:93:46:11:7b:91:44:5c:
9a:8f:25:b8:44:56:e0:17:36:71:ce:4a:1c:91:e7:fb:c1:40:
5e:27:10:5c:fb:50:33:50:a2:f9:16:c4:90:34:6b:b2:9a:de:
cc:cc:2f:a4:55:04:59:e4:67:32:8d:7c:d4:7e:f0:49:3f:f8:
eb:0d:fa:78:ec:6f:06:32:fe:8c:ff:5a:06:3d:d2:65:8e:df:
07:c8:0c:b3:06:2f:8a:06:09:c9:c6:66:4e:8e:e8:25:25:fc:
f7:bf:94:43:5c:ab:3a:56:9f:f8:8b:8f:68:81:37:1a:12:a1:
e8:ac:60:09:a3:43:2d:54:2f:05:fa:17:e3:23:0a:c1:3d:f8:
8f:ba:b0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org