Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139342e302f32342d3234203d3e2035363530.roa
File: 34372e3138392e3139342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: e5HZ87j/TnzbSl2l2LE7AlV6bNbCl2ghaXc7bz0ljjE=
Subject key identifier: 7D:36:EB:DA:1E:60:E9:CE:06:EA:B9:71:6D:F7:DC:B1:A1:18:9C:3A
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 5251AC50CAB48591A80EDEFE5C7CE5C22834B17A
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139342e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:29:12 +0000
ROA not before: Thu 02 Nov 2023 11:24:12 +0000
ROA not after: Thu 31 Oct 2024 11:29:12 +0000
asID: 5650
IP address blocks: 47.189.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:51:ac:50:ca:b4:85:91:a8:0e:de:fe:5c:7c:e5:c2:28:34:b1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:24:12 2023 GMT
Not After : Oct 31 11:29:12 2024 GMT
Subject: CN=7D36EBDA1E60E9CE06EAB9716DF7DCB1A1189C3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:0f:03:3f:46:23:9e:9b:42:a0:3b:99:7f:
e6:06:8f:28:a9:39:fe:ad:87:8f:fd:fe:95:ac:43:
38:4f:b3:3d:69:0e:31:38:61:5b:cc:8a:0e:09:85:
24:c8:4e:32:29:12:ac:29:eb:83:87:e1:61:f1:8d:
b4:f7:96:22:44:49:22:37:0d:e8:d0:e3:de:75:80:
51:f8:e4:53:1c:89:79:5b:6d:f4:64:5a:94:27:f6:
6d:b5:c9:c3:1f:11:cf:19:8f:92:75:f7:af:70:5c:
f8:c4:33:14:af:50:21:6c:e1:cd:a0:10:62:3e:89:
48:43:93:c8:e1:33:71:79:07:0b:78:8a:67:1d:c5:
19:36:38:62:0f:26:06:27:bd:f7:1b:ee:70:53:3f:
44:3a:17:23:fc:4b:dc:71:a8:e8:4c:63:0c:64:3b:
7f:4c:dc:b1:c0:fa:1a:09:75:1a:aa:33:82:7b:a9:
2e:3b:73:6c:e5:84:fd:17:c5:49:10:5e:d4:72:09:
f2:da:57:97:55:8b:83:9b:68:26:59:14:b6:db:9c:
91:fa:cf:43:cc:a4:a5:93:d7:4a:1e:43:78:21:a5:
4a:47:f2:5e:cd:f8:f6:0c:80:73:38:74:57:1a:5e:
84:e0:84:f4:17:8d:da:db:71:52:57:0a:4a:47:e2:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:36:EB:DA:1E:60:E9:CE:06:EA:B9:71:6D:F7:DC:B1:A1:18:9C:3A
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139342e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.189.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ce:3e:84:b9:82:dc:b6:45:d7:bf:3f:34:11:2e:94:54:d9:
6d:d5:b9:25:29:6a:42:bd:b2:d7:c5:4e:fb:3f:f0:47:95:88:
11:38:bd:d0:91:24:89:b1:0c:bd:2c:26:d7:49:40:a2:e9:39:
61:d8:71:72:ab:dc:69:52:c5:c5:5a:89:97:4d:ca:9a:9d:5b:
bb:85:af:ce:bb:af:20:5a:91:02:95:93:c3:f4:74:37:b3:0b:
4e:5c:83:0f:8c:c6:a4:31:f9:11:db:9d:c0:8e:4e:f3:83:59:
a4:e1:02:bb:68:23:e8:07:f2:1d:cd:d3:8c:2d:0e:f6:ce:f0:
b5:11:da:09:dd:a4:6c:6f:bf:c8:fd:e6:67:3d:71:9b:61:a9:
fe:98:bc:59:55:e3:0c:37:0b:7a:bf:b9:86:df:60:8b:96:2a:
2f:8a:58:56:66:e4:6f:45:ed:ec:1a:76:9a:8a:2a:73:1f:35:
ad:7f:fa:2b:0b:47:83:46:96:60:e0:da:ec:c4:62:00:69:38:
2c:dc:fe:72:04:ff:06:42:0d:e9:b6:7f:85:e7:8e:da:0a:62:
80:a4:dd:4e:34:9d:c7:a8:27:f1:9a:82:0e:59:00:ee:f0:f8:
af:2d:d0:a4:94:40:47:f7:e4:6e:4e:d8:67:86:1d:9b:2c:3d:
57:ea:a2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org