Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139362e302f32342d3234203d3e2035363530.roa
File: 34372e3138392e3139362e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: kzJ9phEiaDamdGXdoyYE1UKvqhdJ5/ug+hGON3FLgJQ=
Subject key identifier: 80:1C:07:6C:FC:D2:9E:32:E0:17:58:1F:8B:81:29:A8:4E:E2:DC:40
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 505D410D7FA2EDE74C26BE64D84D8BB889E2F3E0
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139362e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:29:31 +0000
ROA not before: Thu 02 Nov 2023 11:24:31 +0000
ROA not after: Thu 31 Oct 2024 11:29:31 +0000
asID: 5650
IP address blocks: 47.189.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:5d:41:0d:7f:a2:ed:e7:4c:26:be:64:d8:4d:8b:b8:89:e2:f3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:24:31 2023 GMT
Not After : Oct 31 11:29:31 2024 GMT
Subject: CN=801C076CFCD29E32E017581F8B8129A84EE2DC40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:97:1e:2e:70:3c:ec:19:52:5a:59:2f:8b:
77:2b:41:72:77:2a:67:21:ca:c1:ce:c5:5e:57:c1:
4a:4f:fa:0d:74:6f:67:4a:f4:7d:dd:d2:95:dc:3d:
00:73:0d:1d:96:a7:4b:e2:ac:56:3b:e5:e3:38:71:
1b:72:47:c7:5d:ff:08:c1:42:64:82:d7:25:1a:d6:
0f:a2:f2:a3:f6:1e:08:1e:56:44:34:ab:2a:1d:d4:
59:cd:1b:19:b3:b8:25:e5:7a:0c:94:20:d0:00:ac:
5a:b4:ac:58:2d:1f:7a:48:58:25:5a:4b:b8:34:77:
3b:7a:8a:76:0d:b1:7c:be:0e:9a:1f:34:fd:6e:83:
45:ab:04:ac:79:ab:3d:6e:78:cb:1a:2a:8a:5e:a7:
83:9f:6b:6c:70:fb:6c:4e:ef:15:06:2a:46:9f:f9:
59:50:00:04:fd:47:4a:03:c9:c0:ec:c4:60:67:87:
bd:d8:50:38:24:01:14:89:05:28:b9:29:fa:8c:3d:
77:4a:9d:73:18:61:8d:52:44:cf:21:28:70:a1:bd:
d4:c8:c2:2b:f3:36:52:4c:1e:3d:36:17:d9:ab:e8:
ef:31:53:18:d9:51:8b:50:ee:6f:5a:ab:44:77:9d:
28:6e:c3:b6:ae:df:96:15:9b:9a:01:e9:51:ae:89:
8c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1C:07:6C:FC:D2:9E:32:E0:17:58:1F:8B:81:29:A8:4E:E2:DC:40
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3139362e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.189.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:7e:05:f9:7a:cd:8a:69:f4:65:0e:55:8c:92:d5:6a:03:da:
32:8a:07:82:a5:1d:4e:65:21:47:77:d0:04:91:7f:e9:c6:2e:
42:85:32:e2:d7:b3:68:8c:45:44:09:49:2c:65:59:dc:a9:6f:
bf:53:f9:9c:15:71:fc:32:e8:5e:f2:6c:05:e3:17:d1:c6:02:
54:89:df:74:43:19:ec:5b:75:15:09:8e:a2:e1:e8:00:29:46:
5b:dd:7c:59:c5:af:73:da:63:72:00:f5:35:05:71:38:55:8f:
3a:f4:e8:79:b3:68:a7:3d:6a:a0:b4:ce:85:ce:33:36:7f:5e:
a9:e6:55:25:48:94:72:60:f4:17:ee:9b:7c:69:74:c0:ab:fb:
0a:8d:d1:ac:49:bc:f6:7f:59:6a:70:57:28:33:03:53:e0:4c:
21:ac:59:18:4f:c9:a5:b7:42:0f:90:4b:8d:76:e1:8f:f9:c6:
69:1f:31:ac:1f:82:37:f6:ca:35:05:55:78:86:00:2d:f8:d8:
2a:6c:65:77:72:35:5b:8c:41:53:de:3a:d4:9e:b7:ea:f6:6c:
5d:1d:15:90:ef:e9:61:d6:43:c9:b7:18:56:67:c4:6d:61:08:
80:bd:46:25:cd:09:81:89:cd:2c:dd:1b:19:16:cc:ac:d7:49:
44:5b:c7:13
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUUF1BDX+i7edMJr5k2E2LuIni8+AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjMxMTAyMTEyNDMxWhcNMjQxMDMxMTEyOTMx
WjAzMTEwLwYDVQQDEyg4MDFDMDc2Q0ZDRDI5RTMyRTAxNzU4MUY4QjgxMjlBODRF
RTJEQzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oeXHi5wPOwZ
UlpZL4t3K0FydypnIcrBzsVeV8FKT/oNdG9nSvR93dKV3D0Acw0dlqdL4qxWO+Xj
OHEbckfHXf8IwUJkgtclGtYPovKj9h4IHlZENKsqHdRZzRsZs7gl5XoMlCDQAKxa
tKxYLR96SFglWku4NHc7eop2DbF8vg6aHzT9boNFqwSseas9bnjLGiqKXqeDn2ts
cPtsTu8VBipGn/lZUAAE/UdKA8nA7MRgZ4e92FA4JAEUiQUouSn6jD13Sp1zGGGN
UkTPIShwob3UyMIr8zZSTB49NhfZq+jvMVMY2VGLUO5vWqtEd50obsO2rt+WFZua
AelRromMBwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIAcB2z80p4y4BdYH4uBKahO
4txAMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzM0MzcyZTMxMzgzOTJlMzEzOTM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAvvcQwDQYJKoZIhvcNAQELBQAD
ggEBAKN+Bfl6zYpp9GUOVYyS1WoD2jKKB4KlHU5lIUd30ASRf+nGLkKFMuLXs2iM
RUQJSSxlWdypb79T+ZwVcfwy6F7ybAXjF9HGAlSJ33RDGexbdRUJjqLh6AApRlvd
fFnFr3PaY3IA9TUFcThVjzr06HmzaKc9aqC0zoXOMzZ/XqnmVSVIlHJg9Bfum3xp
dMCr+wqN0axJvPZ/WWpwVygzA1PgTCGsWRhPyaW3Qg+QS4124Y/5xmkfMawfgjf2
yjUFVXiGAC342CpsZXdyNVuMQVPeOtSet+r2bF0dFZDv6WHWQ8m3GFZnxG1hCIC9
RiXNCYGJzSzdGxkWzKzXSURbxxM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org