Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3230372e302f32342d3234203d3e2035363530.roa
File: 34372e3138392e3230372e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: OZE0t0g6VvZi0BdaNglM84utYUliBTgt4Ztsh8zwjkc=
Subject key identifier: FA:0F:EF:03:E6:5E:A5:FF:B2:25:C9:74:BE:58:32:9A:2B:7D:57:1D
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 3EB079963B48A700F673472D5693F194B8BA9D22
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3230372e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:31:39 +0000
ROA not before: Thu 02 Nov 2023 11:26:39 +0000
ROA not after: Thu 31 Oct 2024 11:31:39 +0000
asID: 5650
IP address blocks: 47.189.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:b0:79:96:3b:48:a7:00:f6:73:47:2d:56:93:f1:94:b8:ba:9d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:26:39 2023 GMT
Not After : Oct 31 11:31:39 2024 GMT
Subject: CN=FA0FEF03E65EA5FFB225C974BE58329A2B7D571D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:96:46:ef:10:71:07:3d:53:19:e8:fd:66:
10:6e:e9:ec:12:36:76:e2:a3:bb:34:ab:44:46:e4:
1c:77:76:af:22:0d:ea:05:37:57:45:b7:81:94:68:
f6:a3:fc:0e:7c:c5:1a:d6:de:7d:91:96:36:a6:86:
71:a1:cc:9c:32:de:ba:3f:aa:02:eb:2d:0a:ef:65:
34:01:3e:5b:f0:f3:69:54:89:5c:ab:bd:7c:b1:5f:
42:3a:ac:6c:2e:6f:b2:c3:fa:82:ff:78:3f:2d:98:
9b:7b:ff:ad:90:90:c4:d5:0b:13:71:ce:1a:bc:3a:
81:ac:d9:54:24:a0:15:53:49:fd:02:fb:a3:41:49:
22:47:3b:fd:b4:cc:06:2f:1a:39:32:d7:6e:d0:47:
0e:f6:75:fe:f3:dd:e1:22:0f:ae:fd:c5:09:5b:34:
b2:29:8f:9e:e5:59:3c:1e:d9:ef:11:27:d3:f3:76:
64:95:85:8c:da:81:3e:13:3d:01:51:cd:ba:19:71:
7f:be:bc:d5:f1:26:75:65:e6:63:09:23:46:75:df:
b7:1c:aa:8c:4e:0f:48:7d:bb:c4:89:f9:21:9a:02:
6c:21:1c:54:6f:6f:fa:51:e8:1c:e3:56:b7:e0:a8:
8b:8d:22:c5:37:d9:09:0f:65:9d:8d:68:74:96:81:
56:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:EF:03:E6:5E:A5:FF:B2:25:C9:74:BE:58:32:9A:2B:7D:57:1D
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3230372e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.189.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4c:8a:c0:6b:7c:9a:1d:7d:e1:e3:e7:f2:57:69:2f:6e:9c:
27:2e:d7:83:25:a3:cb:f3:35:e4:ef:30:99:7c:ca:31:22:d9:
25:e1:fa:25:cd:4f:c1:81:7d:79:b9:e0:e5:ff:3f:58:54:b9:
60:1e:35:84:80:56:6c:61:40:c3:f3:78:8d:67:31:f2:c9:23:
69:51:8a:e3:81:fb:a1:91:4c:c5:79:4b:aa:3b:b3:ec:6e:d3:
0b:10:20:27:29:42:50:51:9e:af:c4:6a:a6:f5:68:7c:90:fd:
3d:79:a0:03:b0:5a:73:9e:26:e2:3e:f8:cf:6d:ab:11:4b:0c:
e3:6a:b6:2b:ef:fc:32:0f:68:66:62:73:33:75:d5:73:41:24:
ea:8e:56:db:31:69:44:1c:bb:44:a1:7c:33:d1:9d:fe:10:4b:
2c:75:a6:bd:b2:7f:ca:d1:49:53:b2:fe:82:e1:b9:d8:74:4b:
4e:3a:67:81:32:4d:c8:da:02:ad:4a:08:81:75:0d:95:16:7c:
7e:d3:90:81:e0:6c:ad:03:98:39:ca:73:dc:f0:d7:91:fd:34:
71:62:03:50:54:48:c5:32:93:2f:57:79:2f:00:bf:3d:21:39:
83:9f:71:5b:cf:d8:3c:f8:c5:5c:51:39:0a:ab:30:d7:64:35:
16:ed:02:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org