Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3231352e302f32342d3234203d3e2035363530.roa
File: 34372e3138392e3231352e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: a0rK6rbMIdk2Q/ugnlYhzmZz+6rXmnr7DRjYy3ebOJ8=
Subject key identifier: 1D:9B:92:89:31:E3:74:61:5A:E4:99:35:51:C0:90:5E:5A:9A:68:60
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 1E3BC545850406E8ABECC64AF1457BF05B18E468
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3231352e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:32:00 +0000
ROA not before: Thu 02 Nov 2023 11:27:00 +0000
ROA not after: Thu 31 Oct 2024 11:32:00 +0000
asID: 5650
IP address blocks: 47.189.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:3b:c5:45:85:04:06:e8:ab:ec:c6:4a:f1:45:7b:f0:5b:18:e4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:27:00 2023 GMT
Not After : Oct 31 11:32:00 2024 GMT
Subject: CN=1D9B928931E374615AE4993551C0905E5A9A6860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:e9:45:7f:24:d8:1a:6d:3f:d4:d2:9a:d6:
6d:d0:e9:dc:d8:1f:49:a1:9f:8d:a3:7d:ce:ef:a1:
0f:6a:20:00:51:fa:82:17:e0:65:db:6d:a6:3c:18:
15:a2:39:53:9a:40:d4:b4:1b:e4:2d:74:45:4a:36:
4f:d6:32:12:ca:a8:7e:94:f2:12:a2:64:7f:77:80:
15:1d:ec:08:99:d6:16:ad:6a:02:e3:7c:f9:a3:72:
44:ea:73:b5:54:63:51:bd:1e:52:e1:c3:48:93:00:
38:85:0b:94:37:6f:a0:e6:ba:07:93:18:7d:85:65:
27:34:ee:b8:42:4e:e3:e7:15:1f:a4:39:39:53:62:
a5:3b:b7:18:36:a4:67:c4:0a:e5:fe:5b:92:f4:d4:
60:69:b9:1e:fa:ee:cf:fd:03:da:93:ae:ef:85:73:
ca:03:54:bf:62:ab:d6:ca:ba:bc:26:00:b4:38:26:
00:90:1c:c9:fd:06:ef:37:46:c1:b6:65:12:77:fe:
43:0f:ed:09:03:fa:bd:74:ed:7d:5a:f2:13:2c:ee:
8f:76:d5:70:65:6c:ed:e4:80:49:bb:db:cc:8a:a9:
4e:48:82:3f:a4:c7:03:e1:70:c0:b0:a9:13:2b:45:
c1:af:d2:63:df:df:9e:f0:b9:a1:b6:77:70:36:b9:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9B:92:89:31:E3:74:61:5A:E4:99:35:51:C0:90:5E:5A:9A:68:60
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3231352e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.189.215.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:45:19:54:1f:f6:76:03:4f:5a:1f:a5:b7:4d:6c:36:15:29:
a3:23:4a:74:3a:c1:0f:8a:28:25:29:17:d5:03:5c:ef:fc:e0:
0e:94:c1:7b:d0:fd:bd:c9:93:6c:8b:ff:89:9b:fc:3a:67:d1:
37:47:65:4d:f4:5c:32:09:7c:21:89:57:94:d5:25:cf:32:07:
17:c1:6d:78:a7:9f:ec:a2:de:13:42:e1:1e:b0:53:2f:ea:27:
4c:14:70:b6:0a:4c:90:3c:a8:8e:d7:f5:03:90:fa:c6:82:b8:
f1:f8:41:89:36:06:94:1e:12:81:37:3c:f6:b6:15:45:1e:d9:
0a:40:fe:76:54:ef:ab:92:a0:8f:3f:4a:a4:2b:bd:9b:cb:00:
96:07:b1:05:5e:27:ee:27:b4:a2:ab:b0:27:d2:d9:ce:49:c7:
1d:54:bc:55:1a:66:40:28:8b:19:37:a6:c9:11:b5:a8:fa:24:
89:e5:da:ca:25:29:36:6b:a5:e4:cc:28:10:ff:bd:e6:c7:b6:
d1:8d:b4:2f:63:fe:43:9f:e5:b4:8f:3f:1a:4c:0f:94:b4:e4:
f7:b4:f9:83:03:ab:2d:0b:78:de:4d:db:b8:3a:b1:7c:74:60:
ca:c4:c4:9a:81:a2:5d:04:1b:98:9e:0a:da:0c:b9:e6:61:e8:
06:fb:15:0f
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUHjvFRYUEBuir7MZK8UV78FsY5GgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjMxMTAyMTEyNzAwWhcNMjQxMDMxMTEzMjAw
WjAzMTEwLwYDVQQDEygxRDlCOTI4OTMxRTM3NDYxNUFFNDk5MzU1MUMwOTA1RTVB
OUE2ODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yvpRX8k2Bpt
P9TSmtZt0Onc2B9JoZ+No33O76EPaiAAUfqCF+Bl222mPBgVojlTmkDUtBvkLXRF
SjZP1jISyqh+lPISomR/d4AVHewImdYWrWoC43z5o3JE6nO1VGNRvR5S4cNIkwA4
hQuUN2+g5roHkxh9hWUnNO64Qk7j5xUfpDk5U2KlO7cYNqRnxArl/luS9NRgabke
+u7P/QPak67vhXPKA1S/YqvWyrq8JgC0OCYAkBzJ/QbvN0bBtmUSd/5DD+0JA/q9
dO19WvITLO6PdtVwZWzt5IBJu9vMiqlOSII/pMcD4XDAsKkTK0XBr9Jj39+e8Lmh
tndwNrnfOwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFB2bkokx43RhWuSZNVHAkF5a
mmhgMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzM0MzcyZTMxMzgzOTJlMzIzMTM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAvvdcwDQYJKoZIhvcNAQELBQAD
ggEBACpFGVQf9nYDT1ofpbdNbDYVKaMjSnQ6wQ+KKCUpF9UDXO/84A6UwXvQ/b3J
k2yL/4mb/Dpn0TdHZU30XDIJfCGJV5TVJc8yBxfBbXinn+yi3hNC4R6wUy/qJ0wU
cLYKTJA8qI7X9QOQ+saCuPH4QYk2BpQeEoE3PPa2FUUe2QpA/nZU76uSoI8/SqQr
vZvLAJYHsQVeJ+4ntKKrsCfS2c5Jxx1UvFUaZkAoixk3pskRtaj6JInl2solKTZr
peTMKBD/vebHttGNtC9j/kOf5bSPPxpMD5S05Pe0+YMDqy0LeN5N27g6sXx0YMrE
xJqBol0EG5ieCtoMueZh6Ab7FQ8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org