Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3232312e302f32342d3234203d3e2035363530.roa
File: 34372e3138392e3232312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: +P1wTOIUBKsOQ5dVxWea4tl0QhOgdqoNvCwrCyKZoiw=
Subject key identifier: 0D:F1:F0:BC:FC:68:AE:7B:89:CC:FF:47:28:3F:BE:A7:F1:D2:04:04
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 49696C93142F59A1E609E477012C0A54BEDDC0E9
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3232312e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:33:02 +0000
ROA not before: Thu 02 Nov 2023 11:28:02 +0000
ROA not after: Thu 31 Oct 2024 11:33:02 +0000
asID: 5650
IP address blocks: 47.189.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:69:6c:93:14:2f:59:a1:e6:09:e4:77:01:2c:0a:54:be:dd:c0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:28:02 2023 GMT
Not After : Oct 31 11:33:02 2024 GMT
Subject: CN=0DF1F0BCFC68AE7B89CCFF47283FBEA7F1D20404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:65:78:04:77:39:bf:c2:c3:5d:af:63:59:
c3:b3:f2:4d:b5:08:70:b1:a4:6f:46:95:99:33:58:
ea:f0:03:b0:c2:fb:c2:7c:4c:da:5c:d8:a8:61:c8:
ab:1b:fd:de:dc:d4:67:77:a4:12:a5:be:a5:ba:14:
73:23:a1:37:af:b4:04:c8:5c:8e:17:0b:c4:a6:63:
0d:9d:f3:22:14:51:d6:54:3c:54:d1:9d:23:6d:97:
89:20:d8:f2:81:45:a0:28:f0:f1:21:4a:32:be:48:
ef:5d:f1:dc:6f:79:4a:95:2a:04:b6:53:7c:9f:3e:
58:cd:3f:08:24:3b:43:f4:6a:65:b1:12:28:39:7b:
90:54:86:11:9d:37:16:1d:44:c5:30:db:30:9d:0d:
2f:02:ee:8a:db:62:4a:fe:4d:d5:e5:38:01:61:90:
c8:06:6f:8d:89:7e:aa:dd:3b:8c:3f:e8:a2:cc:35:
ad:38:da:51:ea:bd:2c:9f:43:db:a3:b1:e4:61:b5:
e7:ab:d8:b4:2b:d9:84:99:37:e4:60:05:db:07:6d:
e5:0b:79:be:de:6e:bf:9d:5f:e1:9d:74:39:d0:46:
af:87:27:f4:83:1b:c6:6e:3a:20:5f:24:5a:eb:15:
ec:6f:f7:f1:1b:ae:e2:97:d1:b2:fa:d5:96:5c:85:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F1:F0:BC:FC:68:AE:7B:89:CC:FF:47:28:3F:BE:A7:F1:D2:04:04
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3232312e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.189.221.0/24
Signature Algorithm: sha256WithRSAEncryption
66:79:4e:90:77:2a:a4:46:a0:6b:30:9d:c7:75:ab:0a:82:69:
67:b9:8c:eb:22:00:92:19:0d:61:f3:8f:fd:92:21:82:0b:9b:
e5:1a:0c:63:04:90:05:b3:ed:56:a6:69:ef:65:04:c0:f8:6b:
e6:e4:95:ad:3a:ae:c9:fd:ab:5e:07:32:0e:60:7a:b7:30:f2:
00:8f:bf:97:2f:70:17:55:a9:19:ec:cc:e1:83:bb:c4:d1:26:
f4:7c:73:f9:ea:9b:1a:c9:c5:b9:23:4b:4c:a5:fd:0f:0b:6c:
5c:af:7f:dc:38:d1:12:74:36:0c:98:af:1e:a5:53:4b:fa:15:
51:a3:66:28:e7:f4:e5:8a:4f:e2:90:31:00:4b:8d:02:15:70:
0d:b3:7b:90:85:1c:70:8d:e3:29:a0:d4:97:c6:2e:15:60:10:
11:62:12:8c:cd:8c:21:2e:ee:e1:cb:d0:74:ea:4e:a4:7a:75:
85:73:1b:3f:a3:47:8d:5d:5e:da:45:ec:06:30:ae:07:1d:52:
4d:6d:7c:f1:56:c8:09:c8:88:00:3e:85:d5:26:09:7b:eb:e8:
d4:ac:76:56:18:fa:77:e9:cb:30:1a:1d:85:12:8e:b8:f8:f4:
1c:07:94:c2:83:23:52:23:6b:c8:f3:09:02:30:90:ec:97:36:
9f:00:83:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org