Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3232332e302f32342d3234203d3e2035363530.roa
File: 34372e3138392e3232332e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: H4gV7eGhf6xkQfkamwy08HpvV992cfA5cVeEDFBcQYc=
Subject key identifier: 5A:3A:52:AC:75:5C:DD:E0:86:EB:65:2C:75:29:FD:6D:79:61:36:B6
Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial: 2813E668A6132567EC7477F456E2482E17C0D012
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3232332e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:33:21 +0000
ROA not before: Thu 02 Nov 2023 11:28:21 +0000
ROA not after: Thu 31 Oct 2024 11:33:21 +0000
asID: 5650
IP address blocks: 47.189.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:13:e6:68:a6:13:25:67:ec:74:77:f4:56:e2:48:2e:17:c0:d0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Validity
Not Before: Nov 2 11:28:21 2023 GMT
Not After : Oct 31 11:33:21 2024 GMT
Subject: CN=5A3A52AC755CDDE086EB652C7529FD6D796136B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:95:04:46:30:87:13:79:0e:c3:d2:c8:9b:
42:c5:06:3a:18:17:ce:1b:c0:b9:84:cd:6b:b5:f6:
73:96:24:1d:f3:b9:27:0d:46:98:9c:da:31:6c:bc:
78:21:ea:18:c2:27:24:7d:6f:6e:4a:39:59:a0:8b:
44:0b:b0:db:59:97:82:d9:58:de:8e:a9:1a:5c:34:
e7:8c:c8:92:05:19:67:4a:0c:db:36:46:2a:70:0f:
da:ce:4e:29:d3:63:ec:b2:97:8e:f3:69:77:90:7c:
78:7b:54:8d:cf:27:a8:af:23:2d:1a:8f:42:3d:2a:
f3:bd:ce:b6:fd:84:d6:6e:08:ef:ef:e6:8a:61:9b:
cc:6f:3e:5b:a6:ca:37:d5:61:66:ac:d0:d3:7d:c8:
12:ac:73:63:7e:b9:c8:af:5b:01:7c:e7:43:f4:ed:
13:1e:ca:b5:3c:2b:a0:fb:82:22:25:62:0d:c3:b5:
5a:5f:ca:1c:ac:94:2b:55:e6:3e:78:ee:67:2e:b8:
74:d9:04:07:22:2d:49:df:a6:bf:df:f4:bf:ab:5b:
c7:ea:49:a1:b4:ed:1c:29:6c:bc:73:c8:24:e1:b4:
4e:81:fa:47:0b:cc:a5:9b:64:7c:7f:64:9d:1c:a0:
de:ec:f7:12:e5:83:cf:9e:52:60:f3:f1:be:d3:db:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3A:52:AC:75:5C:DD:E0:86:EB:65:2C:75:29:FD:6D:79:61:36:B6
X509v3 Authority Key Identifier:
keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138392e3232332e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.189.223.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f4:f3:c0:f0:81:15:d0:a8:71:eb:8d:5b:3a:be:89:98:bd:
aa:f2:33:e2:a1:a2:8c:4e:ec:8e:57:2d:a8:81:80:51:97:71:
26:36:ed:b9:5c:4c:ac:ea:e9:d7:47:80:38:2b:5f:9f:1f:ef:
19:82:29:11:de:8f:97:f0:8f:25:79:4c:7d:65:c4:71:f7:d7:
42:13:82:10:86:45:80:7c:1a:31:07:c6:0f:69:c5:ee:1b:3e:
64:a9:fa:1e:ac:5a:b9:c8:86:28:e2:52:4e:77:5f:dd:b3:15:
a4:dd:38:f6:7e:34:ad:5c:6c:ef:97:27:a9:87:6f:c2:31:6b:
1b:c8:8a:0f:da:ed:ac:f4:b4:ee:4d:42:e1:03:80:05:c2:7c:
99:a0:b3:a7:68:f9:91:b6:0d:4a:d2:17:ff:97:0e:f0:18:bf:
5c:d2:76:a9:bf:79:d5:ff:d0:25:18:fd:42:64:31:3f:93:a5:
d9:79:93:62:72:9f:3f:20:91:36:46:74:fd:92:3a:32:b6:af:
bb:2f:31:26:df:57:b4:df:9a:4f:78:5b:a3:f4:62:01:c9:d7:
8a:c0:40:30:96:a1:37:64:f6:13:fb:ec:94:6d:8c:8c:72:c8:
5e:ad:d1:68:cc:57:97:4e:ba:9e:e4:c1:93:19:76:67:db:2b:
3d:67:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org