Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e3130322e39362e302f32302d3230203d3e2035363530.roa
File: 3137322e3130322e39362e302f32302d3230203d3e2035363530.roa (raw, json)
Hash identifier: OQtqxm+5vP9eXepS7COdWIagf5vVry4xU8p+ymlM2t0=
Subject key identifier: AC:A1:7A:5F:58:A4:42:C1:AE:20:7A:B7:C9:39:83:BA:FB:64:C7:4B
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 73C297C09740A679B9207E55B02814BED969C46A
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e3130322e39362e302f32302d3230203d3e2035363530.roa
Signing time: Tue 19 Mar 2024 04:22:11 +0000
ROA not before: Tue 19 Mar 2024 04:17:11 +0000
ROA not after: Tue 18 Mar 2025 04:22:11 +0000
asID: 5650
IP address blocks: 172.102.96.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c2:97:c0:97:40:a6:79:b9:20:7e:55:b0:28:14:be:d9:69:c4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Mar 19 04:17:11 2024 GMT
Not After : Mar 18 04:22:11 2025 GMT
Subject: CN=ACA17A5F58A442C1AE207AB7C93983BAFB64C74B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:1d:0b:43:66:d0:1b:33:42:98:dc:2c:43:
54:84:1a:34:bf:f1:a8:b9:b6:06:0c:92:42:44:02:
36:1d:47:92:c8:1d:64:67:08:53:20:f5:8e:32:77:
f3:dc:45:31:f1:7b:fb:b0:f5:42:42:38:53:e6:87:
ca:bd:a7:c1:76:46:73:58:93:e7:c2:29:47:d6:4c:
e0:e5:d3:81:dd:38:24:08:55:c5:e9:57:30:1f:b2:
f2:92:02:96:cf:e4:c2:c0:92:a4:83:8e:55:b0:0c:
31:2a:26:70:04:59:fb:1f:aa:7f:4e:db:dd:e5:a4:
3a:10:6d:de:41:d6:d8:7d:73:f4:dc:bf:26:8e:19:
77:20:75:da:c3:d5:c7:0f:52:97:72:10:8d:36:6e:
54:1b:28:14:9a:59:73:b6:e1:81:3a:67:b6:02:34:
5c:8d:1c:ef:cc:82:4e:85:23:76:30:bd:43:1e:83:
ee:6a:88:c1:08:9b:fa:3d:cf:eb:07:88:1e:a9:c7:
7e:71:05:97:97:e5:4c:cd:77:67:b7:8c:c3:62:52:
43:d3:f9:77:51:e6:db:2d:dc:79:82:f6:69:df:72:
10:13:1a:50:2b:6e:b3:ae:5e:47:6c:01:53:a0:54:
df:f3:cd:84:67:1b:2c:39:34:94:e4:14:3e:aa:f7:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:7A:5F:58:A4:42:C1:AE:20:7A:B7:C9:39:83:BA:FB:64:C7:4B
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e3130322e39362e302f32302d3230203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.102.96.0/20
Signature Algorithm: sha256WithRSAEncryption
99:eb:20:90:b6:2d:69:fd:0e:f3:b9:bb:26:ee:89:a4:d7:9c:
86:0e:07:ff:cd:c4:76:f4:ab:fd:b3:21:38:51:96:6e:5e:ec:
74:6c:78:ac:c0:70:62:aa:49:88:53:8a:8f:69:79:d6:c5:79:
c3:7e:d2:80:74:ea:5a:a8:f7:4a:a8:66:4f:26:5a:ae:42:84:
09:f5:0c:f9:0f:12:2b:7a:34:ae:35:8b:75:1d:e6:73:95:e7:
38:a6:69:3e:92:ef:0e:6f:6f:6b:41:27:87:df:67:0d:1d:76:
94:4e:08:08:6e:86:5c:6f:d2:68:21:32:05:38:e1:b1:87:e8:
cb:23:49:04:65:f2:e1:48:96:0e:5f:bb:43:61:54:42:65:d1:
a6:a5:e6:5e:77:c0:49:d7:40:79:b5:92:d9:70:aa:d9:cc:48:
5b:9f:f9:db:db:35:f1:91:0e:41:7e:20:b4:89:ac:e4:e9:1c:
a4:f7:c9:15:ef:01:55:e0:83:85:14:73:6c:31:1d:dd:1c:d2:
2d:49:bc:71:e7:ff:c4:d4:98:0a:c6:7e:c5:d6:38:27:69:c8:
d3:dd:36:94:69:2c:cb:f4:9f:a7:92:78:21:86:bf:9d:21:f9:
d1:f1:0d:bf:7e:c6:15:72:e9:72:e9:23:22:88:92:85:60:40:
bb:fe:fd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org