Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3136302e302f32302d3230203d3e2035363530.roa
File: 3137322e39352e3136302e302f32302d3230203d3e2035363530.roa (raw, json)
Hash identifier: 5djHPKRgTvqKD8rz04rzCyZNv0lqLKYfY0BSqCnE+DQ=
Subject key identifier: 14:AF:77:63:97:C3:9F:4B:9A:B2:5C:02:5D:B0:D4:41:E0:21:BF:F4
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 5F24E3D5B9961EC01D12AEFB050E740ABFAC5CE4
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3136302e302f32302d3230203d3e2035363530.roa
Signing time: Tue 19 Mar 2024 04:21:50 +0000
ROA not before: Tue 19 Mar 2024 04:16:50 +0000
ROA not after: Tue 18 Mar 2025 04:21:50 +0000
asID: 5650
IP address blocks: 172.95.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:24:e3:d5:b9:96:1e:c0:1d:12:ae:fb:05:0e:74:0a:bf:ac:5c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Mar 19 04:16:50 2024 GMT
Not After : Mar 18 04:21:50 2025 GMT
Subject: CN=14AF776397C39F4B9AB25C025DB0D441E021BFF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:08:a3:8d:33:c4:55:0a:68:88:29:16:fc:
02:8e:5d:46:95:aa:25:b3:64:5a:2b:70:f5:62:f8:
ef:db:ca:c9:cf:a7:a7:f8:02:e1:d6:28:30:3f:7a:
e3:22:94:48:ec:40:75:16:d6:fa:07:5e:f9:cb:cc:
50:12:76:c7:19:05:b6:cb:21:4e:fd:e8:e4:ad:51:
d0:e9:75:7e:51:54:ad:e2:62:b9:3c:2c:ce:a9:73:
0a:dc:ad:ce:32:f3:c4:78:00:d1:1f:04:f5:a7:e8:
fb:a7:b5:14:22:bc:7b:8f:36:e0:e5:b5:48:f5:b8:
23:4a:11:4d:60:86:20:84:c5:0b:09:ff:75:2a:7a:
95:29:64:b9:00:50:50:5d:9c:de:8d:f0:cd:c5:63:
45:02:77:9c:2a:e1:bc:95:54:5f:27:f8:f5:e7:bb:
ad:30:c2:2e:11:36:fd:99:64:db:3c:8a:ed:70:4f:
b2:e6:99:e8:bd:1c:ff:38:ea:6e:04:44:f2:bc:85:
13:e3:f5:68:3e:42:d5:2b:52:a4:fb:9e:0f:10:d4:
24:54:72:99:99:04:46:d6:c0:e6:c7:38:c7:9e:0e:
90:07:ad:0e:b3:f0:cf:8e:ab:e4:64:06:9a:8b:6f:
14:85:c8:5e:f4:78:82:57:4d:3f:7b:3a:92:69:5c:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AF:77:63:97:C3:9F:4B:9A:B2:5C:02:5D:B0:D4:41:E0:21:BF:F4
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3136302e302f32302d3230203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.95.160.0/20
Signature Algorithm: sha256WithRSAEncryption
03:c3:4c:b4:6e:a3:25:63:bd:32:14:a2:4f:be:71:ca:f0:ae:
2b:58:f8:72:01:c3:cf:6a:bc:ef:a3:3e:7c:75:6b:32:8b:7d:
8b:dd:1e:b0:49:e3:bd:e9:07:7b:a2:af:bf:88:b1:07:23:17:
95:35:0c:8b:59:fc:e3:d4:98:ae:5d:07:10:91:3f:3b:e7:4b:
d0:9e:db:f7:0b:bd:9f:c4:1c:bb:ad:23:25:b1:d1:57:08:33:
55:4c:a6:95:0a:ea:8b:1a:e9:71:01:b9:6d:a7:a5:96:89:2d:
a6:e0:48:9c:f7:60:65:79:97:0b:20:84:91:b9:57:66:c4:d4:
ba:2c:16:e5:e0:22:51:6c:b2:a2:d9:43:65:3a:a7:88:e9:b2:
76:85:7f:ba:2c:fc:7b:71:b9:69:45:91:83:41:97:3c:d8:cb:
f6:af:24:76:63:da:1b:68:6a:bb:a1:a7:f3:79:e5:36:19:00:
e3:58:6f:e9:76:a5:f8:19:00:31:94:61:31:86:c1:68:62:f1:
14:5c:fb:f2:b8:f2:60:aa:61:7c:17:a7:35:df:d2:41:2e:68:
dc:d2:85:12:61:90:f2:57:47:03:a5:7a:77:89:a7:30:58:ad:
c3:9b:a9:b6:5f:19:cc:41:88:6a:91:00:91:b1:f6:91:01:1a:
32:00:b4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org