Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3137362e302f32302d3230203d3e2035363530.roa
File: 3137322e39352e3137362e302f32302d3230203d3e2035363530.roa (raw, json)
Hash identifier: hTkGBIebGNMcyUcSmqqHmYlcOWRYhc7JSNifphI6JQE=
Subject key identifier: A1:AC:BE:20:1B:C3:E4:8D:E9:46:A3:67:43:99:5C:04:7F:C9:E3:1E
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 55BCFEFDEF0A7B85B474DFC5766DC6A2665B66E0
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3137362e302f32302d3230203d3e2035363530.roa
Signing time: Tue 19 Mar 2024 04:22:00 +0000
ROA not before: Tue 19 Mar 2024 04:17:00 +0000
ROA not after: Tue 18 Mar 2025 04:22:00 +0000
asID: 5650
IP address blocks: 172.95.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:bc:fe:fd:ef:0a:7b:85:b4:74:df:c5:76:6d:c6:a2:66:5b:66:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Mar 19 04:17:00 2024 GMT
Not After : Mar 18 04:22:00 2025 GMT
Subject: CN=A1ACBE201BC3E48DE946A36743995C047FC9E31E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:56:f0:e0:42:26:ce:4f:5d:96:1e:5b:a6:
0a:7d:de:32:54:5e:28:75:72:39:c9:65:5d:07:8d:
c9:fc:5a:a8:62:05:d5:1b:3b:51:74:62:00:4e:10:
f8:7b:25:1f:05:c3:2b:53:cc:9e:d1:8f:6c:46:80:
43:e2:78:ff:e5:1a:02:fd:04:d1:bd:96:27:7a:bb:
a6:a8:7f:b4:ba:9a:87:a4:27:1d:e6:10:31:c1:53:
cf:00:e4:43:af:aa:52:a8:f1:26:87:75:33:b1:35:
3e:4e:28:95:b3:cb:47:a3:a3:bc:9b:3c:78:1a:1c:
af:d8:42:8c:93:5b:90:a6:97:ac:4e:66:b4:57:ed:
13:f7:d3:af:e3:7f:92:50:27:5f:31:96:3f:fc:68:
0e:5a:de:14:3d:ba:92:a1:f4:86:7b:6b:bc:09:53:
ad:b3:3a:5a:30:e9:c7:c1:5e:a6:01:2a:7d:d4:5b:
7c:f4:3c:1a:64:d8:81:46:b5:c0:92:20:57:d1:b3:
66:ea:6b:65:c1:36:5e:bf:55:9c:67:4e:56:dd:75:
c6:0e:54:c9:d2:6e:fb:d0:21:39:b9:99:be:4d:f1:
49:7d:40:ad:f5:29:15:db:85:f2:27:7e:7f:d4:41:
31:17:02:fb:0a:73:a7:64:7f:4f:48:82:4a:90:f4:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AC:BE:20:1B:C3:E4:8D:E9:46:A3:67:43:99:5C:04:7F:C9:E3:1E
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3137362e302f32302d3230203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.95.176.0/20
Signature Algorithm: sha256WithRSAEncryption
68:10:49:d5:c9:81:4c:ff:b5:2b:9b:38:31:df:8e:89:90:4a:
64:b0:17:c6:92:83:6a:4f:6f:b0:4b:8e:63:cf:67:e8:8e:60:
2a:27:df:d8:dd:90:a2:2d:1f:ea:ba:b8:5e:b7:89:6e:90:a6:
13:bc:f2:39:ad:f8:8c:69:da:97:1b:05:77:da:29:73:cf:3a:
e9:1b:35:f6:a7:7a:9a:01:24:f3:2f:16:b3:1b:ef:69:76:5c:
bb:82:d3:06:e8:c7:27:a2:1a:c3:82:79:a4:78:d0:c7:84:69:
7d:39:61:04:00:45:b6:96:30:20:c1:b9:00:90:f8:8b:00:82:
af:ae:ef:9c:f8:33:39:eb:88:bc:89:33:2b:cd:98:67:62:34:
5e:4e:b1:c7:06:fe:0a:2a:b6:8b:e0:2f:49:d7:2a:08:7b:59:
bf:bd:fd:c0:31:b3:92:6e:cd:b1:bb:42:e7:56:64:66:93:5f:
96:f9:6d:2e:e4:5b:a2:d6:b7:7d:25:96:bc:82:f8:bf:18:6a:
10:09:94:d4:f4:2f:53:59:24:06:e5:28:24:fe:1f:d5:2e:cd:
83:77:f0:7e:98:9b:ed:ba:a1:b5:92:77:cc:ec:79:75:17:7c:
b5:48:e0:c3:07:88:e1:33:6e:8e:bc:ad:c0:d1:a4:38:69:82:
8b:2f:53:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org