Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232362e302f32342d3234203d3e2035363530.roa
File: 3137322e39352e3232362e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: I6Kd2ufzXaV4MLqaaNcgsgaQTmbmpyaix3UXjlyDaxQ=
Subject key identifier: 47:FA:96:A5:9A:60:3F:83:99:53:A9:8A:F6:59:EA:5A:82:DD:9E:5B
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 199C546115347B98306A6992DF26EC974AE4DD21
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232362e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:37:36 +0000
ROA not before: Thu 02 Nov 2023 11:32:36 +0000
ROA not after: Thu 31 Oct 2024 11:37:36 +0000
asID: 5650
IP address blocks: 172.95.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9c:54:61:15:34:7b:98:30:6a:69:92:df:26:ec:97:4a:e4:dd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Nov 2 11:32:36 2023 GMT
Not After : Oct 31 11:37:36 2024 GMT
Subject: CN=47FA96A59A603F839953A98AF659EA5A82DD9E5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:e4:51:c6:ef:71:aa:ff:98:ca:29:f9:48:
a4:e9:46:ec:e0:7c:2d:96:84:3e:22:2f:98:b1:23:
eb:e6:3f:35:4b:a0:89:6b:e3:a7:9e:fe:e6:b2:74:
ed:f2:d5:7d:88:dc:f7:43:43:be:19:7b:47:b5:dc:
83:ef:e4:1c:ee:da:bb:ff:7d:ce:89:7b:8d:82:4a:
7b:f3:38:57:0c:8a:31:02:3d:c3:89:b4:47:d3:78:
f3:c0:e3:d2:ae:1e:86:4a:72:a0:dc:64:9a:fb:10:
16:a0:5e:64:1e:cc:4c:9c:e8:27:a3:3e:50:f2:c9:
78:36:f4:0e:88:a7:fd:ee:1d:5f:60:c4:50:f6:51:
8b:df:d9:6b:93:14:2b:cd:f0:c8:63:f3:12:15:6e:
53:a9:5f:e3:89:09:02:6c:0e:57:2b:c5:55:1b:c1:
5d:51:ac:93:42:c7:0b:b3:11:02:16:4a:93:25:de:
94:e5:42:2a:8c:0a:1b:e2:ce:d6:50:61:b4:55:f3:
6e:be:98:5f:ac:61:f6:22:7c:b0:27:05:88:2a:e3:
fd:8d:e1:d4:e7:72:aa:af:d3:6f:7e:22:83:3b:b0:
e7:5c:ab:b4:af:cd:d3:0a:c2:2c:55:84:a9:c4:06:
d7:c9:cf:50:0e:79:3a:19:5b:f7:d8:3a:c8:5a:ea:
f2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:96:A5:9A:60:3F:83:99:53:A9:8A:F6:59:EA:5A:82:DD:9E:5B
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232362e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.95.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:79:41:6d:82:85:1e:e8:52:aa:a4:b1:cd:a8:35:a2:a6:a1:
0c:55:5d:e4:1b:79:f9:5c:4c:ad:ef:f5:73:00:8d:d7:f6:fd:
3b:f5:6e:aa:4e:b9:e1:c3:5c:a3:f2:15:a3:3e:f3:80:cf:37:
d1:30:e2:1d:f6:8d:85:5a:dd:06:20:52:32:3e:50:5c:09:35:
80:45:e2:76:f9:19:4f:ca:46:1c:f3:c1:b4:40:86:3a:10:04:
5b:45:47:30:55:a3:9d:00:1d:57:a8:27:8d:fa:b9:73:ce:74:
e1:69:1a:27:45:59:19:9e:71:7a:f3:d5:df:de:9d:09:72:5c:
e5:ad:49:05:54:d7:4b:fb:21:3d:b1:ff:27:e5:07:ee:c4:78:
e0:7f:ef:63:17:60:2d:8c:fc:7b:6e:ad:be:c3:17:84:b9:92:
25:33:4b:e2:a1:e5:c0:e4:a8:72:9e:b0:4a:70:69:96:7a:6b:
b6:2f:07:9e:62:00:5d:cb:78:29:d0:80:57:ed:12:92:3a:7f:
4e:58:07:b3:3a:5b:de:1d:dc:6e:26:02:2f:f3:bb:85:8d:e9:
63:fd:2b:ca:9f:15:a2:90:4b:8d:4c:45:50:9a:dc:89:cf:be:
26:f5:52:18:8c:f5:7a:b7:84:e9:1c:3a:4c:6e:49:0d:d6:2b:
e3:2c:10:2d
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUGZxUYRU0e5gwammS3ybsl0rk3SEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjMxMTAyMTEzMjM2WhcNMjQxMDMxMTEzNzM2
WjAzMTEwLwYDVQQDEyg0N0ZBOTZBNTlBNjAzRjgzOTk1M0E5OEFGNjU5RUE1QTgy
REQ5RTVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2srkUcbvcar/
mMop+Uik6Ubs4HwtloQ+Ii+YsSPr5j81S6CJa+Onnv7msnTt8tV9iNz3Q0O+GXtH
tdyD7+Qc7tq7/33OiXuNgkp78zhXDIoxAj3DibRH03jzwOPSrh6GSnKg3GSa+xAW
oF5kHsxMnOgnoz5Q8sl4NvQOiKf97h1fYMRQ9lGL39lrkxQrzfDIY/MSFW5TqV/j
iQkCbA5XK8VVG8FdUayTQscLsxECFkqTJd6U5UIqjAob4s7WUGG0VfNuvphfrGH2
InywJwWIKuP9jeHU53Kqr9NvfiKDO7DnXKu0r83TCsIsVYSpxAbXyc9QDnk6GVv3
2DrIWuryEQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFEf6lqWaYD+DmVOpivZZ6lqC
3Z5bMB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8zLzMxMzczMjJlMzkzNTJlMzIzMjM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACsX+IwDQYJKoZIhvcNAQELBQAD
ggEBAC95QW2ChR7oUqqksc2oNaKmoQxVXeQbeflcTK3v9XMAjdf2/Tv1bqpOueHD
XKPyFaM+84DPN9Ew4h32jYVa3QYgUjI+UFwJNYBF4nb5GU/KRhzzwbRAhjoQBFtF
RzBVo50AHVeoJ436uXPOdOFpGidFWRmecXrz1d/enQlyXOWtSQVU10v7IT2x/yfl
B+7EeOB/72MXYC2M/Hturb7DF4S5kiUzS+Kh5cDkqHKesEpwaZZ6a7YvB55iAF3L
eCnQgFftEpI6f05YB7M6W94d3G4mAi/zu4WN6WP9K8qfFaKQS41MRVCa3InPvib1
UhiM9Xq3hOkcOkxuSQ3WK+MsEC0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:36 2024 by rpki-client on console-ams.rpki-client.org