Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232372e302f32342d3234203d3e2035363530.roa
File: 3137322e39352e3232372e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: vl4uujr8C3Wne2sDCLkwXE2H2V9APh3q+PxUvsybzCw=
Subject key identifier: 12:68:45:63:6A:4F:5E:1E:78:26:8D:0E:2F:B9:01:E3:F2:0B:A8:5F
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 3CF1B2E29A895937B84059A2FA3C2D7D5302AC94
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232372e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:37:48 +0000
ROA not before: Thu 02 Nov 2023 11:32:48 +0000
ROA not after: Thu 31 Oct 2024 11:37:48 +0000
asID: 5650
IP address blocks: 172.95.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:f1:b2:e2:9a:89:59:37:b8:40:59:a2:fa:3c:2d:7d:53:02:ac:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Nov 2 11:32:48 2023 GMT
Not After : Oct 31 11:37:48 2024 GMT
Subject: CN=126845636A4F5E1E78268D0E2FB901E3F20BA85F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d9:b5:10:43:d6:f0:ac:3e:a0:f6:e3:78:67:
18:06:7a:db:bf:55:c8:3a:ee:4f:a5:9b:78:1e:a3:
16:6f:fa:3b:84:aa:5c:08:8a:76:a4:70:82:5e:68:
f5:a4:b8:ac:42:d9:da:8b:fe:45:02:fd:cf:1f:b8:
3b:2b:97:9a:b1:ab:d0:85:0d:d8:d9:53:ef:c1:17:
06:56:11:21:e5:5a:27:c7:07:cd:94:43:d8:31:0c:
b4:d4:51:4a:72:2c:b9:94:42:2f:6e:f4:36:8f:7f:
a8:e5:54:fe:20:46:6a:1f:18:5c:41:d0:ea:2a:c3:
33:5b:d9:cc:49:a3:7e:56:54:1e:32:f1:70:32:17:
08:00:b1:2a:6d:60:7d:2e:e9:9f:c7:a2:69:cf:89:
e6:f6:3b:6f:b8:43:f5:60:bb:ac:e6:80:fb:75:a5:
05:88:d1:e7:e4:50:28:a2:23:c6:34:cf:dd:5f:c0:
b9:27:0d:6c:07:16:13:4e:04:8c:55:70:a3:97:66:
51:e2:a7:30:bc:cc:b6:cd:e2:06:34:71:45:1e:e1:
e1:7a:37:ac:b8:8b:d1:66:6a:ac:0a:1c:98:db:f8:
1b:10:03:58:8f:38:86:d2:a3:7b:02:0c:a4:1d:ff:
fa:5e:2b:57:29:df:84:a7:9c:d2:83:de:36:05:d3:
36:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:68:45:63:6A:4F:5E:1E:78:26:8D:0E:2F:B9:01:E3:F2:0B:A8:5F
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232372e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.95.227.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f7:b8:f9:ad:41:c4:4d:7a:9b:ed:6d:73:05:0d:a7:f9:ff:
74:77:98:31:6d:07:e8:b4:53:f6:d8:3a:10:71:92:34:b0:07:
53:df:5d:10:26:98:e7:03:bb:90:4f:1a:f1:27:5e:04:c9:b7:
1f:c9:b9:7d:c9:0c:36:1f:9e:c9:8c:ad:39:ad:c8:b0:e1:69:
63:19:20:3c:1b:be:0a:ec:99:02:99:a0:f8:82:93:42:29:37:
72:aa:7b:b0:25:bc:b9:76:f9:aa:3a:e5:fa:12:54:b1:6c:ed:
b7:a2:04:f9:fb:9a:15:54:bf:54:dd:b7:73:c9:19:e4:81:25:
91:e0:e6:ed:b9:d3:7a:c2:d4:61:90:5a:bd:ce:a4:16:bc:e8:
ee:b8:36:c2:6d:57:c3:09:08:26:6b:e2:66:36:3f:3b:a8:73:
51:ad:86:7e:25:ec:2e:54:fb:ab:ef:0f:1e:73:a0:08:8c:4c:
bd:01:fd:27:6e:73:03:c7:70:f7:42:ad:5a:13:07:13:e9:b1:
10:d9:ad:d7:d1:a8:22:df:e5:1f:d4:72:49:39:b4:0c:4c:80:
50:56:af:97:4d:fd:2c:d5:7a:c0:4f:5e:c1:6a:d3:c4:c1:d3:
10:48:f4:12:e2:0f:43:72:c4:73:07:ac:bd:31:7d:78:df:3d:
e9:5e:41:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org