Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234302e302f32342d3234203d3e2035363530.roa
File: 3137322e39352e3234302e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: ZfVIFVAyvGb9SWRkB10ziDBHzOTtKP0AH3dqNv/YElw=
Subject key identifier: 92:CB:68:86:22:E0:4E:CC:44:4B:D0:4C:24:E0:C6:9C:3B:BA:54:F6
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 0CE817C6E43F61A4A6E82F8B44CC5E7A1BC9B352
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234302e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:38:23 +0000
ROA not before: Thu 02 Nov 2023 11:33:23 +0000
ROA not after: Thu 31 Oct 2024 11:38:23 +0000
asID: 5650
IP address blocks: 172.95.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e8:17:c6:e4:3f:61:a4:a6:e8:2f:8b:44:cc:5e:7a:1b:c9:b3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Nov 2 11:33:23 2023 GMT
Not After : Oct 31 11:38:23 2024 GMT
Subject: CN=92CB688622E04ECC444BD04C24E0C69C3BBA54F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5d:44:d2:d0:13:94:37:6a:3f:c8:34:ea:2f:
79:dd:5a:04:17:52:ee:7c:d1:42:33:b4:22:83:d8:
51:57:17:71:01:46:66:c1:23:21:8e:6c:47:80:c2:
f7:52:b1:4c:28:fb:9f:51:70:c7:2d:be:60:8d:c4:
1f:b0:6c:16:1e:bc:c3:fc:4e:b6:70:cd:68:47:c0:
4c:2d:44:65:7d:95:b4:14:83:8e:10:70:1f:7e:96:
22:98:14:45:a0:35:df:1c:be:5e:44:21:97:b6:25:
66:45:b2:04:35:c9:32:93:18:6f:76:7f:74:6f:f1:
a1:f8:06:aa:5d:6a:a3:8b:11:a3:90:d4:c1:8f:fe:
2e:1f:05:e3:72:8f:96:7a:ea:4d:85:ce:ee:55:38:
fe:8d:f4:c2:4a:2a:a7:d4:68:b7:06:73:8a:86:8c:
86:f3:1f:82:a7:55:aa:18:b7:54:98:fc:cc:80:6b:
51:9b:97:b7:02:70:43:ac:36:5d:fc:c9:15:c5:d2:
e4:49:a3:37:8e:f4:12:bb:74:43:52:c6:93:72:bf:
58:7f:3e:76:14:cd:51:3c:bd:6b:4c:82:a8:dc:37:
5a:2d:de:8d:a0:d1:19:33:c2:ba:98:8a:0d:09:ae:
73:8d:a9:81:a6:d1:98:a9:e4:13:5b:61:86:ee:cd:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CB:68:86:22:E0:4E:CC:44:4B:D0:4C:24:E0:C6:9C:3B:BA:54:F6
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234302e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.95.240.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7e:62:d1:9b:bc:41:dd:05:c2:44:7a:5f:88:cc:ae:2b:12:
24:2e:01:07:e6:a9:6a:0b:ed:c4:43:07:ac:17:4d:69:a8:9e:
c7:2c:4f:c1:19:de:c8:46:42:e3:21:95:29:8c:78:24:3c:c9:
c6:db:7b:90:24:aa:45:5f:03:a6:10:1c:bc:38:dc:f3:48:24:
40:27:f7:2d:32:39:64:16:db:f3:37:4d:e5:45:e9:f9:35:99:
89:e7:a4:43:6d:53:8d:27:ef:43:40:16:65:7e:78:5d:22:70:
1c:04:13:b1:ed:4b:7b:03:d3:3a:8b:e7:88:7d:09:fa:aa:9a:
bd:0f:86:5e:d9:db:1e:1a:26:ef:1d:2e:f5:e5:fa:4a:e7:24:
f4:f4:61:55:3e:bb:01:0c:5c:b0:d9:fe:82:41:ac:20:24:99:
dc:39:1f:1c:68:90:7f:80:28:f2:43:78:07:a8:54:95:a2:be:
ff:75:de:19:4e:55:59:b0:a4:a3:96:fe:a1:5d:68:d8:4a:70:
1d:1e:ad:1d:34:ed:fb:39:eb:14:a9:ca:d2:31:b3:39:36:81:
75:63:61:2a:01:c6:fa:af:bd:78:31:80:5c:7b:ef:63:cb:7a:
75:c2:01:17:e5:1c:39:06:39:6c:62:f1:85:84:7f:86:84:d4:
c4:49:65:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org