Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133372e3230382e302f32312d3231203d3e2035363530.roa
File: 34372e3133372e3230382e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier: +CPpfKTAa+MWtEgrd2ag8Hb3i1Px/5J6WzqIAwPicEU=
Subject key identifier: 84:96:5A:45:AB:07:25:F1:2F:C5:AE:42:72:1C:21:E2:7A:82:EA:3F
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 4B8D8C1D64CB860CDF57FC11C5BA6ED2ECCAF0AB
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133372e3230382e302f32312d3231203d3e2035363530.roa
Signing time: Tue 05 Mar 2024 05:59:20 +0000
ROA not before: Tue 05 Mar 2024 05:54:20 +0000
ROA not after: Tue 04 Mar 2025 05:59:20 +0000
asID: 5650
IP address blocks: 47.137.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:8d:8c:1d:64:cb:86:0c:df:57:fc:11:c5:ba:6e:d2:ec:ca:f0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Mar 5 05:54:20 2024 GMT
Not After : Mar 4 05:59:20 2025 GMT
Subject: CN=84965A45AB0725F12FC5AE42721C21E27A82EA3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:0d:87:04:c1:aa:62:a3:03:2a:4e:dd:42:
0b:0c:fc:f5:03:08:44:94:c4:95:6c:96:1f:85:86:
0c:70:6c:a9:8b:0f:32:61:5e:76:80:e6:f9:18:2d:
39:79:c4:6f:9c:2c:72:c7:86:c9:d8:f0:11:03:30:
7a:31:49:76:c3:d5:a1:74:63:1d:b2:23:72:58:7a:
1e:ea:0f:ab:fc:e5:d1:d6:1b:69:1b:79:e3:b0:14:
1b:22:e4:04:b6:0d:6f:f5:87:d6:79:ca:48:19:af:
47:8a:82:03:7f:af:bb:99:6a:00:4a:eb:13:6a:50:
3a:19:67:66:74:c0:15:52:4b:aa:4e:35:74:ed:6a:
9a:1f:fa:19:b4:54:9d:09:9c:da:07:56:bd:3a:d0:
fd:f1:74:26:44:bd:ae:71:5f:f4:63:36:ef:fd:28:
05:9a:d7:43:ed:3e:ea:25:ff:4d:f2:f6:81:7d:f0:
89:5f:88:47:12:6f:51:da:a0:4d:38:d8:30:13:fe:
0f:40:b8:8a:01:9d:5d:41:10:f3:ad:0b:62:08:2b:
d1:d9:b2:72:13:57:5e:54:57:86:37:69:a3:02:6e:
bd:f1:05:1a:49:69:6e:c4:e6:1d:11:f6:c8:cc:90:
9e:b6:c9:7d:68:84:5d:c2:98:5f:cf:16:f1:48:b1:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:96:5A:45:AB:07:25:F1:2F:C5:AE:42:72:1C:21:E2:7A:82:EA:3F
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133372e3230382e302f32312d3231203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.137.208.0/21
Signature Algorithm: sha256WithRSAEncryption
33:ab:da:b4:a6:cc:de:41:b8:f6:2e:b3:77:f1:69:b0:8c:5a:
3a:2b:01:07:b3:ab:7e:cb:f6:60:65:fa:58:4c:33:e7:f0:5a:
8e:e5:bd:51:df:d5:ac:46:7f:5a:6c:ea:08:31:6b:48:93:65:
14:2b:34:31:6e:10:fb:9c:60:a6:b5:2a:a8:7c:85:84:44:cd:
4b:32:0a:90:77:5b:31:31:2f:e8:b5:da:c1:5b:67:30:39:52:
a4:25:4a:19:10:6b:ce:7a:92:37:5b:2d:19:05:27:f5:28:98:
8d:f3:b2:dd:c6:8d:ed:36:34:2f:15:61:68:f4:cc:e9:a2:86:
39:9e:7f:f8:b3:e0:8a:5f:ab:9b:37:27:1e:ab:96:60:2c:7f:
c7:6a:e7:a8:27:3c:76:50:3f:48:bf:1c:90:1e:49:49:2b:f2:
78:a3:8c:28:96:23:d2:c1:a5:5a:77:e4:56:3a:f3:82:0d:ab:
ff:72:6c:d2:7f:38:6a:9c:a0:55:69:88:06:38:e9:b6:e5:b7:
0d:10:a4:44:a4:95:19:89:67:5a:cb:76:66:3d:d9:05:2f:fa:
54:72:2d:af:03:6e:a1:54:53:77:53:d4:72:2a:7b:83:05:8d:
56:5a:81:0f:b2:89:7b:23:9e:93:aa:b1:d5:3e:6a:ff:9b:51:
f9:a3:ae:c1
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUS42MHWTLhgzfV/wRxbpu0uzK8KswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjQwMzA1MDU1NDIwWhcNMjUwMzA0MDU1OTIw
WjAzMTEwLwYDVQQDEyg4NDk2NUE0NUFCMDcyNUYxMkZDNUFFNDI3MjFDMjFFMjdB
ODJFQTNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4wNhwTBqmKj
AypO3UILDPz1AwhElMSVbJYfhYYMcGypiw8yYV52gOb5GC05ecRvnCxyx4bJ2PAR
AzB6MUl2w9WhdGMdsiNyWHoe6g+r/OXR1htpG3njsBQbIuQEtg1v9YfWecpIGa9H
ioIDf6+7mWoASusTalA6GWdmdMAVUkuqTjV07WqaH/oZtFSdCZzaB1a9OtD98XQm
RL2ucV/0Yzbv/SgFmtdD7T7qJf9N8vaBffCJX4hHEm9R2qBNONgwE/4PQLiKAZ1d
QRDzrQtiCCvR2bJyE1deVFeGN2mjAm698QUaSWluxOYdEfbIzJCetsl9aIRdwphf
zxbxSLF36QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFISWWkWrByXxL8WuQnIcIeJ6
guo/MB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8zLzM0MzcyZTMxMzMzNzJlMzIzMDM4MmUzMDJmMzIzMTJkMzIz
MTIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMvidAwDQYJKoZIhvcNAQELBQAD
ggEBADOr2rSmzN5BuPYus3fxabCMWjorAQezq37L9mBl+lhMM+fwWo7lvVHf1axG
f1ps6ggxa0iTZRQrNDFuEPucYKa1Kqh8hYREzUsyCpB3WzExL+i12sFbZzA5UqQl
ShkQa856kjdbLRkFJ/UomI3zst3Gje02NC8VYWj0zOmihjmef/iz4Ipfq5s3Jx6r
lmAsf8dq56gnPHZQP0i/HJAeSUkr8nijjCiWI9LBpVp35FY684INq/9ybNJ/OGqc
oFVpiAY46bbltw0QpESklRmJZ1rLdmY92QUv+lRyLa8DbqFUU3dT1HIqe4MFjVZa
gQ+yiXsjnpOqsdU+av+bUfmjrsE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org