Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133372e3231362e302f32312d3231203d3e2035363530.roa
File: 34372e3133372e3231362e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier: d0F3L05NIx5R21ZhhQoELQ0/ySZEN/DjsXTZ+MhHPpA=
Subject key identifier: 34:94:19:58:0B:0E:1D:6B:4C:AE:87:B0:F9:79:CE:57:C8:93:ED:DF
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 798C780EBFEF3C1363DD6ADC4C685DD42452504A
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133372e3231362e302f32312d3231203d3e2035363530.roa
Signing time: Tue 05 Mar 2024 05:59:43 +0000
ROA not before: Tue 05 Mar 2024 05:54:43 +0000
ROA not after: Tue 04 Mar 2025 05:59:43 +0000
asID: 5650
IP address blocks: 47.137.216.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:8c:78:0e:bf:ef:3c:13:63:dd:6a:dc:4c:68:5d:d4:24:52:50:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Mar 5 05:54:43 2024 GMT
Not After : Mar 4 05:59:43 2025 GMT
Subject: CN=349419580B0E1D6B4CAE87B0F979CE57C893EDDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:dd:02:a3:e3:7a:bb:82:27:86:e5:8e:3c:
d4:12:0a:8f:9a:a6:52:6f:1c:f6:17:3d:c5:d6:01:
1d:a8:13:ac:03:63:d0:b2:50:97:6b:b0:2d:02:93:
a1:fd:6e:81:cc:72:3b:e7:8b:b9:2e:5b:ee:94:05:
aa:09:06:5c:4e:0c:e8:57:6d:1b:ba:9a:73:50:19:
ba:64:61:2e:b0:06:8c:36:73:dc:b8:6d:a7:d7:9d:
e6:1a:bb:fa:23:17:8d:75:c7:b0:1b:8c:3d:61:74:
bd:1d:2b:f4:70:06:dd:39:5a:b6:9a:f3:16:ae:d1:
08:98:18:00:2a:13:5b:35:fa:7c:5c:55:76:b5:7a:
23:b3:39:30:7e:d1:40:b8:d2:98:74:6d:21:b2:71:
a2:bf:da:6c:60:e0:6a:0f:8d:ea:cf:70:f0:46:04:
eb:b0:c5:fa:27:0d:1a:e9:07:9a:c3:d1:7b:80:c7:
72:5e:8d:e8:f4:db:d8:5f:4b:eb:a7:37:66:e1:f1:
1e:3a:b5:82:9a:85:08:87:31:a2:c4:f1:99:8f:9c:
fe:17:94:d6:7f:ed:2e:41:05:f0:a1:37:0d:64:7d:
43:94:f6:ae:b7:3a:93:66:f6:a2:65:ca:cd:11:bc:
5b:bd:bd:01:bd:09:84:79:2c:0a:2a:08:62:40:30:
6e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:94:19:58:0B:0E:1D:6B:4C:AE:87:B0:F9:79:CE:57:C8:93:ED:DF
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133372e3231362e302f32312d3231203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.137.216.0/21
Signature Algorithm: sha256WithRSAEncryption
82:b0:8d:2b:ea:7e:80:97:50:18:ba:1c:86:d6:ef:21:4d:45:
e8:e3:d8:ca:90:3d:93:5f:55:02:0c:97:f4:32:bc:79:58:28:
5b:6c:bb:37:b6:b4:54:ab:be:d6:df:65:a5:fb:56:4f:bc:e8:
86:2c:9d:1f:76:d3:68:d2:f2:37:13:a6:34:89:7a:c6:5c:d2:
a7:55:20:7e:be:cf:f9:f0:ff:6f:1e:3e:29:18:d8:ac:84:4b:
38:40:2f:94:cd:35:54:34:0f:cd:6e:d7:90:71:c4:7b:4d:cc:
29:b8:49:53:3a:4d:bd:65:04:31:71:f8:15:41:69:1a:0c:11:
c8:6f:35:10:f9:21:bb:0a:58:32:36:b2:e6:a0:63:49:68:9a:
9e:3a:61:48:39:36:1f:59:9b:14:04:d0:19:42:08:0f:92:de:
89:6f:fb:70:ac:8f:b1:34:fb:d4:3c:07:10:dc:ff:b5:27:84:
93:86:ab:60:73:e3:67:9b:0f:c1:ce:59:96:c4:4e:7e:1f:09:
d4:f9:42:b4:35:c9:40:ff:b2:0c:bd:cf:6a:de:a4:98:a4:c9:
65:64:ec:c5:d6:a5:31:55:0c:21:54:75:ab:08:b1:fa:ba:ee:
9f:ef:3e:d3:36:3c:32:aa:54:3a:3b:08:80:0e:4b:ef:1b:88:
17:1d:1d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org