Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3135372e302f32342d3234203d3e2035363530.roa
File: 34372e3134302e3135372e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: XGHdFRbGDSMe1C8UNXYiuc+FtU4UMSXJMctSqcmlDl4=
Subject key identifier: 33:5F:B3:7E:55:3B:7B:F1:E7:9F:2B:7C:26:C8:A4:AC:A8:2D:34:DE
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 3F35E04B611F04E7F9BDDB72952ED3E336790C98
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3135372e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:15:57 +0000
ROA not before: Thu 02 Nov 2023 11:10:57 +0000
ROA not after: Thu 31 Oct 2024 11:15:57 +0000
asID: 5650
IP address blocks: 47.140.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:35:e0:4b:61:1f:04:e7:f9:bd:db:72:95:2e:d3:e3:36:79:0c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Nov 2 11:10:57 2023 GMT
Not After : Oct 31 11:15:57 2024 GMT
Subject: CN=335FB37E553B7BF1E79F2B7C26C8A4ACA82D34DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:c3:64:c2:b1:d0:ed:8a:25:89:40:5a:2a:
86:14:c0:93:08:26:8f:07:31:af:cb:3e:76:58:96:
c6:c1:29:6d:4e:6a:87:e2:b2:72:e4:02:85:b3:da:
4b:92:47:77:5c:d4:8f:45:b7:0d:79:aa:34:96:75:
db:dc:22:df:28:c6:69:a0:4c:b7:6d:33:61:7f:7f:
18:b3:a4:60:89:18:1f:2a:47:01:9d:f0:e1:0c:3a:
4f:12:ec:95:93:93:72:50:3e:22:ec:64:41:5a:0c:
a5:60:7c:27:de:80:f9:26:f9:7e:a0:a8:25:1f:97:
2b:ef:a9:d7:89:78:0b:23:b9:58:c7:58:b6:e5:55:
14:53:a4:d8:94:58:8d:d9:e6:d6:a7:1b:bf:5a:15:
ef:df:ae:03:cd:4c:f1:45:97:08:d2:65:26:2a:1d:
a4:50:66:e4:96:60:f4:29:e8:ff:2c:6a:c2:94:b8:
da:1b:bd:98:c2:c8:2c:e1:d6:47:96:aa:f6:9d:69:
36:2c:15:c9:0d:a6:a8:63:da:a5:96:19:56:8f:50:
c2:fc:b6:f2:da:00:d4:2b:de:ad:e8:f1:b5:c6:af:
45:83:8d:c6:20:60:93:0b:ab:de:02:46:24:c4:a4:
ae:7c:c0:28:22:97:13:71:99:7f:da:19:17:66:e2:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5F:B3:7E:55:3B:7B:F1:E7:9F:2B:7C:26:C8:A4:AC:A8:2D:34:DE
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3135372e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.140.157.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c8:76:c2:24:23:db:1c:ab:c5:e5:06:01:a8:cc:84:7f:d4:
73:de:b3:d1:6e:4b:83:6c:98:53:dd:13:17:f2:a8:a1:e1:db:
7e:a2:17:40:74:9c:b3:71:b8:ed:b0:26:cf:c6:d9:f0:68:8b:
98:b9:d6:cb:ab:e1:27:f7:67:6b:9e:5b:f8:65:b8:cb:11:17:
d2:c8:71:02:19:c7:ff:cb:1a:04:0e:21:f9:ee:c9:3b:5e:24:
4d:3f:51:f3:9b:27:0f:12:1d:f0:67:67:1c:5d:02:0e:4b:68:
cd:b1:4b:4d:ad:04:85:47:f1:c0:10:06:77:96:bf:56:8b:ee:
cd:df:1f:02:be:9b:ed:64:2f:c3:31:06:59:5d:0f:4a:03:40:
64:84:fc:d6:4a:34:d9:33:5f:50:20:9c:10:b6:f7:e3:94:e4:
83:c5:9c:11:30:fb:d7:7e:8e:ac:1a:d9:40:f2:ed:ba:fd:d3:
8d:41:e9:0a:ca:12:73:4b:87:87:45:36:c4:76:ec:71:7c:be:
1f:b6:70:18:b8:b3:68:b1:32:28:86:db:04:6c:af:54:45:ca:
89:4f:e6:b4:ac:e2:5c:1b:4b:9b:b1:53:42:9b:ae:f7:ed:6a:
1d:6a:8a:4a:d5:b4:23:e1:37:b4:d5:3e:06:9b:2d:ff:16:fb:
77:b4:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org