Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3230342e302f32342d3234203d3e2035363530.roa
File: 34372e3134302e3230342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: 4khd9nqNnGFF3pNJLb7j+jmjSwi9ZCFfAkLOM+N8q0c=
Subject key identifier: F1:AF:D1:12:B0:42:1C:54:9A:20:8E:A7:4B:40:E9:D3:B8:E1:0F:87
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 4C7EF077F607412D186DE067405160101C9EC8E2
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3230342e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:17:17 +0000
ROA not before: Thu 02 Nov 2023 11:12:17 +0000
ROA not after: Thu 31 Oct 2024 11:17:17 +0000
asID: 5650
IP address blocks: 47.140.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:7e:f0:77:f6:07:41:2d:18:6d:e0:67:40:51:60:10:1c:9e:c8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Nov 2 11:12:17 2023 GMT
Not After : Oct 31 11:17:17 2024 GMT
Subject: CN=F1AFD112B0421C549A208EA74B40E9D3B8E10F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:0f:f2:92:fb:0b:a6:39:c4:00:5e:67:b2:
c2:41:80:8d:d2:e5:49:2c:23:43:87:16:89:c7:e3:
a0:81:a8:08:be:e5:5e:cf:96:56:8d:7b:f5:c9:b7:
a5:d8:fe:1a:00:93:37:e6:32:20:39:da:b5:ec:6c:
60:1c:2e:14:df:d5:7a:9a:9c:18:d2:61:ad:52:cf:
4a:01:6c:68:c4:48:9f:1b:90:85:de:40:86:45:1d:
9b:33:13:cb:bb:be:4c:25:a7:f2:cb:86:52:53:df:
7f:c4:9f:35:8f:4e:b2:0f:53:22:7c:7e:b8:8f:5a:
c8:43:34:ce:59:e0:54:6d:90:fe:6d:5d:c1:67:c7:
13:1b:de:09:3d:00:6e:0b:26:e8:7f:06:dd:85:66:
ba:99:8c:cf:dc:60:4b:dc:b9:55:5e:8a:57:4b:19:
86:78:93:33:a7:6f:d9:b8:f1:63:ad:6c:17:f8:9f:
f1:4e:3c:c2:c3:57:bd:6a:45:51:3e:9e:13:fd:33:
c9:87:36:45:06:ee:b7:60:ef:f8:29:b4:37:56:11:
98:76:21:81:cb:41:54:75:aa:c6:53:b3:4b:3d:05:
4c:92:48:81:45:d8:70:32:aa:11:ab:93:42:7a:d0:
a4:42:45:c3:f5:c9:54:bb:b7:20:47:41:89:ce:93:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AF:D1:12:B0:42:1C:54:9A:20:8E:A7:4B:40:E9:D3:B8:E1:0F:87
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3230342e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.140.204.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:df:d9:3e:ab:0b:44:7e:31:6b:b3:14:c4:b3:76:24:99:ed:
61:eb:ed:63:64:f9:01:05:4f:52:1f:31:89:5a:2f:b9:a1:c5:
85:e7:e2:c4:3f:fe:d6:6e:68:cd:fc:bb:15:ba:92:78:db:88:
c7:71:28:ce:60:ef:f0:97:4a:09:96:0e:74:ad:e3:57:f1:cc:
c1:51:78:07:dc:5a:76:e7:c7:01:f1:ae:b6:51:8a:d9:9a:e1:
5c:9a:70:a1:72:8a:a8:e4:c0:f7:7a:66:af:7c:dd:44:42:1a:
96:73:da:7e:ca:1f:16:3f:d3:d0:eb:4a:09:c3:f9:db:ac:f5:
3a:c5:29:37:4e:a7:d5:a8:1d:cd:4e:8f:2d:67:c5:61:1b:11:
df:24:af:f6:e2:f6:6d:54:5a:91:2b:89:c3:57:1d:6f:5d:73:
4d:f3:32:b7:1d:50:2a:c9:96:bb:46:bc:a4:e4:b9:ea:d0:86:
e6:04:1e:d7:0b:ae:af:da:b9:12:bd:9e:f5:d7:63:c0:29:58:
cd:7a:ad:ce:2f:74:40:60:14:89:0a:23:12:7a:a1:05:a2:a6:
de:ca:fa:b2:1e:3f:75:10:ad:87:63:a8:26:84:e7:5c:96:38:
17:3d:a0:62:85:eb:b4:c9:96:27:dc:73:88:bf:cb:f6:c1:b1:
77:40:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org