Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3232342e302f32302d3230203d3e2035363530.roa
File: 34372e3134302e3232342e302f32302d3230203d3e2035363530.roa (raw, json)
Hash identifier: YmmyPCaxiqgMOR0Scpwydrjn7bG8a73NAf8jrgw4QPU=
Subject key identifier: 49:85:8C:C3:96:81:A1:80:E2:EC:EB:1E:BF:E0:48:71:E2:0A:5A:A3
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 4E6454C5706DBF464B48EBCA485D822BF6B4E435
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3232342e302f32302d3230203d3e2035363530.roa
Signing time: Tue 19 Mar 2024 04:16:54 +0000
ROA not before: Tue 19 Mar 2024 04:11:54 +0000
ROA not after: Tue 18 Mar 2025 04:16:54 +0000
asID: 5650
IP address blocks: 47.140.224.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:64:54:c5:70:6d:bf:46:4b:48:eb:ca:48:5d:82:2b:f6:b4:e4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Mar 19 04:11:54 2024 GMT
Not After : Mar 18 04:16:54 2025 GMT
Subject: CN=49858CC39681A180E2ECEB1EBFE04871E20A5AA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:c9:a1:b2:13:33:2e:60:58:95:eb:28:c8:
a1:2f:bf:f2:5e:be:af:22:a3:7c:c3:ca:a4:62:c8:
1b:ad:ed:35:6c:d0:79:be:50:bf:07:f4:e6:fb:25:
2b:35:d9:17:44:f2:c9:2e:6b:a8:a5:be:94:33:73:
e0:32:9f:1f:0b:07:81:6b:08:7c:70:a2:ad:af:b7:
90:91:e0:f4:24:ab:e0:90:38:1f:37:01:f9:64:bb:
5a:2b:a6:a3:81:7c:24:19:3c:f5:0f:13:4e:cb:df:
ae:eb:ea:62:c4:b9:81:5b:7f:d8:73:28:6c:8b:8d:
e0:3d:91:9a:9c:d4:cc:ea:bc:9f:85:bb:67:60:da:
af:e8:ac:d0:72:04:87:f6:7b:0b:c9:41:e3:11:1f:
b0:37:0c:39:5e:fe:c5:0c:5a:3d:61:80:d4:0a:31:
60:ff:ea:68:63:d1:d9:6c:f4:c8:56:70:82:c2:31:
32:fa:7c:78:5a:2f:aa:6c:1b:b5:0b:e2:2a:a1:fc:
43:9e:04:35:67:4c:e9:de:3e:0c:24:4f:00:89:d5:
b5:ab:17:52:cb:72:7c:a9:7a:e3:10:07:bd:eb:4b:
f3:27:09:31:f1:41:10:2a:1f:9f:53:a9:44:e9:3a:
6c:03:ca:51:70:8f:33:93:3c:43:27:81:f3:11:af:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:85:8C:C3:96:81:A1:80:E2:EC:EB:1E:BF:E0:48:71:E2:0A:5A:A3
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3232342e302f32302d3230203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.140.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:38:f2:9b:0d:65:a5:e3:00:3e:93:fa:f3:a7:cb:d8:03:84:
29:9c:8a:b4:90:bc:ec:72:5f:e9:92:91:24:37:c6:43:c1:bd:
92:cc:d1:75:00:f0:a1:7a:3f:81:f1:5c:6f:19:3c:16:3d:16:
9b:d8:4c:d1:a8:6d:c2:60:6f:ba:70:aa:17:87:f9:bc:08:9a:
f1:c4:4c:8e:21:16:cd:4c:b3:4f:0e:b2:f8:8b:a5:3c:d1:1f:
0d:94:64:5d:b1:6b:1b:79:b2:db:aa:65:0e:a9:73:d2:55:4a:
b5:20:0b:df:57:40:b9:c9:60:9c:11:06:df:b3:ca:b8:39:b4:
38:03:ba:8b:a3:f2:bf:c7:b0:75:79:b2:7a:b1:fe:b2:de:75:
5e:f4:43:a9:6a:c2:d9:15:4b:f7:5b:5e:ff:51:7b:79:2a:2d:
7e:4e:ca:10:3d:ad:d0:16:64:15:39:2e:fa:7d:71:99:2d:20:
40:8d:41:c5:7f:73:b5:05:23:59:21:90:9c:6b:f3:c5:b3:2d:
b3:72:5f:1b:9c:20:ea:a4:41:c4:d6:0e:e5:c3:2d:75:1b:20:
31:0b:7b:77:73:b8:89:18:33:f3:44:47:c0:15:be:33:7e:6d:
98:35:9d:f3:1c:00:5e:d9:96:d2:68:b7:7b:7c:36:69:0f:c6:
2b:c2:63:0f
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUTmRUxXBtv0ZLSOvKSF2CK/a05DUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjQwMzE5MDQxMTU0WhcNMjUwMzE4MDQxNjU0
WjAzMTEwLwYDVQQDEyg0OTg1OENDMzk2ODFBMTgwRTJFQ0VCMUVCRkUwNDg3MUUy
MEE1QUEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR3JobITMy5g
WJXrKMihL7/yXr6vIqN8w8qkYsgbre01bNB5vlC/B/Tm+yUrNdkXRPLJLmuopb6U
M3PgMp8fCweBawh8cKKtr7eQkeD0JKvgkDgfNwH5ZLtaK6ajgXwkGTz1DxNOy9+u
6+pixLmBW3/Ycyhsi43gPZGanNTM6ryfhbtnYNqv6KzQcgSH9nsLyUHjER+wNww5
Xv7FDFo9YYDUCjFg/+poY9HZbPTIVnCCwjEy+nx4Wi+qbBu1C+IqofxDngQ1Z0zp
3j4MJE8AidW1qxdSy3J8qXrjEAe960vzJwkx8UEQKh+fU6lE6TpsA8pRcI8zkzxD
J4HzEa9oDwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFEmFjMOWgaGA4uzrHr/gSHHi
ClqjMB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8zLzM0MzcyZTMxMzQzMDJlMzIzMjM0MmUzMDJmMzIzMDJkMzIz
MDIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQvjOAwDQYJKoZIhvcNAQELBQAD
ggEBACo48psNZaXjAD6T+vOny9gDhCmcirSQvOxyX+mSkSQ3xkPBvZLM0XUA8KF6
P4HxXG8ZPBY9FpvYTNGobcJgb7pwqheH+bwImvHETI4hFs1Ms08OsviLpTzRHw2U
ZF2xaxt5stuqZQ6pc9JVSrUgC99XQLnJYJwRBt+zyrg5tDgDuouj8r/HsHV5snqx
/rLedV70Q6lqwtkVS/dbXv9Re3kqLX5OyhA9rdAWZBU5Lvp9cZktIECNQcV/c7UF
I1khkJxr88WzLbNyXxucIOqkQcTWDuXDLXUbIDELe3dzuIkYM/NER8AVvjN+bZg1
nfMcAF7ZltJot3t8NmkPxivCYw8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org