Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e39362e302f32302d3230203d3e2035363530.roa
File: 34372e3134332e39362e302f32302d3230203d3e2035363530.roa (raw, json)
Hash identifier: qfj9+7zFTK4b5WJwUM8+iO5dgJUcEEZoXtWhL0CyAhM=
Subject key identifier: 33:1A:F0:08:5F:01:F4:0C:19:4D:7B:75:94:14:B2:E5:86:E3:45:8E
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 2A14431296FECA7094E914B052CF7F02A0CE1FED
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e39362e302f32302d3230203d3e2035363530.roa
Signing time: Tue 19 Mar 2024 04:17:27 +0000
ROA not before: Tue 19 Mar 2024 04:12:27 +0000
ROA not after: Tue 18 Mar 2025 04:17:27 +0000
asID: 5650
IP address blocks: 47.143.96.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:14:43:12:96:fe:ca:70:94:e9:14:b0:52:cf:7f:02:a0:ce:1f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Mar 19 04:12:27 2024 GMT
Not After : Mar 18 04:17:27 2025 GMT
Subject: CN=331AF0085F01F40C194D7B759414B2E586E3458E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:3d:40:1b:01:6b:6b:22:af:d0:97:5e:4f:
db:93:27:b3:31:0a:3a:88:ea:7a:21:09:e2:2d:45:
53:48:45:0b:f2:88:69:d2:82:d0:26:aa:70:b5:39:
25:f8:e2:c7:f2:51:84:76:c4:01:f4:d3:19:45:73:
a7:32:39:5c:f7:c1:90:54:7c:12:24:4d:80:43:e5:
98:d3:0b:16:fb:6a:34:c1:b6:96:e0:66:e0:c4:34:
86:e4:b4:d7:ce:0e:2e:b0:c6:6c:fa:8d:c8:92:3d:
2c:16:15:ff:29:a2:b9:32:40:d0:bb:51:9a:94:0a:
0b:20:d1:85:ab:34:89:31:c5:4e:a9:0f:91:f3:c2:
9a:3f:21:fc:ed:a3:36:a2:dd:b3:a5:8a:4e:7c:d8:
a0:22:8e:ed:b8:47:67:26:78:e7:42:d5:09:bd:0a:
90:12:21:8b:0e:a1:d2:85:ad:d1:3b:41:22:dd:8c:
33:4e:0d:b9:dc:fb:71:94:f1:a9:fd:2f:a7:a7:51:
89:be:3e:b2:68:e2:a6:1b:77:97:af:50:f5:08:ea:
52:9a:93:c8:3b:65:0d:4f:1c:2e:12:1b:4e:fc:e9:
82:eb:dc:b0:6c:b4:b7:01:63:61:53:6e:c9:34:36:
24:a9:52:c7:e7:3b:4f:ca:26:ea:e7:a2:a1:d8:f3:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1A:F0:08:5F:01:F4:0C:19:4D:7B:75:94:14:B2:E5:86:E3:45:8E
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e39362e302f32302d3230203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.143.96.0/20
Signature Algorithm: sha256WithRSAEncryption
09:39:16:cb:21:9a:78:22:ac:38:38:56:62:76:ed:f1:61:f6:
56:9d:60:46:54:e3:5d:6a:72:e1:8e:8e:68:6e:a5:01:60:00:
73:0e:25:f6:8a:4f:6a:fb:ed:2d:8b:c5:ae:cd:5a:5f:c0:63:
af:21:22:e3:3c:4c:c7:86:e5:25:b2:de:91:0b:50:b0:31:5f:
e9:55:78:19:5e:73:d8:9b:20:84:31:ad:a9:cd:97:61:a2:c3:
bb:a9:1d:7f:fe:4e:85:7f:e3:4e:34:7a:f2:b6:55:b2:7c:c8:
f8:73:2e:c6:30:b0:ef:9a:2d:62:fc:29:a8:8f:ae:86:25:20:
46:3b:73:6d:91:72:f3:28:d2:e2:d5:ea:fd:68:a8:71:49:d6:
dd:b1:b1:ba:7b:3a:55:9d:0d:0f:14:ae:98:65:61:92:74:16:
a9:60:54:b3:a0:cc:16:51:ad:07:93:5e:65:50:0f:d4:8e:f9:
4e:5a:b2:bd:8d:1d:ce:70:a1:a2:f4:bd:66:65:fc:45:38:d9:
59:1d:19:78:e0:73:af:ff:e9:3d:fa:37:d7:ae:a7:53:93:18:
de:82:24:23:11:b3:1b:9a:9f:70:55:91:64:2b:08:7b:eb:6a:
63:bc:0f:ef:97:ec:59:e7:16:94:6f:cf:2f:7a:13:5b:64:54:
02:06:81:3e
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUKhRDEpb+ynCU6RSwUs9/AqDOH+0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjQwMzE5MDQxMjI3WhcNMjUwMzE4MDQxNzI3
WjAzMTEwLwYDVQQDEygzMzFBRjAwODVGMDFGNDBDMTk0RDdCNzU5NDE0QjJFNTg2
RTM0NThFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNs9QBsBa2si
r9CXXk/bkyezMQo6iOp6IQniLUVTSEUL8ohp0oLQJqpwtTkl+OLH8lGEdsQB9NMZ
RXOnMjlc98GQVHwSJE2AQ+WY0wsW+2o0wbaW4GbgxDSG5LTXzg4usMZs+o3Ikj0s
FhX/KaK5MkDQu1GalAoLINGFqzSJMcVOqQ+R88KaPyH87aM2ot2zpYpOfNigIo7t
uEdnJnjnQtUJvQqQEiGLDqHSha3RO0Ei3YwzTg253PtxlPGp/S+np1GJvj6yaOKm
G3eXr1D1COpSmpPIO2UNTxwuEhtO/OmC69ywbLS3AWNhU27JNDYkqVLH5ztPyibq
56Kh2POa5QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDMa8AhfAfQMGU17dZQUsuWG
40WOMB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzMvMzQzNzJlMzEzNDMzMmUzOTM2MmUzMDJmMzIzMDJkMzIzMDIw
M2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQvj2AwDQYJKoZIhvcNAQELBQADggEB
AAk5FsshmngirDg4VmJ27fFh9ladYEZU411qcuGOjmhupQFgAHMOJfaKT2r77S2L
xa7NWl/AY68hIuM8TMeG5SWy3pELULAxX+lVeBlec9ibIIQxranNl2Giw7upHX/+
ToV/4040evK2VbJ8yPhzLsYwsO+aLWL8KaiProYlIEY7c22RcvMo0uLV6v1oqHFJ
1t2xsbp7OlWdDQ8UrphlYZJ0FqlgVLOgzBZRrQeTXmVQD9SO+U5asr2NHc5woaL0
vWZl/EU42VkdGXjgc6//6T36N9eup1OTGN6CJCMRsxuan3BVkWQrCHvramO8D++X
7FnnFpRvzy96E1tkVAIGgT4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org