Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133312e302f32342d3234203d3e2035363530.roa
File: 34372e3136302e3133312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: +voAjA698bQPX301G9SfE7Ah6LVthkCsQU47+MUIStc=
Subject key identifier: 8C:7D:45:B8:DC:A9:F3:A5:76:F7:EE:51:EB:4F:95:DB:65:1D:CF:55
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 0BBB6F8BC813112BCDC7192FD124C05EF1322A0F
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133312e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:19:52 +0000
ROA not before: Thu 02 Nov 2023 11:14:52 +0000
ROA not after: Thu 31 Oct 2024 11:19:52 +0000
asID: 5650
IP address blocks: 47.160.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:bb:6f:8b:c8:13:11:2b:cd:c7:19:2f:d1:24:c0:5e:f1:32:2a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Nov 2 11:14:52 2023 GMT
Not After : Oct 31 11:19:52 2024 GMT
Subject: CN=8C7D45B8DCA9F3A576F7EE51EB4F95DB651DCF55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:15:c2:be:e9:e8:71:6f:68:51:fe:48:ef:
8c:36:1f:01:67:03:8d:bf:78:6d:fd:55:90:33:3d:
fc:cd:b1:c3:dd:bd:b4:de:08:4d:39:71:71:26:2a:
44:d5:7b:b9:94:dc:9f:01:f7:b9:d0:bc:ec:5d:e8:
78:88:09:4a:51:98:82:80:e1:44:59:05:3d:6c:3e:
e3:2f:45:20:fa:bc:bc:d3:0d:55:a3:2f:e0:f8:ca:
3f:f5:5a:05:09:07:b7:45:d5:38:93:d9:f4:22:b2:
4a:11:35:f5:dd:7e:eb:bb:a0:be:fe:e2:13:28:7e:
de:1b:2a:7c:7a:6e:bc:50:5e:a8:83:a8:7e:af:a0:
63:27:01:c5:11:34:45:13:a2:fd:fe:7a:60:d4:bf:
bf:91:d2:94:75:5d:49:88:57:fe:a6:ec:9b:3c:10:
82:77:ef:91:04:ab:32:bd:e1:3f:fd:38:f0:60:da:
61:23:82:3f:7d:ef:c5:52:b0:e6:c5:98:c6:9f:0c:
27:18:3d:60:09:e5:a3:29:cb:d6:d3:97:c2:73:d6:
9e:7d:0e:e4:f9:72:e4:fc:b2:fa:09:3d:db:6b:37:
3c:e0:16:9f:47:8e:e0:95:e4:64:2c:55:99:24:98:
a4:37:fc:d3:e2:45:f5:68:a0:fd:b0:ab:e1:0a:ea:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7D:45:B8:DC:A9:F3:A5:76:F7:EE:51:EB:4F:95:DB:65:1D:CF:55
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133312e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.160.131.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7f:25:7d:29:11:18:c3:c8:d2:63:60:dd:24:40:7c:aa:1e:
23:74:a2:2a:10:23:dc:f3:5b:56:fc:fa:97:fe:86:a0:25:9f:
9c:4d:b2:8f:d2:21:c5:54:eb:d1:59:39:b3:56:aa:e1:53:ad:
81:d3:aa:53:bb:d8:fa:bb:a1:bf:c1:93:04:01:cf:2b:09:97:
d7:0a:83:02:1f:bc:c5:64:f7:90:d2:4b:8d:b9:4f:82:38:07:
5e:4c:78:1f:1d:35:6f:96:b1:8f:17:73:b0:24:7f:d9:8c:31:
5e:6d:9a:ff:4a:7f:f2:bf:d3:55:a2:d1:67:e0:54:b8:0f:7f:
5a:88:ab:96:b6:05:67:fb:86:52:4f:67:f3:62:34:ee:0b:19:
b5:20:b9:be:8f:96:52:1b:0d:db:ca:93:a8:a0:65:f9:60:e1:
77:af:1a:ac:e2:bd:1d:c0:52:3f:b1:65:8b:a9:7a:0b:00:6f:
bb:5e:47:35:33:06:97:90:85:32:49:60:5b:c8:eb:e5:b4:e4:
bf:99:fe:d3:5b:be:db:ff:b6:15:65:24:e4:7d:ff:82:c1:91:
67:47:13:b4:cf:ff:d6:0a:b1:34:4d:74:fe:52:3a:ec:86:4c:
95:54:ca:03:39:b6:3c:97:4c:63:a5:ba:bb:e7:f5:60:c8:2a:
38:a7:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:37 2024 by rpki-client on console-ams.rpki-client.org