Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133382e302f32342d3234203d3e2035363530.roa
File: 34372e3136302e3133382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: YgXbh3aqSfBspD/wlGrOHXvSeqzLU1dgOz4U6fSTZiI=
Subject key identifier: DA:84:99:85:EC:41:3B:C3:2F:54:4C:F1:A5:76:9C:27:68:7C:AB:CF
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 37E462BBF40EAC6BF0494378BDB80A92DBF23C44
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133382e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:21:34 +0000
ROA not before: Thu 02 Nov 2023 11:16:34 +0000
ROA not after: Thu 31 Oct 2024 11:21:34 +0000
asID: 5650
IP address blocks: 47.160.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e4:62:bb:f4:0e:ac:6b:f0:49:43:78:bd:b8:0a:92:db:f2:3c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Nov 2 11:16:34 2023 GMT
Not After : Oct 31 11:21:34 2024 GMT
Subject: CN=DA849985EC413BC32F544CF1A5769C27687CABCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:c4:35:0e:3d:cf:61:46:d4:62:5f:58:7a:
43:60:e2:89:b8:27:eb:7e:9e:22:d0:e9:e4:1e:c7:
e7:f1:54:55:71:04:e7:5f:3f:ef:05:06:99:53:f3:
6b:44:b4:d6:0a:e0:a3:c8:aa:19:c4:ea:54:ba:f6:
77:6e:2a:10:2c:17:7b:d4:a0:7c:a7:e9:35:3e:e9:
71:52:3a:d4:8a:bc:9a:15:b8:59:bf:c0:2c:53:bd:
0e:51:a7:7b:49:de:06:7e:05:03:22:26:96:39:c7:
35:7d:f5:3d:ba:cb:b2:03:5b:2d:f4:1e:6e:0d:4a:
3b:ad:be:07:d7:41:2b:41:7b:73:f3:a4:1c:19:ad:
ed:c7:e2:c2:81:e9:1c:f1:01:71:09:20:2a:2c:6e:
d7:4b:50:3c:28:57:ad:9b:bb:0f:b0:45:03:51:10:
c6:a7:1f:df:28:9b:e5:ff:cc:72:53:65:2e:65:bc:
26:0c:c9:d2:d2:eb:5b:d4:2d:52:60:10:a0:f1:d6:
a9:a5:37:4c:a7:f4:8e:20:e1:c6:db:ea:1b:0e:71:
da:a7:76:5c:2c:94:5f:3c:5d:a5:c7:9c:49:87:dd:
c2:7f:c4:47:68:be:ba:fe:5c:34:89:16:6c:83:16:
c3:00:89:7a:3a:6c:01:a4:51:a6:4e:8f:fb:b6:6d:
0b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:84:99:85:EC:41:3B:C3:2F:54:4C:F1:A5:76:9C:27:68:7C:AB:CF
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3133382e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.160.138.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b6:d6:40:94:9e:3a:e0:f6:59:1a:1e:53:0e:9b:a3:f4:a7:
27:ae:3a:f0:8c:98:05:d7:c1:e3:c0:83:a8:8c:8f:08:7b:96:
a2:04:b1:d3:bf:cd:fe:e9:8e:83:08:55:cb:4b:19:98:64:df:
10:9c:70:33:ea:f6:3f:71:65:50:f8:e1:c4:ca:a9:a6:57:5d:
61:19:d6:63:7a:26:37:f9:f5:25:a5:8e:ec:cd:dd:91:e2:e4:
4b:08:77:bd:6e:1b:1a:39:6c:b1:37:98:69:31:50:cd:e7:2d:
19:15:65:d6:59:7e:33:2d:17:24:89:e5:ef:ba:63:7b:d2:fe:
ab:e4:00:27:59:cb:05:46:72:e1:ad:fc:4d:1e:02:16:50:fb:
35:f5:3e:e9:a8:91:25:ee:52:f3:b0:4c:7d:4c:2d:40:db:32:
95:b3:52:ec:41:17:54:cc:fd:8d:4a:ae:9b:1e:01:69:01:ac:
98:31:9c:2f:01:84:8a:6c:d5:47:0b:48:7e:8c:75:32:08:32:
67:74:71:32:8d:09:4b:0c:b8:70:82:4d:ce:42:f5:d6:9d:68:
ca:f7:74:87:a1:90:4e:cc:ea:88:d7:a7:ba:5e:97:62:fb:e9:
03:70:87:77:5d:4f:ac:51:74:90:62:2c:07:4f:db:68:b0:ff:
42:3f:8a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org