Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135302e302f32342d3234203d3e2035363530.roa
File: 34372e3136302e3135302e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: NfNsSOXZij6QVSCEEiokbffv5jmhSEXjGQYZPfVsXOw=
Subject key identifier: 89:9F:7F:0B:A9:84:AF:F0:6B:48:7D:0F:3F:0B:E0:EA:82:91:29:F0
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 62122F00F50F1E791BEFCC912F3BE573BA655940
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135302e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:24:41 +0000
ROA not before: Thu 02 Nov 2023 11:19:41 +0000
ROA not after: Thu 31 Oct 2024 11:24:41 +0000
asID: 5650
IP address blocks: 47.160.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:12:2f:00:f5:0f:1e:79:1b:ef:cc:91:2f:3b:e5:73:ba:65:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Nov 2 11:19:41 2023 GMT
Not After : Oct 31 11:24:41 2024 GMT
Subject: CN=899F7F0BA984AFF06B487D0F3F0BE0EA829129F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:d7:fd:3f:cb:fb:44:bd:a7:de:4c:f5:60:
46:a9:4e:ff:24:96:71:e1:72:00:9c:53:4f:26:fa:
d7:e0:f1:f3:6d:cd:ab:f1:dd:30:28:56:6d:c9:32:
d1:b6:53:f3:3f:c6:29:22:db:38:ac:8b:64:97:fb:
b8:c9:62:da:15:3a:06:24:46:9c:df:4a:3e:fd:51:
c5:19:0c:d1:b9:64:f3:78:0e:1e:54:3c:ea:20:fd:
b9:00:e4:4c:76:82:73:77:0e:00:33:bd:cc:d1:f5:
ec:5f:5c:3f:8e:53:f2:10:3a:18:ab:05:1d:c8:f5:
21:d5:4a:64:cf:11:04:86:50:3e:29:23:6e:da:67:
7d:26:47:f9:e5:f6:2f:34:dd:a4:4c:90:3b:0f:1d:
b7:80:dc:f1:59:1f:e6:a6:13:5c:e0:60:44:9a:e4:
02:cf:69:1a:6d:b2:c0:5b:e9:fe:55:94:f8:e6:8b:
4b:04:13:63:62:f5:02:ec:47:77:40:d0:2a:0c:d6:
68:74:98:87:a0:40:55:06:cd:ca:58:fb:fa:86:d3:
cd:f1:dd:cc:12:25:e7:e8:30:97:8d:62:8c:91:86:
9f:16:d2:6c:4d:81:75:35:0c:cd:a2:9a:dd:42:10:
8d:27:b7:6d:77:ca:d6:da:30:7f:9a:9e:27:d5:d6:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9F:7F:0B:A9:84:AF:F0:6B:48:7D:0F:3F:0B:E0:EA:82:91:29:F0
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135302e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.160.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:3d:74:59:18:d2:11:1a:b9:69:33:da:b5:67:4a:1b:08:c8:
dd:5b:60:d4:0d:ae:42:c7:95:8f:e7:fb:bc:8c:0a:dc:2a:52:
3f:07:12:51:d5:27:28:dc:56:37:d0:ab:dc:86:59:34:c5:cf:
ed:b0:59:c0:18:8b:77:3d:73:ac:a1:6d:35:09:da:b1:7e:01:
83:ce:bc:dd:c8:ca:77:d2:df:3f:14:db:4a:69:3b:f9:c8:4f:
8b:a9:db:1a:4a:65:02:21:0f:e4:7a:d3:e0:50:9b:b9:ad:5d:
c8:66:b8:00:bc:d1:5a:aa:56:fc:a9:25:51:57:2b:27:04:24:
a9:cc:0d:5a:01:e0:f7:d8:f8:40:2b:ce:cb:c4:4a:49:65:73:
09:36:d2:58:f4:a6:11:37:d0:9e:c1:80:8c:c0:24:d1:65:99:
a0:c5:76:9d:a9:0e:4c:ec:d0:d2:08:ca:07:b2:a1:cb:67:49:
fe:d3:da:e1:3c:fd:8f:47:64:b6:4d:7f:39:8a:28:9c:43:fd:
31:f0:8f:ae:a3:16:5a:f6:86:ff:36:de:7b:0d:07:c2:d5:e3:
9f:63:8c:92:54:24:ef:2d:e1:c1:cd:95:b1:04:17:bc:b0:3d:
20:c0:63:15:e0:3d:7d:ca:bb:7a:34:1a:a9:0f:f5:4a:43:5b:
28:00:ba:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org