Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135332e302f32342d3234203d3e2035363530.roa
File: 34372e3136302e3135332e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: JdKygAHeIQ0cOQv5sSlHpWF8Tg+HmZZzQQB90BPS6SI=
Subject key identifier: 2A:85:3B:EC:FD:EA:2B:B3:9A:D7:45:4C:78:8C:95:88:47:D0:BD:9F
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 0A1245F18782C878229CA8FE67C6D35AF0E22FCD
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135332e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:25:26 +0000
ROA not before: Thu 02 Nov 2023 11:20:26 +0000
ROA not after: Thu 31 Oct 2024 11:25:26 +0000
asID: 5650
IP address blocks: 47.160.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:12:45:f1:87:82:c8:78:22:9c:a8:fe:67:c6:d3:5a:f0:e2:2f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Nov 2 11:20:26 2023 GMT
Not After : Oct 31 11:25:26 2024 GMT
Subject: CN=2A853BECFDEA2BB39AD7454C788C958847D0BD9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a4:70:39:d3:4d:d9:94:cd:06:b7:8b:19:19:
72:b5:35:61:fa:27:22:5a:a7:ba:1b:30:e5:4d:81:
02:ae:ea:70:8c:cf:59:cc:da:df:9e:cd:2e:c9:80:
dd:80:01:27:cb:0c:1a:24:b9:25:06:65:d2:23:3e:
1f:cf:35:e1:87:b7:f7:39:ff:a9:18:4d:12:fe:0d:
23:1f:8e:3a:75:4c:56:6c:28:1e:b9:10:d0:41:a0:
ef:98:d5:96:a5:48:2b:06:14:f1:87:eb:b8:b8:7a:
51:7b:23:b5:d4:76:3c:51:8c:ed:df:d1:cd:b0:36:
5c:d2:d3:f6:4a:92:7e:2d:7d:a8:e2:f7:f3:65:69:
91:7c:a2:c1:1d:da:c0:be:f8:a7:44:00:91:1c:18:
e0:94:0d:2d:fb:f1:e5:db:db:e6:49:a9:10:47:3d:
71:a6:86:20:f7:f4:f7:1b:f1:17:61:5c:06:bb:dd:
b6:9d:95:35:22:75:95:21:cf:52:0f:e7:3a:e4:d7:
8f:3a:60:b1:d3:98:e3:10:a0:e0:65:27:fa:02:e6:
ca:59:0b:67:e3:32:63:f2:8d:f8:cd:a0:48:ce:67:
76:a6:5c:b6:8d:f9:f7:1c:e6:24:24:37:75:06:c3:
27:e6:77:e2:cc:df:ce:b0:16:07:03:23:38:df:20:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:3B:EC:FD:EA:2B:B3:9A:D7:45:4C:78:8C:95:88:47:D0:BD:9F
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135332e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.160.153.0/24
Signature Algorithm: sha256WithRSAEncryption
81:0f:9c:07:f7:8a:78:90:33:d6:3a:2d:6c:08:e0:42:03:61:
7d:a5:cf:77:52:98:7b:79:41:3e:2b:04:3c:ef:b9:14:30:d9:
47:a2:70:79:a3:69:e9:a8:01:9d:79:0a:5c:6a:a7:e4:6b:ed:
16:b1:ec:21:b6:2a:75:a6:fd:53:46:c3:58:bd:95:23:19:81:
16:66:87:29:3f:5f:22:b3:7d:20:46:12:90:9b:16:50:82:e2:
dc:14:8f:c4:a3:d3:54:f7:fe:1b:a7:97:11:c8:e0:8d:3a:a8:
23:0c:2c:e1:c4:b7:7b:bc:fb:d2:8a:7e:e1:cc:bd:ab:e3:ef:
2f:85:1d:58:eb:4d:1b:74:91:7f:6f:cb:e8:99:b6:d3:15:95:
75:76:62:d3:74:be:eb:1b:51:52:bd:fb:7c:15:a6:1d:f6:cb:
e7:5e:01:58:a4:75:75:86:a0:65:21:7e:b2:99:ff:b4:31:db:
ce:97:21:d0:76:69:72:b4:b3:f4:e3:25:7f:94:11:46:15:24:
34:e6:05:95:30:11:e9:fd:23:b9:51:96:5e:e3:57:f9:d8:d4:
18:a3:5b:ec:a7:f8:30:e3:77:23:47:b4:56:4c:88:cb:bf:eb:
13:d3:3f:9c:b6:48:cf:08:e2:c6:77:cc:83:4e:37:d7:ea:e7:
3c:b9:99:e7
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUChJF8YeCyHginKj+Z8bTWvDiL80wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjMxMTAyMTEyMDI2WhcNMjQxMDMxMTEyNTI2
WjAzMTEwLwYDVQQDEygyQTg1M0JFQ0ZERUEyQkIzOUFENzQ1NEM3ODhDOTU4ODQ3
RDBCRDlGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKRwOdNN2ZTN
BreLGRlytTVh+iciWqe6GzDlTYECrupwjM9ZzNrfns0uyYDdgAEnywwaJLklBmXS
Iz4fzzXhh7f3Of+pGE0S/g0jH446dUxWbCgeuRDQQaDvmNWWpUgrBhTxh+u4uHpR
eyO11HY8UYzt39HNsDZc0tP2SpJ+LX2o4vfzZWmRfKLBHdrAvvinRACRHBjglA0t
+/Hl29vmSakQRz1xpoYg9/T3G/EXYVwGu922nZU1InWVIc9SD+c65NePOmCx05jj
EKDgZSf6AubKWQtn4zJj8o34zaBIzmd2ply2jfn3HOYkJDd1BsMn5nfizN/OsBYH
AyM43yAddwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCqFO+z96iuzmtdFTHiMlYhH
0L2fMB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8zLzM0MzcyZTMxMzYzMDJlMzEzNTMzMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAvoJkwDQYJKoZIhvcNAQELBQAD
ggEBAIEPnAf3iniQM9Y6LWwI4EIDYX2lz3dSmHt5QT4rBDzvuRQw2UeicHmjaemo
AZ15Clxqp+Rr7Rax7CG2KnWm/VNGw1i9lSMZgRZmhyk/XyKzfSBGEpCbFlCC4twU
j8Sj01T3/hunlxHI4I06qCMMLOHEt3u8+9KKfuHMvavj7y+FHVjrTRt0kX9vy+iZ
ttMVlXV2YtN0vusbUVK9+3wVph32y+deAVikdXWGoGUhfrKZ/7Qx286XIdB2aXK0
s/TjJX+UEUYVJDTmBZUwEen9I7lRll7jV/nY1BijW+yn+DDjdyNHtFZMiMu/6xPT
P5y2SM8I4sZ3zINON9fq5zy5mec=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org