Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135342e302f32342d3234203d3e2035363530.roa
File: 34372e3136302e3135342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: Yt1tW5kFwYE8HJd0hq/cX0m/G87PRVfanCwbDooQmFE=
Subject key identifier: A3:E3:42:AC:BD:B0:A2:3C:B7:54:F8:18:33:2A:92:A9:52:27:06:0B
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 0856505C0BF1245786BFC359861FD1CCC0F25DC2
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135342e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:25:37 +0000
ROA not before: Thu 02 Nov 2023 11:20:37 +0000
ROA not after: Thu 31 Oct 2024 11:25:37 +0000
asID: 5650
IP address blocks: 47.160.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:56:50:5c:0b:f1:24:57:86:bf:c3:59:86:1f:d1:cc:c0:f2:5d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Nov 2 11:20:37 2023 GMT
Not After : Oct 31 11:25:37 2024 GMT
Subject: CN=A3E342ACBDB0A23CB754F818332A92A95227060B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7f:e1:bd:5e:88:97:2d:54:66:6e:75:c6:d0:
ce:32:8a:1b:be:8b:e2:5f:48:ab:41:16:0c:84:9f:
e9:29:a4:ef:04:ec:e2:e0:89:2c:2e:6c:74:48:c0:
2f:a3:cb:5d:3b:9e:bf:f0:60:18:37:32:12:96:05:
85:e0:a7:2a:5f:48:df:ea:fb:d7:99:74:56:3c:16:
30:fb:b4:1c:de:b9:4a:65:8c:49:fe:04:39:7b:1d:
0c:55:9e:c9:f3:1e:af:31:33:b9:8e:94:63:3f:10:
89:6e:ce:2a:3b:5f:fd:8b:3e:cc:cc:81:2e:23:3e:
82:d3:e9:48:fd:66:85:e9:d6:11:b4:d9:13:52:c9:
52:b8:1b:6a:ad:35:37:ab:70:98:29:e9:ac:e2:50:
de:b1:d4:ae:9c:77:76:7f:04:a0:39:e6:f8:b0:3f:
3b:30:a6:26:84:aa:0b:b5:14:9c:15:3b:68:d0:e2:
bf:8a:43:03:18:04:7d:0f:cc:02:a6:30:ce:5c:6a:
f2:e1:76:85:80:56:1b:f2:6a:9b:70:3d:86:8b:93:
89:c6:a9:52:7c:67:6d:e3:74:61:71:0b:8b:e5:d3:
23:5d:00:95:c0:be:56:a1:5a:25:13:a8:d0:a6:56:
fc:90:90:23:fb:56:5d:32:c1:3f:b8:ec:39:aa:5a:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E3:42:AC:BD:B0:A2:3C:B7:54:F8:18:33:2A:92:A9:52:27:06:0B
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3135342e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.160.154.0/24
Signature Algorithm: sha256WithRSAEncryption
37:8d:f8:fb:93:86:88:e8:27:83:47:e0:48:4f:d8:37:cd:9d:
4f:50:51:c5:24:80:69:6f:6b:ae:ec:49:55:59:5b:c4:46:c5:
05:89:23:9f:fe:6f:98:dc:81:73:ab:7d:cb:88:ff:1f:5c:7f:
3c:d0:18:86:ba:41:b2:b8:01:5e:b8:39:a8:69:d9:61:a9:72:
5f:72:d5:10:96:9f:da:ab:bf:de:07:7d:72:d9:be:30:95:4f:
80:66:70:af:49:7f:8a:7a:82:74:66:c6:95:67:c4:e6:8f:12:
92:8c:23:27:1d:88:15:80:64:29:c2:da:d1:37:45:f2:9e:96:
a2:71:e4:ca:98:06:5e:ae:70:b6:b2:82:3d:de:51:a1:09:6a:
0d:cf:38:be:02:44:73:c7:af:5a:c8:4f:37:39:77:18:68:ca:
ec:ae:6a:f7:46:52:eb:7f:57:6b:11:ad:1f:be:21:40:d2:7e:
ab:cc:a5:ca:90:d0:34:16:ef:bc:ad:e3:10:db:c0:27:ab:d6:
5f:73:45:2f:75:ce:41:34:0d:26:76:3a:4e:4f:e6:55:d0:f5:
1a:f8:ff:43:da:2b:6e:d0:86:41:bd:42:64:02:0b:ad:fe:54:
45:53:fa:5a:ee:b0:a5:6e:80:14:c5:f7:2f:a9:e4:9f:57:65:
72:33:af:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org