Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38392e302f32342d3234203d3e203136323736.roa
File: 36342e3235332e38392e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: 5ksbrKqIPeeA7LMMLYY5zzHCGYvoWX6QAz+5+e+BrSk=
Subject key identifier: B4:F2:B4:D9:DE:94:C0:4F:B9:A1:3E:DC:F7:82:A0:CD:84:38:75:9C
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 7C33FA3635C417F15BCCF1F42AA20C56BCF3D403
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38392e302f32342d3234203d3e203136323736.roa
Signing time: Sat 03 Feb 2024 01:18:19 +0000
ROA not before: Sat 03 Feb 2024 01:13:19 +0000
ROA not after: Sat 01 Feb 2025 01:18:19 +0000
asID: 16276
IP address blocks: 64.253.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:33:fa:36:35:c4:17:f1:5b:cc:f1:f4:2a:a2:0c:56:bc:f3:d4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Feb 3 01:13:19 2024 GMT
Not After : Feb 1 01:18:19 2025 GMT
Subject: CN=B4F2B4D9DE94C04FB9A13EDCF782A0CD8438759C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:ce:93:54:e9:d1:f8:89:79:f1:14:cb:87:
5e:0f:0b:d4:4a:ee:3c:96:18:59:67:52:49:6e:fc:
09:56:f4:e8:0d:25:f3:b7:14:4b:1b:6d:99:53:94:
c8:a5:d0:43:71:f7:1e:f5:1f:99:5f:be:78:30:51:
01:ca:c8:d4:f9:49:1b:fc:e1:d0:bf:2c:07:5c:ce:
c9:a3:82:3f:9a:52:b8:42:3c:17:62:0c:a5:74:27:
1e:61:eb:8d:72:27:00:ac:f7:b4:de:0f:38:5d:1c:
c9:20:d0:81:9c:9c:69:b4:a3:0e:9c:65:21:2b:86:
a9:32:30:e6:f9:dd:ba:af:12:29:1c:5d:9d:44:b0:
08:41:4e:db:64:e3:a3:e2:ae:dc:8b:00:00:a9:ef:
c3:95:5e:02:1c:5c:8e:1c:7e:ab:6f:2a:b9:0b:7e:
48:aa:93:d1:6c:81:e0:ff:96:d6:01:ad:5b:92:ff:
97:83:18:c9:5d:26:ce:51:c6:92:29:1a:3d:11:66:
9b:28:49:04:d5:57:d8:aa:b2:13:1c:70:3b:d2:76:
6d:e6:86:ff:ab:fc:1b:75:94:ab:ee:00:cf:23:59:
32:77:d5:58:27:0d:07:8e:3e:ba:39:1d:7b:1a:67:
7c:02:bf:63:0f:f5:ad:87:ff:09:e5:1a:a5:6c:0a:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F2:B4:D9:DE:94:C0:4F:B9:A1:3E:DC:F7:82:A0:CD:84:38:75:9C
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38392e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.253.89.0/24
Signature Algorithm: sha256WithRSAEncryption
93:03:a5:74:97:3c:bf:a7:d4:85:74:d0:37:bf:e9:95:2d:ff:
ed:28:20:1f:20:03:d6:7b:36:43:92:de:04:ad:2f:fe:a2:e0:
91:fc:ef:44:ad:00:28:37:ce:e8:d2:1d:75:c3:7f:65:bd:6d:
44:f2:af:f4:1d:a8:c1:61:5a:00:4a:b5:bf:1f:a4:ff:78:b1:
c3:2c:3d:83:2d:48:dd:db:03:5c:2e:0b:e2:a8:7f:e1:f8:16:
4b:b6:e8:b2:13:0d:06:f9:2f:43:ca:c8:89:7f:0f:55:ff:3b:
bf:6e:a0:51:39:ba:54:a8:6f:97:81:8e:72:50:17:29:b6:d1:
c6:51:55:65:54:bd:47:1c:58:ec:e1:9e:9c:6d:85:4d:da:69:
bc:f1:5f:b2:c4:b8:49:6c:4b:9d:29:d5:c8:dc:a9:91:fb:08:
07:25:0f:a9:1c:c1:88:ea:84:7a:e8:98:1e:55:3f:ca:6d:91:
08:ea:4c:83:ef:bb:2d:84:77:ef:53:f6:43:99:0c:ac:5f:2e:
8b:b3:0a:cf:a9:8e:e0:27:aa:f1:d1:ba:0c:c1:1b:0d:72:6b:
d8:06:53:2a:b0:c0:a8:eb:63:ff:82:77:72:59:eb:ec:19:5c:
f5:62:74:31:3f:6d:e1:fc:9b:4c:38:a1:f0:ff:c0:f6:4e:fc:
f9:9f:a8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-ams.rpki-client.org