Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e203233343730.roa
File: 36342e3235332e39302e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: CgTvmhNvjgDVrMJQ5uUDwgyuHJongKLsXutOsEi9dmo=
Subject key identifier: BE:46:EA:64:3B:CA:C3:D9:3A:F4:01:14:18:5C:9B:90:D1:D4:5B:1E
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 1DF575B947C5C3CB5691D1FD1CBD3E84AAAFC90B
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e203233343730.roa
Signing time: Sat 18 Nov 2023 13:49:02 +0000
ROA not before: Sat 18 Nov 2023 13:44:02 +0000
ROA not after: Sat 16 Nov 2024 13:49:02 +0000
asID: 23470
IP address blocks: 64.253.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Dec 2023 00:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f5:75:b9:47:c5:c3:cb:56:91:d1:fd:1c:bd:3e:84:aa:af:c9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Nov 18 13:44:02 2023 GMT
Not After : Nov 16 13:49:02 2024 GMT
Subject: CN=BE46EA643BCAC3D93AF40114185C9B90D1D45B1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:cc:68:cb:60:6d:f2:d7:09:f0:e0:73:7a:
71:6e:63:32:42:c9:d3:4f:95:70:61:2e:0b:a9:66:
88:5d:44:81:cf:1d:8a:8d:b0:9d:1c:26:82:af:48:
bb:07:f6:dc:27:a4:7b:3a:e6:4e:bf:4b:5c:8c:55:
a6:0e:71:b4:f9:93:92:dd:56:20:77:ad:cc:14:ce:
16:92:c9:2d:0d:da:3d:a9:f7:fb:59:b1:b2:58:62:
2a:c1:cc:5c:35:84:5a:d9:70:f0:d9:43:8c:7d:e5:
f5:95:0d:cb:7a:39:b6:f0:55:57:36:82:24:8f:fd:
bc:ad:b6:9c:44:3a:82:4f:6d:d2:c6:5a:28:01:92:
aa:04:46:4d:11:68:d0:1c:5f:30:69:a3:bd:86:d7:
c4:ec:4b:e5:27:61:ee:21:8e:ca:e7:3b:ea:6c:d5:
1d:c7:0a:22:22:37:1b:19:77:c1:53:f9:2e:f3:fa:
78:7f:3f:8d:4e:70:f5:00:4e:af:9d:5b:b9:ad:07:
3e:f3:d0:6b:a5:0d:9e:7a:55:f4:52:48:7f:47:9d:
a4:8f:74:94:30:a6:91:f1:33:14:26:4f:22:9d:5a:
a2:ec:70:10:29:87:5f:47:38:b4:9d:d2:91:07:8b:
5b:fb:55:c6:86:7d:f3:af:3d:7f:3a:e8:d8:1c:c9:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:46:EA:64:3B:CA:C3:D9:3A:F4:01:14:18:5C:9B:90:D1:D4:5B:1E
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.253.90.0/24
Signature Algorithm: sha256WithRSAEncryption
44:13:3b:19:38:af:0a:0b:28:08:80:a7:2f:6f:52:7e:dd:f6:
4f:ae:51:a9:01:59:45:a0:f8:32:c3:ab:3d:a2:f1:b3:c0:ca:
2e:13:3a:ac:63:cb:aa:2f:db:c1:3e:c8:8c:5d:7e:21:27:2f:
a8:04:10:04:bc:ae:ae:d0:0b:dc:f8:97:cb:cb:2b:6d:08:2d:
e7:b7:a0:2a:d3:90:3d:5a:90:c9:d3:b5:0c:ec:22:f0:f6:8f:
ca:4f:24:33:fc:2d:d0:a9:10:69:22:b7:54:17:1f:0c:23:a6:
08:26:84:01:9c:37:f4:a4:06:fd:c2:b2:31:a5:36:13:9c:86:
a0:07:1c:f9:2d:c6:ad:be:2a:59:cb:52:8d:48:14:22:66:34:
59:a9:50:05:ed:27:9c:6e:92:17:51:e0:20:8b:ac:d5:31:47:
9b:61:a4:a7:da:93:c6:97:5d:0a:09:39:05:6d:41:11:ef:52:
63:1c:74:b4:fa:ed:98:25:5e:43:b2:ab:f5:58:1b:80:a8:d9:
36:f0:10:7f:90:77:fb:9a:a5:35:92:2b:15:d7:ac:dd:d1:19:
25:ff:20:47:a0:61:a2:52:3c:31:b1:d0:94:57:80:d1:69:1d:
b4:b9:84:fb:67:2c:0d:4c:d1:6b:64:28:5e:64:b2:b9:63:3b:
3a:07:15:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-ams.rpki-client.org