Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20323132323338.roa
File: 36392e3136362e3232392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: oTdpkE/pESzb9dSwS3MOW/tltzEYlBAumfFUWx55H9s=
Subject key identifier: C1:FB:CB:5F:E3:0E:CD:90:B3:88:98:AE:53:56:CD:C9:CF:9D:8C:DC
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 3048E8BAFD040F749784E3E2E4A7573956EC57C8
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20323132323338.roa
Signing time: Sat 02 Dec 2023 06:50:57 +0000
ROA not before: Sat 02 Dec 2023 06:45:57 +0000
ROA not after: Sat 30 Nov 2024 06:50:57 +0000
asID: 212238
IP address blocks: 69.166.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:48:e8:ba:fd:04:0f:74:97:84:e3:e2:e4:a7:57:39:56:ec:57:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Dec 2 06:45:57 2023 GMT
Not After : Nov 30 06:50:57 2024 GMT
Subject: CN=C1FBCB5FE30ECD90B38898AE5356CDC9CF9D8CDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:ea:68:c4:d4:02:38:b5:c3:61:4c:ae:a8:
3b:b9:c9:6c:85:f5:9c:b5:d4:02:40:da:d6:03:71:
28:9e:82:42:c2:ee:55:fa:21:0c:f8:bd:02:27:03:
60:fc:70:d3:38:f6:2b:d8:99:79:db:ba:5f:e2:5d:
1a:3a:23:45:94:20:8b:97:29:d8:76:cd:84:bf:24:
7f:5f:f3:de:bf:f5:e4:30:41:93:33:c0:ef:10:8e:
00:c4:bf:87:00:a4:61:f0:dd:4b:3f:f6:25:fe:07:
b4:a1:fc:a7:be:e1:ef:02:02:4a:6b:e4:f0:06:4b:
fb:06:b4:c9:39:5a:63:42:1b:f4:9b:fb:8e:a0:33:
4e:8a:60:fb:30:0b:c4:09:a9:8d:86:b5:9a:12:7a:
80:74:19:9a:85:9a:de:29:64:c6:ea:d9:22:67:33:
4b:13:75:e0:48:e9:91:ab:fa:92:11:46:01:5c:04:
38:22:dd:1c:d6:0b:ee:87:16:05:5d:1a:7e:3b:b2:
e3:54:34:c5:bf:d0:fb:03:3a:51:48:2e:52:fa:ca:
c3:9d:a1:f4:7e:2a:52:bc:48:de:aa:2d:58:da:d9:
09:59:62:a9:84:4a:42:ea:1c:f9:6c:60:cb:f7:66:
bf:4c:fd:15:e2:b2:3a:a8:6f:26:e3:3f:85:8c:09:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FB:CB:5F:E3:0E:CD:90:B3:88:98:AE:53:56:CD:C9:CF:9D:8C:DC
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.166.229.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3f:c1:6a:49:e2:c2:d1:27:39:5e:5d:5e:9b:e2:1a:25:fb:
75:b1:bd:ba:71:af:8b:1a:36:b8:e0:1e:d6:84:59:96:14:4d:
8d:a7:86:eb:c9:3d:b5:e4:7b:e7:bb:ac:54:8e:27:aa:1e:9b:
de:40:00:db:ae:f6:b7:93:d7:9c:6a:ae:09:07:51:82:68:94:
ba:c4:96:0b:89:f2:f2:31:2b:2b:93:e7:c4:c4:71:7a:1e:e4:
a3:f3:1c:af:80:20:88:f1:09:0b:fe:fd:ab:6f:39:c2:09:cd:
70:6d:57:c6:87:36:81:a1:d2:10:36:12:cd:3f:6c:f2:2e:2c:
7f:7f:9a:e4:93:6d:0a:12:28:90:ef:a9:bc:fb:c2:01:ea:bc:
09:d0:7f:d2:5c:5f:11:86:83:2d:51:d5:35:b9:0d:8e:bf:99:
77:1e:ab:94:19:10:73:ab:d2:d8:a3:fe:62:02:e4:ad:27:fe:
f0:b9:f7:6a:1c:a1:d6:b1:93:68:c4:6b:2e:61:f3:a6:e5:9c:
1e:c0:dc:7d:56:8a:07:d1:29:f3:f0:bc:bd:78:f4:5c:a9:2a:
91:32:cf:b5:7e:a4:40:58:59:3b:de:53:57:e4:63:3f:c8:eb:
2a:52:20:9c:44:f0:b9:98:b7:12:bc:00:b6:1d:b6:21:30:6d:
e5:9b:cd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:06 2024 by rpki-client on console-fra.rpki-client.org