Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203631333137.roa
File: 3139392e39312e3130312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: y/Mpr2Yi85OA8aWOqs1uNMfR2N8VY3r4y+qpM4CQv7s=
Subject key identifier: E6:F2:5C:02:92:AE:CB:37:CE:FC:BB:1A:C9:7F:75:BF:A6:FD:F7:00
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 068ACF3E485EA3845D9CC0C1730A392A489BAFF8
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203631333137.roa
Signing time: Wed 05 Jul 2023 17:09:07 +0000
ROA not before: Wed 05 Jul 2023 17:04:07 +0000
ROA not after: Wed 03 Jul 2024 17:09:07 +0000
asID: 61317
IP address blocks: 199.91.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Jul 2023 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:8a:cf:3e:48:5e:a3:84:5d:9c:c0:c1:73:0a:39:2a:48:9b:af:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Jul 5 17:04:07 2023 GMT
Not After : Jul 3 17:09:07 2024 GMT
Subject: CN=E6F25C0292AECB37CEFCBB1AC97F75BFA6FDF700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:63:05:e1:80:93:3e:31:83:ad:76:15:4c:
88:83:2f:94:ae:1a:00:b7:9e:f4:77:f0:60:c4:45:
b1:93:44:34:85:be:3f:3c:b2:8c:1c:d5:4f:1c:ae:
b5:1f:0b:8e:8e:6b:a1:70:69:6f:0a:4b:d0:f0:61:
15:92:82:1c:0d:b7:5a:cb:d6:20:94:87:88:1f:5a:
7c:cc:62:3d:91:b4:a0:a9:b7:b9:ef:0a:10:1b:56:
3c:a8:87:09:3b:d8:68:73:a7:77:ca:20:16:fe:1b:
a6:24:50:0f:64:a8:fc:36:34:9c:ba:57:f1:13:e3:
9c:3d:1c:28:f8:f8:25:0a:6a:61:7c:2a:15:15:ad:
97:2e:bf:db:5e:30:43:8a:52:b6:6e:b5:15:81:e6:
58:ba:35:e9:cd:66:b3:5f:70:2d:17:ea:b6:19:d9:
2a:f8:cd:7e:11:d7:cc:2d:98:c1:c0:e1:8d:61:09:
26:c3:a5:0e:0e:5c:77:a6:83:61:5d:e4:7e:ef:2a:
3a:89:5c:7a:e9:63:99:e5:ee:2c:e8:81:b1:f9:86:
97:91:c0:e4:36:c3:a1:a2:18:7e:a8:27:2f:9e:d1:
52:56:bb:be:21:dc:4b:85:d5:d8:de:80:0d:16:6d:
0c:70:3b:7a:5d:90:a7:8e:a4:70:6a:0e:28:97:3b:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F2:5C:02:92:AE:CB:37:CE:FC:BB:1A:C9:7F:75:BF:A6:FD:F7:00
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.101.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e0:4c:f5:cf:6e:a3:03:bf:a2:c2:a6:86:92:02:cd:5e:d8:
c5:cc:38:16:4d:59:b7:0b:4d:7c:2c:f0:df:61:19:b8:01:4f:
56:52:9b:71:3a:4a:16:ed:fa:6d:86:c7:9a:14:2d:a5:3f:fd:
0c:0d:0f:1d:fe:7c:1d:66:69:3d:18:99:18:07:8e:6b:15:03:
42:a0:82:e8:fb:48:a5:bf:c5:16:5e:51:00:1b:9e:87:96:49:
91:3e:65:27:06:b4:4e:66:19:cb:e7:ce:ee:36:d4:c9:40:bf:
39:12:bb:4e:5c:9d:7d:5a:7c:3c:0e:f2:bb:7b:96:59:13:17:
f8:46:56:f2:93:fe:da:23:c1:2c:bf:8d:e2:ea:8e:90:7f:bc:
36:22:19:43:ed:33:65:87:12:0e:37:83:df:bc:f0:b0:cc:5f:
3f:75:30:e8:64:96:6d:ab:05:6a:5e:cc:71:4c:18:1e:58:4d:
07:42:8b:af:a3:59:10:66:ad:fb:1e:ec:73:a3:92:50:78:01:
cc:1a:0d:e1:e1:5a:c6:99:72:83:45:15:ce:a9:a9:ac:0d:95:
c1:7e:e0:71:64:9d:11:4f:4c:70:c9:62:00:15:5d:45:c1:2e:
87:e6:aa:5e:aa:87:41:f7:90:53:fe:66:6a:be:a4:df:6e:cc:
df:e9:d7:e2
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUBorPPkheo4RdnMDBcwo5Kkibr/gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjMwNzA1MTcwNDA3WhcNMjQwNzAzMTcwOTA3
WjAzMTEwLwYDVQQDEyhFNkYyNUMwMjkyQUVDQjM3Q0VGQ0JCMUFDOTdGNzVCRkE2
RkRGNzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0adjBeGAkz4x
g612FUyIgy+UrhoAt570d/BgxEWxk0Q0hb4/PLKMHNVPHK61HwuOjmuhcGlvCkvQ
8GEVkoIcDbday9YglIeIH1p8zGI9kbSgqbe57woQG1Y8qIcJO9hoc6d3yiAW/hum
JFAPZKj8NjSculfxE+OcPRwo+PglCmphfCoVFa2XLr/bXjBDilK2brUVgeZYujXp
zWazX3AtF+q2Gdkq+M1+EdfMLZjBwOGNYQkmw6UODlx3poNhXeR+7yo6iVx66WOZ
5e4s6IGx+YaXkcDkNsOhohh+qCcvntFSVru+IdxLhdXY3oANFm0McDt6XZCnjqRw
ag4olzs4iwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFObyXAKSrss3zvy7Gsl/db+m
/fcAMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTI3
MDRkNWYzMzJlYi8wLzMxMzkzOTJlMzkzMTJlMzEzMDMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMdbZTANBgkqhkiG9w0BAQsF
AAOCAQEAhuBM9c9uowO/osKmhpICzV7Yxcw4Fk1ZtwtNfCzw32EZuAFPVlKbcTpK
Fu36bYbHmhQtpT/9DA0PHf58HWZpPRiZGAeOaxUDQqCC6PtIpb/FFl5RABueh5ZJ
kT5lJwa0TmYZy+fO7jbUyUC/ORK7TlydfVp8PA7yu3uWWRMX+EZW8pP+2iPBLL+N
4uqOkH+8NiIZQ+0zZYcSDjeD37zwsMxfP3Uw6GSWbasFal7McUwYHlhNB0KLr6NZ
EGat+x7sc6OSUHgBzBoN4eFaxplyg0UVzqmprA2VwX7gcWSdEU9McMliABVdRcEu
h+aqXqqHQfeQU/5mar6k327M3+nX4g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-ams.rpki-client.org