Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20383334.roa
File: 3139392e39312e3130332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: AzPPw++0qh4v3ux7NHyXsEekW+CjbiiznualaDjMwTY=
Subject key identifier: 8F:07:80:8C:E0:C9:68:55:2B:D9:D5:5B:B1:3A:AB:2E:B2:75:29:4F
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 0A70F1CFEFAB0679189D4235FAF03A88A7378DDB
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20383334.roa
Signing time: Wed 05 Jul 2023 17:09:31 +0000
ROA not before: Wed 05 Jul 2023 17:04:31 +0000
ROA not after: Wed 03 Jul 2024 17:09:31 +0000
asID: 834
IP address blocks: 199.91.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Oct 2023 08:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:70:f1:cf:ef:ab:06:79:18:9d:42:35:fa:f0:3a:88:a7:37:8d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Jul 5 17:04:31 2023 GMT
Not After : Jul 3 17:09:31 2024 GMT
Subject: CN=8F07808CE0C968552BD9D55BB13AAB2EB275294F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:0e:e5:ee:d0:1f:4b:9a:06:00:70:8c:be:
1b:58:74:14:8a:0a:4e:7a:ae:21:51:ed:c7:ac:f6:
56:6a:ba:ef:1f:e6:18:60:b8:b4:ad:a8:fc:13:e8:
88:ec:16:c6:d9:91:10:f9:38:e5:d2:86:99:64:6f:
c9:c9:a7:f3:a7:ca:49:96:80:b0:4b:99:04:ba:eb:
5e:dd:c1:12:55:be:6e:8e:c4:73:2d:5b:d0:22:3e:
23:28:2f:27:8a:41:df:09:fb:2f:82:e9:05:35:55:
d1:c6:ed:7b:ff:a2:1a:a9:e6:e5:bc:a5:b2:cf:31:
2a:0a:a9:73:bf:95:9c:14:f5:47:fb:6e:b1:0d:70:
ae:ce:62:2a:56:b5:c7:60:6f:b6:89:ea:d6:28:ea:
5a:a4:fe:c8:ba:5e:ac:43:03:39:15:93:5e:60:e1:
f5:32:87:61:11:02:9e:37:ab:1e:ee:11:27:d2:09:
5c:3c:db:48:90:a7:d6:47:84:a1:3b:ea:67:ef:85:
16:d7:2b:44:c6:3c:1f:4e:32:93:8f:3d:ef:b8:fc:
37:ee:c4:1a:75:23:59:21:54:f3:35:79:f8:1d:c3:
62:3c:3c:21:ed:a7:55:74:84:a8:53:ce:a2:b2:07:
75:7c:e3:a4:1a:39:83:51:ec:1c:8e:9f:81:d9:e6:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:07:80:8C:E0:C9:68:55:2B:D9:D5:5B:B1:3A:AB:2E:B2:75:29:4F
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:57:7b:f9:ad:c8:f8:d5:4d:1e:d7:27:ea:63:b4:6d:b4:53:
8d:71:c3:78:9d:31:65:ee:9e:ae:05:e1:6e:e0:2a:59:ac:1d:
02:01:20:15:e8:61:1e:9f:20:d4:97:8c:b8:db:a0:3b:25:9a:
54:06:51:19:d0:a7:22:01:e3:ec:4d:d6:d7:53:0b:5c:b7:a3:
2c:c4:32:39:8e:e8:77:a7:b9:cf:2b:0e:25:81:20:a6:10:29:
b2:ba:82:91:36:21:f8:c1:a0:67:9d:f2:e9:99:e0:06:e5:af:
8f:9a:df:a5:a2:95:30:d2:71:ff:7c:da:c5:39:a3:ad:15:5a:
61:85:38:ed:dd:48:09:cd:04:8c:18:d6:33:62:f6:11:9f:72:
9b:2f:cb:ce:67:91:71:4d:78:7c:ce:6b:0f:9a:05:69:a7:7d:
b1:8d:84:b1:08:55:4c:c0:5a:67:31:b1:63:b5:ea:96:1c:6b:
61:fe:fe:c2:45:a2:10:4d:1e:11:32:b2:ca:bf:3f:63:81:0e:
d0:f4:09:2f:df:21:6b:eb:7d:52:d0:a1:1c:29:e0:41:70:04:
24:5f:40:f3:ab:4c:2d:be:05:a8:ab:17:56:11:d3:c6:90:ee:
36:ec:4d:f3:fe:45:d8:8e:3f:6b:02:08:5b:60:14:8d:48:35:
09:09:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:06 2024 by rpki-client on console-fra.rpki-client.org