Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e20313336373434.roa
File: 3139392e39312e39362e302f32342d3234203d3e20313336373434.roa (raw, json)
Hash identifier: W6dCCskqmmG2/AQ+vpifqTa0+akH+Y0EIh/tdedDQGk=
Subject key identifier: 6D:3E:FE:E9:73:EA:4B:21:63:6F:94:1C:31:AD:BE:0D:47:4F:C4:2E
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 452BD39C96DC1F5B7FA6CF2D0A29EDC19A271EE1
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e20313336373434.roa
Signing time: Wed 05 Jun 2024 17:48:58 +0000
ROA not before: Wed 05 Jun 2024 17:43:58 +0000
ROA not after: Wed 04 Jun 2025 17:48:58 +0000
asID: 136744
IP address blocks: 199.91.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:2b:d3:9c:96:dc:1f:5b:7f:a6:cf:2d:0a:29:ed:c1:9a:27:1e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Jun 5 17:43:58 2024 GMT
Not After : Jun 4 17:48:58 2025 GMT
Subject: CN=6D3EFEE973EA4B21636F941C31ADBE0D474FC42E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:32:df:ef:86:4c:83:8b:c7:cc:e0:74:f4:
48:70:90:ac:e8:02:0c:10:58:19:de:4d:03:3e:0b:
02:5d:bc:22:c1:50:83:78:59:dc:37:6f:7e:b6:25:
d9:f1:89:ff:6c:db:d0:48:93:b2:43:83:12:d0:a1:
c1:d9:89:02:ff:45:78:3f:46:bc:80:d4:15:5e:03:
b3:5e:ae:c9:fd:4f:98:80:09:3b:28:68:05:72:47:
0d:54:95:ec:96:79:c2:1c:8b:b1:29:61:a0:45:32:
14:f0:52:1a:4b:ee:55:95:94:a6:be:67:e7:1b:55:
64:3b:35:58:a7:d7:59:d3:97:2e:11:fc:eb:a3:80:
32:39:07:f6:98:6a:fe:35:32:ad:c6:49:e2:17:11:
3a:4e:6e:63:02:ce:16:50:dd:0f:da:c3:fe:cc:05:
29:86:2c:2a:07:04:87:5a:c5:26:52:78:bf:f8:96:
23:d0:62:ab:bf:eb:fc:fb:c5:fa:b7:e6:fe:27:b7:
d5:4f:08:dc:35:2d:fc:c7:47:96:c0:74:25:24:79:
52:23:d5:82:15:aa:d0:3b:d7:40:66:07:93:e4:76:
4d:65:35:1c:8d:e1:5f:e8:ef:ea:c9:07:d5:5c:91:
84:b6:8a:c7:d0:f9:b4:ba:72:07:d4:d4:03:0f:91:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3E:FE:E9:73:EA:4B:21:63:6F:94:1C:31:AD:BE:0D:47:4F:C4:2E
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e20313336373434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.96.0/24
Signature Algorithm: sha256WithRSAEncryption
44:32:25:1c:26:b6:83:7e:63:78:f0:4c:ca:f9:cf:a6:70:88:
84:f3:6b:81:1f:3b:c5:a6:79:25:92:ca:02:79:ab:b2:12:ae:
82:09:56:a0:73:1f:3d:6d:67:5c:c9:b9:19:6b:c1:18:76:bb:
57:93:e7:28:be:a2:13:ae:bf:81:bd:4d:27:e0:42:87:8e:86:
fa:c4:d2:e1:e5:d4:10:b8:f3:ea:b1:f2:38:3f:5f:c4:08:99:
5b:d8:22:96:96:be:47:2f:0e:05:d0:c9:c5:92:9e:09:3e:99:
50:37:8e:a2:bc:4d:be:5f:11:7d:94:07:21:09:f2:00:1c:44:
9c:1b:1d:e3:0f:1c:46:67:9b:74:65:7a:f2:b9:6a:39:7e:08:
e5:8c:c2:8e:a4:8e:71:4f:74:03:09:0f:3b:89:73:44:fb:db:
e2:cb:87:a7:42:d9:37:6f:6b:41:60:ca:2b:98:3f:c1:45:45:
e1:bd:c8:34:b3:d7:26:70:7f:7b:98:ef:15:70:be:7c:7f:a7:
b3:f5:7f:6d:5e:b9:17:3e:b5:c0:9b:2d:22:bb:58:8b:da:5e:
81:81:fe:21:1c:92:80:72:52:5b:1b:8f:19:2a:b9:1c:9e:d4:
bd:76:3f:6c:24:0e:a6:5b:56:88:21:36:ac:07:61:1d:14:e2:
da:63:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 01:16:55 2024 by rpki-client on console-fra.rpki-client.org