Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20383334.roa
File: 3139392e36382e3231372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: XBxxFXatNTWs2UhkWsuZozPShE5o2S3IjdCHgSzM9ZY=
Subject key identifier: BE:9E:EC:65:AB:D2:31:28:FB:DE:A8:5F:A6:80:F8:09:F3:73:72:8D
Certificate issuer: /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial: 0A912E0DF3E4DB22EAAE9B4FE0C064484F3247B0
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20383334.roa
Signing time: Wed 06 Nov 2024 00:02:28 +0000
ROA not before: Tue 05 Nov 2024 23:57:28 +0000
ROA not after: Wed 05 Nov 2025 00:02:28 +0000
asID: 834
IP address blocks: 199.68.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 15:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:91:2e:0d:f3:e4:db:22:ea:ae:9b:4f:e0:c0:64:48:4f:32:47:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Validity
Not Before: Nov 5 23:57:28 2024 GMT
Not After : Nov 5 00:02:28 2025 GMT
Subject: CN=BE9EEC65ABD23128FBDEA85FA680F809F373728D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:02:5b:2b:15:e1:f9:f5:d4:c6:ba:50:40:c1:
87:37:59:c4:d1:c7:07:53:43:1d:09:ff:da:31:5e:
91:c1:a1:02:18:6c:0a:d7:2d:32:68:72:f5:47:c0:
d0:58:b9:cc:1e:eb:5e:b1:c4:a0:1f:e5:02:79:7b:
a2:28:42:06:bf:5b:e6:db:4a:4b:c1:a4:15:3d:c6:
7b:ea:93:25:a5:1d:fa:d1:37:91:6f:fd:4c:a8:9d:
ee:f6:61:87:95:c5:64:c2:2d:94:18:66:c1:c3:f2:
5f:3b:12:1b:aa:c1:fd:98:88:4f:2a:e3:2c:24:68:
b6:01:64:c2:71:36:ef:92:8f:cf:f4:dc:00:94:d4:
53:b1:46:7e:0b:e1:6f:db:4e:79:be:9d:b6:f2:55:
2b:71:97:bd:28:b7:8c:48:9e:cc:04:9d:f5:01:38:
bf:58:71:48:85:c6:56:e0:36:7c:b6:ab:51:ac:78:
19:e0:d4:39:34:1b:3a:f7:a4:ca:68:64:b4:a9:40:
f5:cf:12:23:91:5d:e6:35:c5:6f:fb:c0:9a:0a:c7:
92:66:aa:4f:12:f9:e5:c0:e6:4d:b2:6d:ce:cd:46:
4b:0c:0c:ef:d6:8a:6d:c1:d9:06:db:d0:5f:f5:15:
a0:67:e1:50:59:8e:3d:0f:a8:c0:28:a7:e9:b2:e7:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9E:EC:65:AB:D2:31:28:FB:DE:A8:5F:A6:80:F8:09:F3:73:72:8D
X509v3 Authority Key Identifier:
keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.68.217.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:14:d8:6d:be:ff:d8:c0:81:0b:44:17:aa:df:6f:7d:67:59:
35:15:79:24:82:50:54:e0:f2:d3:5b:b6:01:a4:b5:67:82:c0:
c9:35:8c:1c:d4:6c:da:02:3e:87:d0:90:7e:4c:a3:ee:ae:60:
2e:62:03:b2:9e:1c:7f:36:88:35:63:12:c1:88:4f:ca:0b:88:
70:06:a2:78:c8:95:26:d3:2c:93:cc:d1:ab:48:03:c6:8b:36:
a3:4e:32:34:2d:1a:77:0c:51:3a:5e:05:1c:75:72:d9:d3:bc:
b2:cc:e5:e6:6f:8a:26:99:4d:85:d3:e1:d8:50:bc:06:40:00:
cb:b3:8a:e4:3c:c9:48:da:7a:28:cf:d1:c5:29:81:3b:36:0b:
3e:7b:9a:72:95:e6:d4:b0:4f:8a:72:8b:7d:52:ac:16:66:28:
61:1a:9d:e2:83:14:11:c5:fa:92:e2:d4:8c:59:b5:30:1b:ca:
75:40:1e:0c:48:05:eb:20:f2:6a:11:ee:c1:18:60:18:15:51:
c7:a9:95:95:fb:b6:e2:43:5d:69:1e:40:ed:29:ff:a1:87:ea:
2b:4e:5b:30:ac:a0:2e:85:ec:01:5a:0b:5e:57:f3:67:d0:41:
42:9e:87:da:89:dd:bb:0b:65:70:37:cc:96:d3:e9:d7:3b:f6:
e6:e3:07:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 20:13:12 2024 by rpki-client on console-fra.rpki-client.org