Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20393936.roa
File: 3139392e36382e3231372e302f32342d3234203d3e20393936.roa (raw, json)
Hash identifier: lg3vydrfoaUn5gxINbeXlVOLtEnDX8/c+r+srbfiNyw=
Subject key identifier: DF:6C:3F:57:70:AA:78:D3:67:7E:54:13:C4:D7:49:C1:3D:45:29:F4
Certificate issuer: /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial: 788A4C81FF1FA02AD3AA15EEE4383C925E1306E1
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20393936.roa
Signing time: Thu 09 Nov 2023 06:25:46 +0000
ROA not before: Thu 09 Nov 2023 06:20:46 +0000
ROA not after: Thu 07 Nov 2024 06:25:46 +0000
asID: 996
IP address blocks: 199.68.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 May 2024 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:8a:4c:81:ff:1f:a0:2a:d3:aa:15:ee:e4:38:3c:92:5e:13:06:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Validity
Not Before: Nov 9 06:20:46 2023 GMT
Not After : Nov 7 06:25:46 2024 GMT
Subject: CN=DF6C3F5770AA78D3677E5413C4D749C13D4529F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:fd:8e:f6:2b:84:e4:4c:5f:a9:e3:a4:32:
54:26:19:3f:d5:77:eb:6e:95:ae:e0:3f:d8:88:e4:
e5:71:ed:6e:d9:0b:81:70:5d:d8:6a:75:eb:c0:ba:
66:c6:eb:49:5d:27:25:66:93:07:c8:3d:ea:90:49:
0e:b8:b5:51:8f:d8:0e:db:35:d0:57:38:25:c5:3b:
65:ea:83:4e:83:bc:e6:47:f8:4f:82:d2:df:e5:6f:
db:71:f3:1f:02:bd:fe:b0:d1:88:b8:b1:5b:15:d0:
5f:ff:ed:16:c3:68:1e:99:1d:36:93:3a:43:30:6f:
f8:25:03:b8:95:6a:40:aa:66:49:1c:5a:6f:61:7f:
58:6b:88:94:09:72:f8:d5:04:9d:02:d2:30:98:fe:
71:38:e0:fc:3e:18:f0:73:7a:b5:78:64:93:2a:5b:
d0:83:d5:f5:50:7e:70:0a:fd:23:31:d7:63:d6:24:
13:56:e3:72:c7:d3:92:6c:8e:2a:64:25:c8:34:aa:
60:77:b3:d0:fa:ba:e2:f4:e9:94:7c:ab:ca:d9:4d:
af:0d:41:d7:41:ef:49:5f:3b:98:c7:72:b9:ff:a5:
85:d8:c2:b5:92:37:13:c3:d7:68:75:f6:72:49:12:
19:ea:6d:5c:c4:0d:c9:fc:9f:dd:6e:20:9b:88:1e:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6C:3F:57:70:AA:78:D3:67:7E:54:13:C4:D7:49:C1:3D:45:29:F4
X509v3 Authority Key Identifier:
keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.68.217.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ad:f5:c2:03:6d:01:ba:d9:1f:f4:23:58:22:d7:09:06:d5:
3c:fe:b5:7b:e2:59:81:b1:55:fb:21:42:09:1f:3b:ba:ef:ed:
ba:3f:b4:b7:8f:12:15:d4:05:fb:c3:82:d5:86:03:a3:93:27:
db:72:08:38:e6:ea:d4:3d:f7:37:1e:95:65:61:16:a2:e0:8b:
4e:db:cf:97:44:4d:3e:99:5e:83:7e:dd:2c:9b:56:c5:b7:d7:
8c:20:fc:d2:06:25:72:45:bd:9f:15:0d:27:33:1f:90:fd:cb:
4f:25:3a:6a:69:fd:86:19:6d:58:f9:83:06:aa:a3:4b:2b:e5:
17:f3:70:e6:3c:d3:c2:fd:0c:dc:6d:f8:cd:61:39:17:54:c0:
4c:90:f4:e4:33:be:3b:74:41:6c:99:47:dc:4a:0d:2e:cb:12:
f8:1f:e2:15:5c:c5:d9:a1:3e:12:69:13:5a:8e:ff:93:0a:6f:
3d:9c:3f:e8:11:f9:dd:b9:8d:15:5e:30:1d:f5:42:07:75:9a:
63:be:d1:d6:52:11:fc:99:9c:0f:7e:22:25:ea:29:52:11:41:
83:39:ab:0b:8c:b1:0f:cb:88:dd:35:8a:73:e4:14:1a:af:70:
74:17:1a:3d:6f:88:49:47:f0:a8:c9:db:1c:e4:32:1d:9f:b3:
e3:b4:c0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 03:15:33 2024 by rpki-client on console-fra.rpki-client.org