Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32332d3234203d3e20383334.roa
File: 3130342e3235342e3139322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: J42GaGFBE56tuL8fybMlFJ/3QDJ+HONH36DHwS8m2EM=
Subject key identifier: CF:00:A1:C9:A9:3F:6E:DC:B6:14:A7:BB:0D:F5:2F:47:7F:1E:FF:71
Certificate issuer: /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial: 0D9A1147C14969CAD8F736ACCA50D21E7AAA3D4B
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32332d3234203d3e20383334.roa
Signing time: Fri 15 Mar 2024 08:11:11 +0000
ROA not before: Fri 15 Mar 2024 08:06:11 +0000
ROA not after: Fri 14 Mar 2025 08:11:11 +0000
asID: 834
IP address blocks: 104.254.192.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 14:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:9a:11:47:c1:49:69:ca:d8:f7:36:ac:ca:50:d2:1e:7a:aa:3d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Validity
Not Before: Mar 15 08:06:11 2024 GMT
Not After : Mar 14 08:11:11 2025 GMT
Subject: CN=CF00A1C9A93F6EDCB614A7BB0DF52F477F1EFF71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:7e:4e:ae:82:aa:fa:5f:70:a0:11:90:f9:
dc:ba:a6:e6:8a:1e:0b:49:01:bc:fa:9e:0f:f1:cb:
b8:5a:41:85:b4:d7:a2:0f:c3:b9:f6:a0:6e:aa:27:
aa:b7:a8:df:a4:51:bd:43:40:82:05:a0:2c:31:62:
92:fe:65:25:fe:8b:99:ab:bc:eb:9f:22:56:35:ad:
03:3e:ce:73:95:12:ec:69:a7:e7:5b:af:86:09:3c:
14:f5:92:af:38:ec:c3:e3:1d:c8:1f:18:22:cb:3d:
67:0f:0c:df:d5:2b:84:f2:bc:55:c3:a5:a5:b5:d4:
72:a6:f6:37:51:52:9d:0d:82:df:61:45:39:e2:10:
67:21:a2:8d:4a:50:f7:59:5a:94:d3:38:a2:b8:c4:
33:73:be:dc:b9:61:30:f6:61:ac:b0:04:a5:a0:a7:
51:1f:41:e9:6b:75:b7:ae:6c:a0:94:8d:69:2d:be:
34:ed:06:19:a8:af:6d:e2:0d:69:2c:70:80:6e:e6:
76:16:7b:55:be:8c:db:9d:d2:9c:4e:db:eb:65:52:
f5:52:2b:a3:33:cf:1b:a8:50:2b:85:4c:6c:44:bb:
5f:26:01:b7:03:bd:a9:ec:fd:b0:a8:2a:23:be:4d:
23:0e:7a:b1:3d:22:7a:2b:b2:36:33:93:43:8f:7c:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:00:A1:C9:A9:3F:6E:DC:B6:14:A7:BB:0D:F5:2F:47:7F:1E:FF:71
X509v3 Authority Key Identifier:
keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.254.192.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:47:81:c2:92:a2:42:25:86:14:be:8d:75:41:2c:4f:9a:e6:
bc:a8:a5:89:5b:f6:eb:99:db:54:90:35:0a:56:8e:99:b7:f6:
5b:f4:7e:35:d1:ac:05:04:fe:16:63:b9:e6:13:df:e5:4a:8f:
dd:45:8e:5f:8a:78:bb:54:86:0c:58:d7:28:8d:00:b8:0c:36:
5f:44:86:2a:5d:b8:c3:2c:4a:e4:00:5d:08:da:a9:be:b2:49:
51:1e:12:6c:1b:7f:80:97:21:7e:9b:8c:13:69:e3:03:48:48:
d2:56:3c:df:bd:0e:89:0e:70:e4:53:61:03:69:6f:fc:f2:06:
24:1b:23:35:23:1d:96:c2:25:9c:e1:e1:af:ed:19:72:1d:39:
d3:f4:1d:ac:f4:58:23:aa:be:20:69:a6:74:c5:ea:ee:48:92:
87:66:0a:f1:ff:64:f3:b5:cc:1b:f0:08:73:7e:53:c5:ee:05:
b8:9b:ca:9c:22:01:4c:ae:b4:8b:6d:82:11:5e:9a:08:a9:eb:
02:e5:b8:16:23:94:58:b9:29:0b:88:e6:b2:74:ae:76:2e:94:
e9:eb:eb:bb:30:f8:5d:cc:ed:a1:f5:be:4c:71:b7:e0:24:23:
88:67:a7:0b:66:63:a0:90:be:90:20:f1:df:33:c1:58:15:5d:
c9:b6:22:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org