Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136392e302f32342d3234203d3e20383334.roa
File: 3231362e3135312e3136392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 5E3VDosc1T/l/lVrWuYZoYnvseMpSlexEDnsk40UPCI=
Subject key identifier: 5F:96:51:64:B1:48:11:3D:48:75:C9:75:24:63:AC:0D:83:BF:F9:8D
Certificate issuer: /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial: 29A0DB6C38C175472E900FA2BF2917631448CA29
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136392e302f32342d3234203d3e20383334.roa
Signing time: Sun 10 Nov 2024 00:02:13 +0000
ROA not before: Sat 09 Nov 2024 23:57:13 +0000
ROA not after: Sun 09 Nov 2025 00:02:13 +0000
asID: 834
IP address blocks: 216.151.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a0:db:6c:38:c1:75:47:2e:90:0f:a2:bf:29:17:63:14:48:ca:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Validity
Not Before: Nov 9 23:57:13 2024 GMT
Not After : Nov 9 00:02:13 2025 GMT
Subject: CN=5F965164B148113D4875C9752463AC0D83BFF98D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:59:68:26:4f:32:0a:10:ae:60:d7:03:d2:
ff:ed:7c:7c:8d:e3:85:e3:9b:31:ed:32:f1:ae:16:
ba:cd:39:2f:96:07:21:ad:a9:3b:01:d7:eb:04:81:
c5:18:8b:46:04:3e:5b:38:c9:14:e0:09:da:ed:d4:
f1:b5:cc:34:db:0d:65:47:f5:62:b0:22:33:fb:bb:
66:35:df:88:96:01:2b:b3:09:df:ad:2e:c6:0f:67:
20:22:7c:54:d5:28:50:da:64:52:e9:a5:e3:e6:0a:
95:51:78:67:09:f3:f2:1a:d4:f8:39:b9:68:c7:1b:
2c:8b:70:37:2c:3d:ed:8b:55:18:82:74:59:86:87:
26:70:5e:58:ff:f9:bd:30:3a:c5:fa:dd:32:54:d8:
e9:1a:c1:62:54:8e:46:63:56:ce:f7:dd:14:b4:98:
1e:96:0f:69:31:32:eb:1f:73:c7:af:73:8b:ba:9f:
10:cc:ce:dd:52:21:e0:56:a5:8e:80:14:dc:e8:1f:
38:a0:89:4c:ef:5f:cb:05:de:c5:d9:be:8b:3a:e4:
9d:39:2a:5d:e0:53:03:be:b8:fd:dd:a8:43:52:54:
d9:91:d9:29:98:bd:3d:2b:af:25:60:45:ea:66:b8:
27:9c:47:bc:dd:20:ad:ef:58:0e:9d:cb:ce:46:7d:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:96:51:64:B1:48:11:3D:48:75:C9:75:24:63:AC:0D:83:BF:F9:8D
X509v3 Authority Key Identifier:
keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.151.169.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:db:8b:c9:65:1b:b2:e6:67:4e:74:9a:af:0c:08:e6:68:44:
11:74:61:e0:d9:87:c7:fc:1a:69:16:44:fa:07:ae:e6:4e:2a:
9c:94:ab:98:0e:18:d2:71:a3:f6:dd:bb:02:cc:22:94:ab:d8:
88:d7:fe:2e:fa:7f:20:12:8a:67:f7:ae:bb:f4:8d:b1:e4:5a:
c3:d1:05:b1:15:2d:e1:cf:d8:75:23:6c:08:52:5b:95:40:60:
79:cf:f6:78:56:93:a3:e3:e9:dd:c0:81:85:96:1e:2c:a9:98:
3a:a8:a5:dc:23:a4:5e:ac:6d:87:80:f8:d2:26:48:bb:e8:16:
d1:ea:be:74:2d:b9:ad:ec:f3:47:83:89:0a:88:6c:cb:ee:aa:
2e:1b:32:aa:ff:57:9b:41:10:ae:50:ee:79:50:8e:49:5b:63:
d7:f5:f1:d6:42:38:76:80:16:a6:32:89:06:db:d1:8f:ad:ce:
fc:cb:fc:23:9b:76:08:a8:d3:f3:2c:1b:ea:db:c6:99:4a:7f:
72:d6:12:9b:99:5e:ae:44:13:3f:38:20:6e:9d:05:79:68:c6:
29:f7:8b:df:cd:31:a0:66:c0:e9:56:a6:7f:eb:65:20:33:9f:
ed:6e:c5:0e:42:71:af:fb:87:05:ab:1a:da:4e:db:79:6a:6b:
3c:04:3a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:09:59 2024 by rpki-client on console-fra.rpki-client.org