Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e372e302f32342d3234203d3e203633333232.roa
File: 3134322e3134372e372e302f32342d3234203d3e203633333232.roa (raw, json)
Hash identifier: gHsyIkK6x5SmFEbREtT7lChtbmHLclbjn//qmGNlq6Q=
Subject key identifier: B1:9B:B3:B8:6E:F0:7E:BB:0B:C3:71:BC:FE:B3:15:DD:60:E1:ED:42
Certificate issuer: /CN=c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347
Certificate serial: 04ACC89CA552A46FFEE2AD4B24EC51121E074BB3
Authority key identifier: 21:EF:AC:AF:1A:16:2D:6A:12:C0:F1:0A:28:BE:95:D0:F3:06:93:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b7592484-1960-4d36-b7eb-45faebea987d/c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e372e302f32342d3234203d3e203633333232.roa
Signing time: Thu 27 Jun 2024 18:31:20 +0000
ROA not before: Thu 27 Jun 2024 18:26:20 +0000
ROA not after: Thu 26 Jun 2025 18:31:20 +0000
asID: 63322
IP address blocks: 142.147.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 18:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ac:c8:9c:a5:52:a4:6f:fe:e2:ad:4b:24:ec:51:12:1e:07:4b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347
Validity
Not Before: Jun 27 18:26:20 2024 GMT
Not After : Jun 26 18:31:20 2025 GMT
Subject: CN=B19BB3B86EF07EBB0BC371BCFEB315DD60E1ED42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e8:eb:96:50:1f:65:dd:55:d2:a4:32:8f:aa:
25:54:64:c9:58:f4:a4:dd:fc:8b:43:e5:4f:e5:7e:
c7:1f:4d:31:46:b0:3d:0e:5c:19:4b:e9:20:3f:4a:
f9:6d:34:61:d8:ec:69:8b:3d:c1:49:7e:bc:89:48:
3f:05:0d:c8:e8:c9:28:e2:38:44:9f:37:4c:00:e5:
40:6e:a3:a5:4b:ca:01:28:91:39:b8:35:e5:27:bd:
c8:50:65:16:a5:53:00:1f:b3:a2:b2:7f:21:cd:70:
77:0b:27:a0:72:d9:e8:d9:fb:d9:e7:cf:4a:da:23:
f0:2b:5a:5f:86:b9:0a:48:12:8f:28:8c:33:83:50:
35:1e:07:87:77:12:36:7f:eb:8a:68:0d:4d:41:87:
b5:8e:49:02:9a:f9:45:e3:10:51:3b:0d:70:d8:70:
a0:c6:c7:2f:a6:ee:a6:94:cc:71:99:16:f1:26:b7:
f4:c1:08:e0:e0:9d:13:87:f8:7d:40:2b:7a:b3:76:
73:ca:ae:17:dd:57:36:c8:d3:00:62:8f:6d:26:06:
48:df:52:c2:be:b9:5f:fb:78:a3:e3:ad:e6:20:67:
08:f2:a4:d1:b7:dd:91:39:7f:c2:94:27:e7:2a:5f:
33:f5:d6:ec:9b:1c:4e:d6:33:1e:c8:14:65:19:67:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9B:B3:B8:6E:F0:7E:BB:0B:C3:71:BC:FE:B3:15:DD:60:E1:ED:42
X509v3 Authority Key Identifier:
keyid:21:EF:AC:AF:1A:16:2D:6A:12:C0:F1:0A:28:BE:95:D0:F3:06:93:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/21EFACAF1A162D6A12C0F10A28BE95D0F30693B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b7592484-1960-4d36-b7eb-45faebea987d/c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e372e302f32342d3234203d3e203633333232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.147.7.0/24
Signature Algorithm: sha256WithRSAEncryption
22:6e:32:17:c7:bb:fd:ef:b7:88:b2:4e:f0:73:1d:c2:2e:df:
e8:2c:fc:79:ee:ec:e1:17:fd:f5:21:1c:a0:00:fc:ac:b3:8c:
a3:0b:75:71:67:b3:9e:2a:d0:73:ae:8a:4f:6e:e6:48:9f:af:
6c:7b:03:fe:6a:bf:87:d5:71:54:1c:e0:d9:8a:ed:dd:50:75:
b3:a5:d8:af:ba:55:8a:69:bc:a5:68:ac:f5:8c:fe:8e:7d:39:
2b:54:45:bb:04:19:a5:b2:a0:7e:d4:4f:e3:e0:99:9d:77:7f:
e5:ad:20:bc:96:ff:a4:c8:db:d7:c4:55:46:3c:89:ce:ae:e8:
ab:a7:89:2c:3b:74:bb:a9:df:ee:ff:d7:93:9f:45:4f:88:23:
d3:23:8b:06:97:00:bc:c6:89:f5:54:c1:fa:fc:44:87:09:c5:
23:a4:4a:c7:d8:06:84:bf:f5:a6:c2:d9:1c:51:e6:44:a1:7a:
68:a8:f1:36:c4:5e:7b:91:95:96:61:89:1b:42:62:99:c5:0a:
8b:d3:81:26:08:b2:34:d8:82:bf:f5:69:be:84:62:29:c9:40:
ff:a0:f1:75:d7:8f:d0:89:55:69:c1:0e:3a:db:a9:17:30:7c:
5d:12:96:33:6a:78:a6:8e:45:74:f8:20:7b:5e:ae:9e:9f:fe:
ae:45:e0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 21:06:02 2024 by rpki-client on console-fra.rpki-client.org