Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3138392e302f32342d3234203d3e203432303535.roa
File: 3139332e32392e3138392e302f32342d3234203d3e203432303535.roa (raw, json)
Hash identifier: 93mrCzpUA7ey5jGYcvNABouyT+WUMsxKziFbLKNWU7M=
Subject key identifier: 23:B1:E4:11:B6:64:53:D3:F7:C1:7A:9D:1A:38:FC:3D:8A:15:DC:37
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 49F22C04601D709F78F0D174886570016DCF1632
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3138392e302f32342d3234203d3e203432303535.roa
Signing time: Tue 03 Oct 2023 15:18:47 +0000
ROA not before: Tue 03 Oct 2023 15:13:47 +0000
ROA not after: Tue 01 Oct 2024 15:18:47 +0000
asID: 42055
IP address blocks: 193.29.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f2:2c:04:60:1d:70:9f:78:f0:d1:74:88:65:70:01:6d:cf:16:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Oct 3 15:13:47 2023 GMT
Not After : Oct 1 15:18:47 2024 GMT
Subject: CN=23B1E411B66453D3F7C17A9D1A38FC3D8A15DC37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:8a:19:f2:06:03:5f:c2:06:f8:28:31:5a:
12:23:e0:1f:15:11:15:6e:d4:42:3a:8e:ce:31:ad:
fb:0a:09:d2:1a:c6:82:63:9a:4f:f2:c0:d5:ed:c8:
51:b6:b6:77:26:0e:db:ed:63:0f:56:60:0f:7f:fb:
db:0a:d9:6c:44:80:85:a0:c7:61:e0:b9:e8:3a:e2:
fa:c7:87:3f:9b:d1:89:db:fa:89:fe:65:9c:84:b2:
34:d4:a4:92:5a:85:90:8a:af:13:fd:27:6a:f8:50:
cd:73:57:4a:a1:20:a3:c9:0f:d5:a3:a3:52:1e:14:
4f:66:0b:1b:ff:d2:8b:c9:65:f6:35:9c:a0:f3:4e:
0a:3e:a4:1b:33:c9:be:2e:49:91:48:54:06:48:2c:
51:03:34:1f:3e:18:16:7f:6e:8f:23:85:d7:46:f2:
f1:38:67:fe:ca:42:09:d1:a7:bd:85:df:44:a8:47:
8b:d7:13:38:00:70:b9:d8:a8:e5:b0:fd:d4:8e:37:
1a:fe:1f:55:2c:53:5e:8c:4b:ee:2b:fd:92:ae:39:
20:79:ab:3e:66:0f:c8:c1:07:23:3a:24:c6:69:41:
84:8c:cb:d5:9a:4c:e3:76:c7:64:47:7f:d7:11:7f:
87:1a:9d:d1:78:5e:48:a4:dc:25:47:4d:32:21:2d:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B1:E4:11:B6:64:53:D3:F7:C1:7A:9D:1A:38:FC:3D:8A:15:DC:37
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3138392e302f32342d3234203d3e203432303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:20:46:6c:0f:25:89:62:03:cd:d5:94:86:55:cd:79:70:f1:
59:75:1a:36:9e:7a:61:41:cd:d5:b3:43:ae:e5:67:70:a0:50:
c9:16:f7:1e:ea:97:5d:54:bd:a9:b7:c3:8e:7d:13:66:55:4c:
49:93:35:98:58:a6:ea:85:5c:dc:61:48:0a:e3:cb:6d:6a:33:
50:c3:33:90:e5:f2:6b:a9:9b:c6:a2:0a:06:03:e9:9c:de:7f:
93:b7:06:9d:48:ec:c1:56:b3:6d:03:ff:58:37:bb:95:12:ca:
7e:2a:ff:05:a0:eb:b6:76:9d:a1:1b:e8:97:a2:26:4d:2a:80:
9a:69:06:1d:39:ed:9f:36:26:15:3b:ca:89:dd:51:a1:e9:d8:
25:4e:6e:4d:7d:b3:d5:62:19:d0:d4:b2:c7:69:f1:c9:95:87:
3b:c9:ae:e6:30:9b:04:15:ff:1b:c4:c6:a4:d7:e3:b9:7b:1e:
e3:22:77:98:ea:1f:6a:ca:84:96:7f:64:25:e2:1c:d1:32:68:
fd:fa:88:3d:d5:f3:2f:77:81:7c:21:dc:a0:bd:40:fd:a1:10:
db:9a:ce:98:2d:ef:be:ea:1d:69:51:2c:79:be:f5:3e:d4:29:
72:05:68:bf:d2:23:3c:da:cf:30:93:92:8d:08:22:cf:ae:6b:
f2:de:3c:f2
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUSfIsBGAdcJ948NF0iGVwAW3PFjIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjMxMDAzMTUxMzQ3WhcNMjQxMDAxMTUxODQ3
WjAzMTEwLwYDVQQDEygyM0IxRTQxMUI2NjQ1M0QzRjdDMTdBOUQxQTM4RkMzRDhB
MTVEQzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVmKGfIGA1/C
BvgoMVoSI+AfFREVbtRCOo7OMa37CgnSGsaCY5pP8sDV7chRtrZ3Jg7b7WMPVmAP
f/vbCtlsRICFoMdh4LnoOuL6x4c/m9GJ2/qJ/mWchLI01KSSWoWQiq8T/Sdq+FDN
c1dKoSCjyQ/Vo6NSHhRPZgsb/9KLyWX2NZyg804KPqQbM8m+LkmRSFQGSCxRAzQf
PhgWf26PI4XXRvLxOGf+ykIJ0ae9hd9EqEeL1xM4AHC52KjlsP3Ujjca/h9VLFNe
jEvuK/2Srjkgeas+Zg/IwQcjOiTGaUGEjMvVmkzjdsdkR3/XEX+HGp3ReF5IpNwl
R00yIS0HpQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFCOx5BG2ZFPT98F6nRo4/D2K
Fdw3MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzIzOTJlMzEzODM5MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMjMwMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEdvTANBgkqhkiG9w0BAQsF
AAOCAQEAOyBGbA8liWIDzdWUhlXNeXDxWXUaNp56YUHN1bNDruVncKBQyRb3HuqX
XVS9qbfDjn0TZlVMSZM1mFim6oVc3GFICuPLbWozUMMzkOXya6mbxqIKBgPpnN5/
k7cGnUjswVazbQP/WDe7lRLKfir/BaDrtnadoRvol6ImTSqAmmkGHTntnzYmFTvK
id1RoenYJU5uTX2z1WIZ0NSyx2nxyZWHO8mu5jCbBBX/G8TGpNfjuXse4yJ3mOof
asqEln9kJeIc0TJo/fqIPdXzL3eBfCHcoL1A/aEQ25rOmC3vvuodaVEseb71PtQp
cgVov9IjPNrPMJOSjQgiz65r8t488g==
-----END CERTIFICATE-----
Generated at Thu Oct 19 09:21:48 2023 by rpki-client on console-fra.rpki-client.org