Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3235203d3e203631313338.roa
File: 32332e3134322e32352e302f32342d3235203d3e203631313338.roa (raw, json)
Hash identifier: BwucL7+fB0HIoh77u5PyR2KLtSo4Kgk/0BvO1+UmIdg=
Subject key identifier: 09:87:1F:DA:0B:F7:D4:EF:9D:1F:24:27:84:D3:BD:BE:85:EB:4E:12
Certificate issuer: /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial: 227AA37FB73CF7A1CE948241B5E472F13AEF9B73
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3235203d3e203631313338.roa
Signing time: Mon 23 Sep 2024 22:32:52 +0000
ROA not before: Mon 23 Sep 2024 22:27:52 +0000
ROA not after: Mon 22 Sep 2025 22:32:52 +0000
asID: 61138
IP address blocks: 23.142.25.0/24 maxlen: 25
Validation: Failed, certificate revoked on Wed 06 Nov 2024 17:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7a:a3:7f:b7:3c:f7:a1:ce:94:82:41:b5:e4:72:f1:3a:ef:9b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Validity
Not Before: Sep 23 22:27:52 2024 GMT
Not After : Sep 22 22:32:52 2025 GMT
Subject: CN=09871FDA0BF7D4EF9D1F242784D3BDBE85EB4E12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:db:4f:a1:74:cc:8a:80:bf:ba:b7:cf:bd:
8b:2f:6f:6a:60:9e:58:f9:2e:0f:24:f2:ba:e0:81:
2b:bb:4f:a8:38:f8:7e:5c:35:18:74:16:5d:ec:8b:
74:78:e8:02:2e:db:a2:53:90:72:8d:24:28:ec:1c:
ae:ca:43:01:f5:e3:9b:94:d6:2d:48:15:48:f3:1a:
12:9c:4b:1c:fe:13:45:cf:75:05:86:8d:1c:41:ea:
02:18:2b:44:d6:b0:6f:ad:7d:4a:52:79:52:46:a5:
e5:b0:5d:fd:98:d9:58:bc:29:cc:11:17:32:a1:c8:
f0:c8:c7:ea:36:e1:1d:f2:42:0b:ad:73:7f:17:e8:
a1:9c:c7:d7:34:02:a6:d0:ee:3d:54:e4:f9:e5:85:
77:92:4c:dd:c8:a8:f4:48:6a:12:23:a2:ed:71:52:
1f:db:13:f2:1e:ca:46:37:62:48:76:8b:aa:47:48:
df:77:ea:33:ca:15:eb:1a:eb:4c:9b:e6:14:83:3e:
78:4e:e7:c3:1b:f6:60:f0:ff:47:66:51:36:17:ca:
12:c2:66:31:12:f1:03:94:bd:15:33:b5:02:10:c7:
32:cd:a2:13:f5:cf:11:5c:77:30:31:29:0f:60:91:
ca:09:d0:fb:14:85:7f:18:f3:6b:bf:4e:9f:88:63:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:87:1F:DA:0B:F7:D4:EF:9D:1F:24:27:84:D3:BD:BE:85:EB:4E:12
X509v3 Authority Key Identifier:
keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3235203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.142.25.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:86:34:f8:f1:55:c4:97:b9:61:78:a3:33:23:8a:6a:58:bb:
5f:26:c6:78:e6:95:fd:01:2a:b2:e8:d5:80:40:b7:ce:8b:04:
9b:aa:e6:00:8c:21:2e:b7:9e:f3:9e:eb:f7:ba:97:15:a2:93:
bc:94:93:84:0a:6a:c5:7b:96:a1:a7:b3:0f:00:da:b5:c2:aa:
15:e0:ba:0f:38:c5:fd:b3:93:1a:36:29:8b:ee:a4:b0:41:a6:
20:1e:64:cb:75:cc:02:05:a2:ac:40:32:85:95:39:3b:35:fb:
06:6c:76:27:3d:07:a4:2b:61:09:9e:b6:00:02:6f:b4:9f:ed:
dc:ac:61:c3:60:8f:ec:19:17:2f:b1:75:d2:96:f3:70:7d:33:
35:39:2e:04:4c:ff:8b:18:45:26:eb:3c:9b:9f:50:5d:5a:92:
74:ba:e1:8c:a8:43:33:9c:81:d9:8e:52:b0:d3:d8:5c:38:43:
0d:7a:7b:22:1c:56:e8:05:0b:a2:fd:34:cd:9c:6a:09:9c:22:
0a:77:3e:57:20:ea:e0:ae:63:c8:d1:58:11:38:fd:53:db:0a:
dc:dc:24:79:4c:24:95:16:d0:49:05:8c:bf:a8:22:8c:cf:c1:
e0:a3:b2:76:8e:fe:8e:f7:00:f5:15:a0:83:6e:67:5a:ef:90:
ea:10:ee:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 19:54:06 2024 by rpki-client on console-ams.rpki-client.org