Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20343030323938.roa
File: 3139322e3230392e36332e302f32342d3234203d3e20343030323938.roa (raw, json)
Hash identifier: HveYOaFV1GUX3OsA2dm/0MyyiVOTlRp7JZIVd3fErEo=
Subject key identifier: DE:8C:81:3B:A4:51:5E:55:80:E4:1E:AA:14:00:EB:2D:7C:2C:E2:02
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 514EFE2236AAA62A412832BDD85C36C0AE659D0E
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20343030323938.roa
Signing time: Thu 02 May 2024 20:44:24 +0000
ROA not before: Thu 02 May 2024 20:39:24 +0000
ROA not after: Thu 01 May 2025 20:44:24 +0000
asID: 400298
IP address blocks: 192.209.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 06:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4e:fe:22:36:aa:a6:2a:41:28:32:bd:d8:5c:36:c0:ae:65:9d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: May 2 20:39:24 2024 GMT
Not After : May 1 20:44:24 2025 GMT
Subject: CN=DE8C813BA4515E5580E41EAA1400EB2D7C2CE202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:57:62:b5:6d:33:1e:1f:36:95:85:6f:ac:
af:e3:c5:1c:48:de:79:28:c8:3d:83:b7:0d:8e:09:
9e:91:50:ae:a4:75:cb:fa:31:9b:8b:4d:81:03:72:
a7:68:d9:c6:0d:5d:19:ae:f6:78:c0:44:4b:80:23:
b5:43:57:09:db:91:cb:90:ea:94:71:b7:97:de:a7:
0f:f5:e1:0e:32:b2:cb:e5:cb:f2:2b:e5:1b:ee:f7:
b4:40:7c:1c:20:10:03:62:38:8a:ca:86:9c:9a:83:
49:76:4d:40:7f:0e:ab:cb:44:4e:2e:30:dd:12:3f:
61:52:6d:75:be:7c:e6:b8:63:6b:5a:12:a0:48:d2:
69:a2:c7:46:ba:4c:94:b3:01:4a:29:16:16:38:89:
4e:56:57:12:9d:f7:6d:5b:95:89:04:75:14:2c:86:
16:eb:78:d5:e6:da:2a:6f:33:be:6a:34:e9:31:35:
ea:5a:f0:f3:52:d7:1a:bf:16:5c:5e:5d:ab:05:d6:
2e:9d:05:06:33:43:a3:12:a5:0e:43:dc:59:b9:21:
b3:e2:62:b4:70:78:8d:8b:87:54:2d:d7:31:3f:ab:
32:0a:61:ab:16:36:d2:e3:24:b6:95:5e:9c:f7:1e:
39:1c:32:61:00:81:d9:53:55:80:af:3e:87:05:bf:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8C:81:3B:A4:51:5E:55:80:E4:1E:AA:14:00:EB:2D:7C:2C:E2:02
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20343030323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.209.63.0/24
Signature Algorithm: sha256WithRSAEncryption
71:dc:ab:5a:08:9c:e4:f4:a2:38:26:1d:f4:83:24:7f:99:0c:
d7:0d:56:3b:4e:f0:41:53:3e:7d:4c:4f:01:fa:33:2e:c9:5b:
a0:01:3e:be:a9:1a:54:0c:66:c0:60:ca:f4:3a:14:62:07:52:
6f:ef:72:05:b4:eb:27:fd:38:bc:69:6e:17:5b:bb:e0:a7:c1:
bb:e6:4d:3d:5d:91:0e:ee:d9:d0:2c:e3:16:ce:22:87:22:de:
db:45:b0:c0:c9:01:84:19:d6:40:69:b7:fe:83:49:65:89:11:
1c:1c:04:80:d7:dd:70:ba:fb:ac:a4:84:8a:96:6a:3e:1c:3a:
a0:e8:f8:2e:a3:c4:8f:d9:64:0e:c6:ae:d6:b6:8d:4d:a3:e9:
5c:b9:37:2b:52:33:8f:b1:cd:9f:df:2e:02:57:39:41:c9:e8:
37:6d:da:8f:d7:f7:09:d8:14:6f:4e:c8:a6:65:1d:44:f1:8d:
df:b9:c7:77:e6:84:f1:ed:42:12:04:d5:3c:01:03:03:ff:3f:
d8:9a:22:8e:55:c2:ff:c7:04:3c:30:b2:7f:e5:f1:45:e3:2e:
59:8b:d6:32:7d:01:25:06:47:ed:f5:73:92:0a:d5:ed:9a:d8:
7f:bc:23:1b:bb:70:58:74:ad:16:b8:3f:08:34:30:82:c0:84:
03:d5:00:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 07:33:20 2024 by rpki-client on console-fra.rpki-client.org