Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e203631313338.roa
File: 3139322e3230392e36332e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: 5CsfU0hPZ4lxMFgtYrKcQgs61XAbVRvlEPevzGS4YTM=
Subject key identifier: E8:9E:6E:A2:12:48:C5:28:1C:A9:F0:F9:10:AD:63:45:84:4B:4E:AC
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 4F1BF8F6E7B85C9DE71C5C2E042FCC0748F45AC0
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e203631313338.roa
Signing time: Sat 02 Nov 2024 06:04:32 +0000
ROA not before: Sat 02 Nov 2024 05:59:32 +0000
ROA not after: Sat 01 Nov 2025 06:04:32 +0000
asID: 61138
IP address blocks: 192.209.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Nov 2024 19:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:1b:f8:f6:e7:b8:5c:9d:e7:1c:5c:2e:04:2f:cc:07:48:f4:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Nov 2 05:59:32 2024 GMT
Not After : Nov 1 06:04:32 2025 GMT
Subject: CN=E89E6EA21248C5281CA9F0F910AD6345844B4EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:2c:7c:57:a8:b5:b1:6e:c9:91:29:a9:07:
9f:da:8b:84:04:d6:77:e7:7b:19:f3:79:60:70:d8:
90:75:98:cd:1e:39:8e:21:63:c2:78:55:3c:f4:3c:
93:c9:cc:af:c4:8a:ee:3e:7a:20:7a:2e:0d:5c:99:
a3:76:6c:6b:30:2d:49:e4:c1:8c:63:67:bf:3c:81:
f3:de:2d:34:11:f1:85:3b:f4:df:dc:d3:cf:f4:04:
94:80:64:3b:2e:cf:67:74:47:41:2b:e7:70:82:8e:
2e:ad:a0:91:47:0a:4a:8f:a8:f3:8f:89:49:40:37:
ac:f0:f4:2c:99:b2:d7:14:57:e0:85:d6:b1:b6:23:
ad:cd:48:73:a2:48:f7:99:4a:15:d1:c4:d8:bd:7b:
6f:49:05:88:9d:44:88:bc:e2:7c:3d:e8:e3:d3:6e:
5c:b9:5f:dd:97:55:7e:f1:c5:0f:44:42:70:ee:ae:
5e:2b:9f:46:c1:c0:e3:62:a6:e2:7e:b0:44:40:89:
d2:97:1e:e4:a0:d9:2e:fa:0f:b6:c0:96:6d:f1:cb:
31:fb:81:bc:1e:6b:90:e7:88:c2:31:b4:fe:d3:35:
ea:6b:7c:dc:82:bc:81:ce:aa:cb:ee:37:9a:f5:24:
4c:c3:ca:b3:9f:01:ec:8d:f7:bc:f6:40:c2:cb:94:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9E:6E:A2:12:48:C5:28:1C:A9:F0:F9:10:AD:63:45:84:4B:4E:AC
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.209.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b7:98:c0:71:14:e6:a1:37:11:53:06:0a:84:8c:8c:dd:93:
70:3e:9a:1e:fb:db:05:f6:3c:cf:45:26:62:63:e6:47:fc:38:
46:3a:98:1f:5d:4a:81:b1:7f:10:f2:e4:de:d7:e5:d1:f2:85:
b0:16:25:90:52:5c:62:41:c7:74:3b:93:f7:74:f0:71:2a:cc:
48:d3:92:05:ea:e3:8a:c2:bb:eb:73:94:8d:e1:6b:0d:fb:c9:
37:3a:a9:de:e5:da:c4:f3:84:dd:00:b5:63:3b:40:ae:d3:09:
bb:03:84:42:21:69:db:72:95:19:05:77:6f:54:23:b5:8c:09:
b1:ab:a4:48:43:da:48:66:cd:b8:7e:b0:ed:e4:29:31:53:a1:
c9:3a:3b:0c:24:43:ec:76:ac:ed:b4:90:f3:18:3b:4f:77:0b:
e8:06:e6:38:2a:4a:9a:2b:fb:b7:a4:06:43:f9:c3:75:e6:29:
f5:7c:c6:37:8d:b0:32:cd:3b:38:4a:2f:79:26:08:90:1d:44:
cf:85:36:b7:a3:7a:27:ec:a7:35:cd:b2:e9:65:52:d5:cd:e1:
79:c3:1e:3c:01:bd:7e:3d:10:75:96:f7:02:d2:fc:5f:d0:c3:
c4:32:c6:34:85:55:87:32:a0:fa:6a:82:35:8c:a1:63:29:10:
12:97:d5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 22:07:16 2024 by rpki-client on console-ams.rpki-client.org