Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS36351.roa
File: AS36351.roa (raw, json)
Hash identifier: 00wgEVtOe4mqTHSQBkAvMFB4fpCncpAf9FS2/WGbhQw=
Subject key identifier: 04:6F:63:11:99:B6:9A:7D:13:12:8C:76:E9:D2:49:CE:AD:8E:1E:27
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 627E0C64CDF471E6B78337EBCA1310C562C04FCB
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS36351.roa
Signing time: Tue 03 Jan 2023 02:07:14 +0000
ROA not before: Tue 03 Jan 2023 02:02:14 +0000
ROA not after: Tue 02 Jan 2024 02:07:14 +0000
asID: 36351
IP address blocks: 185.236.212.0/24 maxlen: 24
185.236.213.0/24 maxlen: 24
185.236.214.0/24 maxlen: 24
185.236.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:7e:0c:64:cd:f4:71:e6:b7:83:37:eb:ca:13:10:c5:62:c0:4f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 3 02:02:14 2023 GMT
Not After : Jan 2 02:07:14 2024 GMT
Subject: CN=046F631199B69A7D13128C76E9D249CEAD8E1E27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:1c:49:fe:86:3d:0d:7d:f7:88:e9:2a:19:
83:7a:85:a0:db:87:a6:d6:87:22:fc:8b:0d:1e:7d:
81:88:e3:ad:a0:69:56:76:ee:b2:90:50:42:a3:a6:
18:d3:d3:64:d7:a0:1a:b4:19:45:3e:b0:1d:7b:5f:
20:4f:ae:94:3a:a2:2d:04:58:e5:a7:18:68:f3:fe:
a2:64:70:89:9d:7f:00:17:f3:94:2a:eb:4f:1d:cf:
ea:f8:73:73:4b:1c:cb:0c:9d:cd:1c:19:0f:f7:15:
86:2b:ac:0e:08:73:23:b5:96:fc:62:d8:32:64:f8:
ac:86:05:54:c1:f0:1b:32:d0:3b:74:67:41:cf:4d:
eb:29:4d:ec:0e:34:44:2d:d8:1c:ba:d3:19:90:56:
6f:5a:98:e0:b6:72:58:1c:e8:8e:9c:96:56:7b:b6:
9c:ca:c3:94:9f:b2:71:c7:81:0e:33:ec:2a:7e:35:
41:e4:be:6b:8c:be:80:59:02:12:00:1b:70:2e:6b:
19:2b:f5:68:d0:84:93:7e:56:7b:f1:eb:d4:82:11:
2d:5c:bf:b4:87:dd:c9:27:fd:44:a5:27:df:5e:bb:
7e:c9:09:5c:a4:65:52:65:4f:0c:60:43:78:19:83:
ca:e6:8d:8b:e1:11:96:1c:0e:1f:b3:54:1d:4c:8d:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6F:63:11:99:B6:9A:7D:13:12:8C:76:E9:D2:49:CE:AD:8E:1E:27
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS36351.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.212.0/22
Signature Algorithm: sha256WithRSAEncryption
41:48:5d:2e:75:6c:1d:58:a5:20:27:9b:f6:36:94:e5:08:84:
0a:23:e8:62:ed:80:ae:7b:a4:68:f5:29:13:0e:fb:a7:40:32:
c6:a3:f7:bb:72:c8:8a:f4:9f:60:2c:54:db:fc:4a:24:79:e2:
e9:7e:c9:40:3a:f8:55:e0:d7:b4:6c:95:c0:80:8a:81:0f:a1:
f8:8f:6a:7b:91:bd:2f:2c:1c:9b:60:e8:fe:a8:69:a6:c0:71:
7f:dd:51:c2:cf:c0:93:3e:3a:d5:d4:6d:81:98:35:5e:74:3f:
c3:6d:07:d3:d3:0b:2a:b6:c2:c4:76:e5:68:04:c6:29:8b:ba:
f8:c7:21:d8:6e:04:a1:f7:c3:16:6b:01:d1:b7:41:1e:ca:ee:
7a:dd:0a:80:9c:00:12:94:fe:60:76:0f:38:c2:f2:c9:79:7e:
0f:d3:18:22:cf:d5:50:40:f0:38:60:a9:e1:52:f3:31:8f:45:
41:bf:7e:a7:b9:37:b5:f8:11:b0:3a:8e:c9:96:15:ce:bb:b3:
e5:c9:e7:c8:2a:0e:c4:01:f4:66:65:e8:cf:90:94:d2:c6:2b:
a1:bd:c2:73:40:c7:99:51:23:99:40:c8:6a:95:d6:b9:01:d1:
75:dd:3d:19:a7:e1:0a:06:8d:6a:8f:39:28:2c:c7:85:31:fa:
53:1c:ed:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 11:25:27 2023 by rpki-client on console-fra.rpki-client.org