Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/32372e302e3233332e302f32342d3234203d3e203631313338.roa
File: 32372e302e3233332e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: x47TYrixSb9VelqZonpssV9PWAgUqjBHWIVxSchbBx8=
Subject key identifier: 53:31:CC:73:DB:D7:1F:60:2D:84:F6:36:E5:F7:97:F3:EC:AB:BE:6F
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 48B74311EA1B91B733EC012726486BC458207E77
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/32372e302e3233332e302f32342d3234203d3e203631313338.roa
Signing time: Fri 30 Jun 2023 10:05:40 +0000
ROA not before: Fri 30 Jun 2023 10:00:40 +0000
ROA not after: Fri 28 Jun 2024 10:05:40 +0000
asID: 61138
IP address blocks: 27.0.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:b7:43:11:ea:1b:91:b7:33:ec:01:27:26:48:6b:c4:58:20:7e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Validity
Not Before: Jun 30 10:00:40 2023 GMT
Not After : Jun 28 10:05:40 2024 GMT
Subject: CN=5331CC73DBD71F602D84F636E5F797F3ECABBE6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:29:c7:ad:6d:2b:b3:ed:62:6d:b0:46:e4:
4d:91:bb:2c:a4:44:4a:2d:e6:f7:8e:8e:d4:26:cb:
95:06:27:51:ef:c0:9d:36:56:dd:55:39:7d:12:34:
5c:bd:43:53:75:09:3f:a2:f1:ab:64:83:e1:0d:2d:
8e:66:7b:38:c2:66:59:97:11:47:fd:e3:99:7f:d2:
01:55:e5:c8:31:27:50:cf:8f:e1:a3:a7:f8:b2:3d:
3d:6d:be:82:6d:3c:9d:9e:db:ca:01:32:58:bb:db:
eb:74:25:b0:43:0c:13:f9:ec:d2:e7:53:c9:2f:d9:
48:15:28:ab:dc:30:94:de:8b:cb:d0:90:0f:b2:a1:
17:00:09:f0:e7:aa:7f:83:39:1b:e4:85:6f:8f:f3:
ed:52:51:52:b4:ea:e6:94:46:a9:d3:19:8c:73:9f:
d8:ef:23:1b:e0:2b:87:e1:d0:e7:2a:e3:0d:e3:a2:
b3:0e:00:98:8a:88:57:11:0d:f6:af:9e:8d:e8:6e:
46:ea:77:81:76:37:96:bf:0d:b5:f6:59:d9:31:39:
09:4c:33:bd:e2:92:f3:8b:d9:08:a1:e9:0b:0b:fb:
4a:53:b3:09:3b:80:30:06:1d:ff:1b:7c:8d:0e:43:
c2:d7:09:f1:4a:62:72:88:2c:30:00:13:a8:d6:b2:
a5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:31:CC:73:DB:D7:1F:60:2D:84:F6:36:E5:F7:97:F3:EC:AB:BE:6F
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/32372e302e3233332e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:2a:98:5e:d6:ca:68:1b:13:03:8c:fb:23:4b:0e:3c:8a:99:
8c:75:0d:9d:e3:31:69:6e:d4:ee:cb:8c:a6:ff:7b:a5:e1:88:
83:c1:96:ab:16:2b:ab:8f:5a:a2:d2:9c:60:b2:b4:aa:91:57:
f2:21:03:99:e4:21:49:a1:b3:aa:3c:a4:1d:82:fd:41:17:02:
55:3f:87:a7:09:44:7a:9e:fa:4b:b7:27:61:30:08:11:50:73:
89:db:1d:97:29:85:9d:5f:fa:c1:dc:4b:52:1b:55:8b:ee:aa:
b8:9b:bb:ff:e3:61:41:55:91:86:1c:5c:ac:a7:3e:27:cb:d2:
61:d8:47:a1:84:3c:01:d1:ef:7a:4d:01:f9:d3:e8:71:c4:dd:
61:c9:d9:d1:83:6e:7c:88:1e:e0:1e:3b:71:ab:1a:a4:b2:cf:
da:1b:eb:76:02:1c:c5:26:c0:1e:00:eb:6c:b4:91:f2:c6:40:
70:00:81:de:57:86:52:a5:cc:a2:23:42:ed:b6:59:23:e2:e3:
21:cf:cc:64:71:8b:03:97:e5:15:a0:02:4e:2c:89:5e:7f:fd:
a9:5d:d1:9e:06:fb:4b:63:a9:ec:f2:b6:61:33:eb:48:81:52:
71:11:cc:e7:59:db:8c:39:fe:3c:d0:58:d9:f3:22:c3:ae:2b:
27:16:79:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 20:41:35 2023 by rpki-client on console-fra.rpki-client.org