Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32332d3234203d3e203631313338.roa
File: 3136302e32322e3136382e302f32332d3234203d3e203631313338.roa (raw, json)
Hash identifier: SlTesRpqPCE6CQo4eZ5BeO7Nh4a1GK9UgjInekeNlYM=
Subject key identifier: F3:87:53:E1:5C:73:B3:B9:EE:CA:F7:E7:9B:31:4B:67:33:34:47:AC
Certificate issuer: /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial: 5D37538B889485DD328ED8C58C7B3E7AB2EDA889
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32332d3234203d3e203631313338.roa
Signing time: Mon 17 Jun 2024 09:58:56 +0000
ROA not before: Mon 17 Jun 2024 09:53:56 +0000
ROA not after: Mon 16 Jun 2025 09:58:56 +0000
asID: 61138
IP address blocks: 160.22.168.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:37:53:8b:88:94:85:dd:32:8e:d8:c5:8c:7b:3e:7a:b2:ed:a8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Validity
Not Before: Jun 17 09:53:56 2024 GMT
Not After : Jun 16 09:58:56 2025 GMT
Subject: CN=F38753E15C73B3B9EECAF7E79B314B67333447AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:d1:21:3b:d2:c3:07:ad:bd:36:6e:b3:b8:
5f:12:df:ca:f7:6a:b2:ba:4d:84:6e:a4:e9:6a:69:
40:a9:46:14:34:b7:b4:95:7e:e6:e0:47:6b:7b:fd:
5f:e0:da:77:e4:c3:75:1a:06:0d:8b:6b:eb:66:7e:
77:f7:e6:2a:ff:53:da:32:8e:fb:84:4b:57:ff:a8:
75:f0:5f:5a:dc:ef:14:66:08:db:1b:00:85:82:5d:
3f:db:6e:00:56:e2:21:af:a7:8a:27:38:2f:3c:b0:
1d:94:e1:49:10:6e:36:cb:e2:68:d2:6c:fd:b0:da:
91:7d:12:fc:22:dd:0e:19:2a:ff:30:92:b9:f5:8d:
da:6c:98:e3:73:b1:93:62:6b:c7:8e:b7:9a:80:60:
bf:5a:24:bc:85:2e:b0:07:1a:3a:35:a2:4a:32:d8:
34:19:f3:5c:10:19:64:b3:af:c3:0f:7d:27:55:2e:
30:ed:af:13:c1:cc:05:3a:f5:4d:a8:81:4e:e2:d6:
03:f5:0f:d7:8c:5b:bf:60:be:6e:ee:90:94:f6:df:
22:f4:97:62:fe:7e:61:25:ac:90:d1:5c:20:02:d4:
cc:de:df:f2:97:3d:38:4b:dc:9e:ed:92:26:a2:85:
d4:55:13:42:64:35:69:fc:06:07:3f:c2:a4:9a:d7:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:87:53:E1:5C:73:B3:B9:EE:CA:F7:E7:9B:31:4B:67:33:34:47:AC
X509v3 Authority Key Identifier:
keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32332d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.168.0/23
Signature Algorithm: sha256WithRSAEncryption
96:e9:e4:05:ae:ea:97:a0:13:55:18:8b:e7:58:fd:25:48:91:
4e:49:07:0e:2c:a4:5f:fd:3f:df:0c:87:3f:1e:61:c3:29:72:
ae:39:70:0a:ce:cb:2b:af:4e:9a:e5:89:4a:be:de:a9:17:b6:
6c:1b:56:55:b1:d9:05:fe:7a:ce:c7:a9:fd:f9:27:2f:8e:17:
9d:36:f1:62:79:62:5f:ee:dd:86:33:f8:51:e8:4d:a2:1b:8b:
df:a3:77:dc:b0:e5:54:12:2c:32:66:46:3a:a7:70:eb:1e:5c:
f7:fb:18:aa:35:a2:6c:54:70:8f:9a:94:39:f3:e6:73:6f:97:
80:1c:9c:05:b1:c5:af:53:d5:8f:85:fd:7b:50:b2:14:09:5a:
72:fd:83:60:e9:5a:39:27:0c:39:7f:f1:47:38:73:fe:ea:e0:
13:66:29:fd:a7:a5:61:ca:24:96:ee:bd:0f:6c:8f:2e:3e:33:
ca:bb:c5:80:3a:2d:fe:00:1c:17:8c:6b:e3:5c:98:d5:7c:99:
93:b5:40:b7:61:6d:49:80:c9:f6:01:34:2d:ec:67:b5:4b:70:
77:d2:6d:57:50:b4:6a:b2:ea:db:55:14:7c:fc:cb:b5:18:58:
15:11:ab:56:cb:72:d7:61:4d:7f:b9:4e:84:d1:78:42:da:6f:
08:85:30:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 01:14:10 2024 by rpki-client on console-fra.rpki-client.org