Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32342d3234203d3e20313432353934.roa
File: 3136302e32322e3136382e302f32342d3234203d3e20313432353934.roa (raw, json)
Hash identifier: DjMAM8m+sSOUE4K57A23V8ThVCGpUDgP08s2Oaj8cmI=
Subject key identifier: CB:A5:77:44:51:62:9F:7D:6A:1C:F0:91:D6:70:93:B2:FA:28:AC:B7
Certificate issuer: /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial: 2B9DD92F2D8C42FDBB5F6BF26C2C36CB32716121
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32342d3234203d3e20313432353934.roa
Signing time: Sun 23 Jun 2024 02:38:02 +0000
ROA not before: Sun 23 Jun 2024 02:33:02 +0000
ROA not after: Sun 22 Jun 2025 02:38:02 +0000
asID: 142594
IP address blocks: 160.22.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Jun 2024 21:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:9d:d9:2f:2d:8c:42:fd:bb:5f:6b:f2:6c:2c:36:cb:32:71:61:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Validity
Not Before: Jun 23 02:33:02 2024 GMT
Not After : Jun 22 02:38:02 2025 GMT
Subject: CN=CBA5774451629F7D6A1CF091D67093B2FA28ACB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:f3:81:6d:10:b0:01:bd:3e:82:3d:c4:62:
d4:ff:88:18:b2:00:04:82:92:bf:90:29:59:82:b3:
09:0a:c7:d4:db:76:a1:68:25:fd:2a:0a:f8:41:2d:
7e:3c:5f:36:71:30:f2:c3:a3:55:fb:f1:2f:c2:17:
43:c3:62:ef:f1:6c:cd:22:84:61:7d:24:1f:6f:b4:
8e:20:ec:df:1f:00:5f:ad:fe:6a:fe:7b:6c:ef:b5:
3d:b4:12:80:7e:2c:db:27:0b:47:cd:5c:b1:32:3e:
6d:f6:80:1f:89:9d:3c:5e:d0:83:63:d7:24:34:27:
a1:b6:00:25:88:86:28:0d:d0:66:0f:77:c5:c2:e5:
3f:ee:25:e3:2f:0d:95:f4:64:fe:99:35:0e:73:46:
09:ab:92:69:16:69:39:47:1a:e1:cf:ee:7e:b0:ed:
d0:b6:a3:ea:e1:b8:b3:7a:f6:b2:70:a6:e7:a9:4c:
3f:a7:15:0e:0d:21:03:72:80:eb:2d:45:38:0b:a9:
9e:18:62:b4:72:54:f6:25:1f:7b:b1:94:da:38:46:
6f:47:12:5b:be:be:04:74:ee:6a:df:54:5f:11:53:
61:ff:f9:29:e7:7a:44:e5:cc:f5:90:de:08:05:4b:
15:1f:dd:22:48:2c:2e:92:ff:27:0d:d5:1c:fb:7d:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A5:77:44:51:62:9F:7D:6A:1C:F0:91:D6:70:93:B2:FA:28:AC:B7
X509v3 Authority Key Identifier:
keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32342d3234203d3e20313432353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:7f:14:d3:89:02:60:de:52:a0:1e:b3:92:c5:1d:44:3b:b4:
a2:72:86:71:50:a2:30:47:dc:85:01:38:8e:5f:5d:a8:85:20:
1d:2a:dd:1b:74:43:49:51:38:54:de:7d:d4:e8:92:76:f8:79:
ec:61:78:80:27:d5:36:da:84:73:9e:0a:2f:08:28:47:b6:eb:
a3:52:33:b3:fa:3a:7f:e1:fe:f6:dc:cd:5b:d9:e6:3f:57:2e:
30:20:af:d1:b2:59:a8:70:39:0a:04:63:f1:50:48:f2:81:e9:
72:60:30:06:ae:34:65:8b:43:c9:cd:30:79:d5:f0:31:af:2a:
0a:5e:06:f4:8b:bd:3b:e0:60:42:74:15:ec:c7:60:fa:2f:5a:
f7:08:0e:55:3f:52:bb:61:44:5d:b9:fe:61:03:9a:db:db:2d:
41:da:00:a8:45:91:21:29:5b:a0:ca:f5:c9:be:ea:16:b6:5c:
58:96:45:b2:ab:a3:46:45:d3:93:eb:30:82:f6:11:97:cd:b5:
4f:33:20:5b:f0:13:76:ba:f5:a7:dc:c3:ab:8c:55:41:c3:77:
03:44:af:a5:7c:99:76:23:bc:cc:b9:f0:6c:f4:0e:81:63:70:
d8:bb:dc:1a:46:ff:71:5b:8c:8d:c9:93:f7:48:d0:ee:1a:11:
ed:17:93:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 21:54:06 2024 by rpki-client on console-fra.rpki-client.org