Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32342d3234203d3e203631313338.roa
File: 3136302e32322e3136382e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: qED6a+5bSSqxCEvcuznWjynzZqVR1UdWbp4TwEdgOTk=
Subject key identifier: 7D:9F:F6:D2:74:89:74:28:78:9D:91:B6:21:F2:65:97:73:AA:D8:B5
Certificate issuer: /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial: 3C5E5F4637F9B5C84928D81C64775E9E3C99809D
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32342d3234203d3e203631313338.roa
Signing time: Sun 23 Jun 2024 21:03:40 +0000
ROA not before: Sun 23 Jun 2024 20:58:40 +0000
ROA not after: Sun 22 Jun 2025 21:03:40 +0000
asID: 61138
IP address blocks: 160.22.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jun 2024 02:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:5e:5f:46:37:f9:b5:c8:49:28:d8:1c:64:77:5e:9e:3c:99:80:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Validity
Not Before: Jun 23 20:58:40 2024 GMT
Not After : Jun 22 21:03:40 2025 GMT
Subject: CN=7D9FF6D274897428789D91B621F2659773AAD8B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:56:b1:9b:2a:e9:1e:a0:e1:2c:9d:de:ca:
99:12:28:1b:90:65:4c:14:fd:7c:4c:1b:a4:6a:6f:
f2:d8:aa:8e:bd:cd:50:4e:81:ce:bc:d1:b7:44:6d:
84:e4:6e:de:33:4a:ce:3f:7b:a7:e9:a0:d2:05:36:
31:cb:1c:64:82:9c:0a:8f:c1:51:9a:1c:c5:4c:ac:
28:db:41:70:f5:40:0f:bd:17:75:54:f0:4f:72:02:
3a:1d:07:bb:7a:d0:55:73:7c:66:8d:ec:90:59:43:
c5:c6:32:54:ab:de:12:c0:cd:c3:be:3b:50:87:68:
69:cc:6f:dc:d5:1c:9b:46:bc:2e:4b:7a:6d:2d:e2:
3b:93:e6:83:f0:fe:5a:d8:34:fe:c9:6c:3f:ab:8a:
8f:ba:47:16:83:d5:ae:f0:c4:3c:63:6b:a7:98:92:
c5:46:40:d7:43:05:4f:b4:10:f3:eb:1c:34:7e:58:
a8:4e:bb:c1:63:17:d2:de:70:2f:2a:a7:53:52:13:
6e:f1:c0:a0:b2:02:d3:99:ba:b0:f6:cb:d2:b8:d3:
68:0d:93:b2:74:22:89:11:67:09:ab:2e:d0:c3:0e:
1b:b7:a6:c7:45:f4:23:f7:fb:79:b6:76:c1:a8:f5:
df:51:bf:49:c6:30:1c:6a:2f:72:33:74:ff:c7:3d:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9F:F6:D2:74:89:74:28:78:9D:91:B6:21:F2:65:97:73:AA:D8:B5
X509v3 Authority Key Identifier:
keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.168.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e8:d3:06:c9:3f:59:8a:ca:06:03:5a:1d:5d:b5:c4:ff:61:
c4:93:fd:84:c2:ec:93:fb:30:27:fa:98:3a:50:a1:94:f6:ad:
6c:d7:d4:fd:59:6e:23:de:67:cb:75:f9:42:b0:5d:fa:86:3d:
56:3a:6f:a1:a7:cb:46:0a:ae:f9:85:5f:dc:e2:1a:27:16:e0:
33:01:93:87:b1:e3:b7:89:9e:70:d0:77:92:e9:2b:f8:8c:ac:
41:fe:f2:ef:80:28:94:82:ab:8c:8e:74:98:d6:32:87:30:2b:
de:ce:8d:7e:89:32:80:e9:d1:40:d6:46:d5:08:e4:92:f2:49:
aa:e7:8c:27:e0:ae:60:04:2c:1e:9a:be:7d:7f:26:7f:24:10:
b8:58:41:f2:61:13:70:d6:6c:97:1b:c8:d1:90:d5:2b:f6:32:
fc:14:3e:fa:fb:ba:f9:1b:b3:9f:6c:dd:cf:15:ba:41:1e:ca:
37:17:4c:1b:15:62:7c:24:4c:36:7a:22:b9:c4:f3:98:4d:58:
a8:57:2e:75:c0:02:cc:cb:34:12:da:21:2e:f5:d0:df:4c:76:
8b:df:71:25:48:ab:c4:f1:74:fc:70:d6:1f:0c:ce:d0:8b:e0:
0f:09:5a:b0:ec:af:de:5e:81:2f:7d:ad:7c:2d:7c:1c:86:94:
bc:cf:69:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 07:00:50 2024 by rpki-client on console-fra.rpki-client.org