Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203432303535.roa
File: 34352e34322e34342e302f32342d3234203d3e203432303535.roa (raw, json)
Hash identifier: ktpReXTixbNgN9oOpZDwmpbGEhc7Ox9pkpbayFw/7bw=
Subject key identifier: 4B:66:05:FA:1C:8B:0B:81:AF:D7:BC:58:F4:A7:35:0E:4F:C7:3A:6B
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 02D379D265DC2A7A803F0EF893D747C1A5A18FBC
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203432303535.roa
Signing time: Tue 10 Oct 2023 12:44:02 +0000
ROA not before: Tue 10 Oct 2023 12:39:02 +0000
ROA not after: Tue 08 Oct 2024 12:44:02 +0000
asID: 42055
IP address blocks: 45.42.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d3:79:d2:65:dc:2a:7a:80:3f:0e:f8:93:d7:47:c1:a5:a1:8f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: Oct 10 12:39:02 2023 GMT
Not After : Oct 8 12:44:02 2024 GMT
Subject: CN=4B6605FA1C8B0B81AFD7BC58F4A7350E4FC73A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:15:71:2e:c8:26:46:59:cc:f0:9f:67:a6:
e9:1d:72:c1:9f:92:8b:1c:2c:37:aa:64:ff:d1:a6:
9b:f2:4c:fc:ab:ae:f1:85:03:d2:10:07:0f:b6:91:
75:68:ad:94:d1:cd:a9:99:41:b9:d6:db:99:0b:00:
d0:fe:ab:95:d3:c5:1c:6a:f3:37:c1:23:2f:99:2f:
2b:e2:41:eb:be:57:47:30:0d:89:9c:d5:f4:f6:c4:
46:d7:f9:d3:d7:1d:61:6d:dd:99:51:2a:cc:d9:a3:
00:7b:b7:59:78:9b:b9:64:20:2f:d2:5d:9e:df:41:
36:36:88:eb:cf:19:c7:50:5d:e4:18:3e:23:3e:5c:
31:1f:8a:dc:a2:22:16:84:e8:02:ab:63:4f:85:95:
d1:5c:7e:dc:a2:a9:f2:ab:f8:29:44:71:ca:c0:24:
15:66:dc:7a:75:f6:47:82:ae:09:f2:06:4b:ab:58:
80:c1:2a:ae:c0:a5:ec:c7:a7:83:51:31:7f:26:0a:
f6:50:a5:06:a9:76:ad:45:7b:6e:36:da:6f:d6:88:
a6:49:05:e2:eb:42:45:7a:56:a2:7b:91:a9:69:30:
e4:1b:7d:1e:0e:45:8b:fe:b1:c3:1b:36:cb:1e:09:
94:13:4e:24:aa:43:80:a0:36:3c:b8:a5:25:36:fc:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:66:05:FA:1C:8B:0B:81:AF:D7:BC:58:F4:A7:35:0E:4F:C7:3A:6B
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203432303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.44.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:83:2a:c5:55:01:09:12:49:ea:09:48:85:7d:3a:de:d5:04:
14:0b:a8:43:78:85:32:ee:01:45:c1:07:ff:88:56:b4:19:a1:
db:d6:ad:de:f4:7b:e1:b3:eb:52:d5:54:9d:e9:99:f8:ed:22:
ea:8b:12:26:7a:37:ef:72:fa:a3:a7:56:5a:77:9d:86:21:7b:
c3:36:59:36:62:d1:66:a8:f3:ad:19:bd:7f:82:27:17:44:eb:
14:22:cc:8d:54:66:cf:09:b8:44:18:ed:55:36:9b:cc:3c:97:
9f:f9:b0:e4:d2:7c:c8:17:3e:9b:e9:54:db:da:83:64:24:af:
99:9d:4e:eb:ec:b3:7a:da:63:dd:46:ea:3c:e5:8c:47:e6:17:
f6:fd:2b:85:e6:8f:d8:9c:8b:80:1c:2d:ae:14:2a:8e:ec:9e:
40:e0:16:08:3a:0f:20:bc:6b:56:0b:bf:72:9c:5e:3b:a5:29:
aa:86:4c:8e:73:91:47:db:a4:32:86:85:93:d5:72:7e:1e:5e:
7d:76:b4:e8:11:51:51:8b:88:ab:8a:81:2e:44:5c:15:56:f3:
7e:62:0c:62:e4:a8:e1:8e:05:eb:12:43:2f:15:89:53:80:ad:
e7:09:db:26:83:46:c4:04:bc:cf:4c:12:a6:37:0e:66:a9:70:
69:82:dc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 19:26:22 2023 by rpki-client on console-fra.rpki-client.org