Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e20383334.roa
File: 34352e34322e34342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: rG8hLyxTVIUnARVwa0C1AbVmOu0XElkyecxVu9Dz9jg=
Subject key identifier: 1C:6D:6B:F3:C8:43:77:97:B6:48:4E:DD:46:9A:01:3A:37:75:8B:3C
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 61E23CFA319D37ABE4D82120358F2F5708968478
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e20383334.roa
Signing time: Thu 05 Sep 2024 00:03:35 +0000
ROA not before: Wed 04 Sep 2024 23:58:35 +0000
ROA not after: Thu 04 Sep 2025 00:03:35 +0000
asID: 834
IP address blocks: 45.42.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 18:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e2:3c:fa:31:9d:37:ab:e4:d8:21:20:35:8f:2f:57:08:96:84:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: Sep 4 23:58:35 2024 GMT
Not After : Sep 4 00:03:35 2025 GMT
Subject: CN=1C6D6BF3C8437797B6484EDD469A013A37758B3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:8e:82:12:b8:76:07:a7:d9:62:cd:81:9c:
2a:65:ee:20:c7:0d:76:ac:38:a8:a7:2f:cb:a1:17:
bc:14:40:6d:85:29:d7:ed:ff:0a:16:ac:3e:77:78:
6c:2c:79:e7:17:6f:62:9a:48:a0:b6:54:6a:f9:9e:
2d:17:ed:7b:75:1e:d5:b5:77:9e:60:e5:75:e5:b8:
36:1f:84:3c:96:30:69:5e:96:8e:02:32:9e:25:c4:
a9:ed:84:c9:cf:95:67:02:d0:8e:54:d8:59:a0:e5:
8a:db:5c:8d:77:9a:bd:08:25:3b:14:b9:7e:b6:a9:
15:6d:85:2d:15:7c:39:41:e6:b5:30:64:ab:30:2c:
5e:2d:59:c2:35:72:ba:e4:99:f5:dd:eb:78:e2:e4:
fd:73:89:b0:47:92:0e:b9:96:5c:bc:5d:b6:25:c5:
8f:fe:c0:52:98:91:95:9c:77:d7:76:cd:4a:18:c8:
5b:28:93:88:9d:74:19:40:9a:97:24:4b:8d:32:92:
d1:08:14:86:29:48:4e:42:97:76:1d:1e:d2:52:d4:
31:f3:41:46:45:ba:ef:d9:3f:b1:70:d7:e4:58:71:
20:98:fc:fa:7c:ca:24:59:f4:d3:39:84:2b:d9:32:
ab:ff:4b:32:e3:18:48:39:fb:ee:c7:84:4f:2e:ca:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6D:6B:F3:C8:43:77:97:B6:48:4E:DD:46:9A:01:3A:37:75:8B:3C
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.44.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6e:d3:54:36:8c:d6:55:1a:b5:da:f7:85:44:da:1f:c9:a7:
3c:55:f2:98:90:b2:5a:f4:16:f6:26:d9:1d:8d:79:e7:1c:49:
39:a5:0d:26:9a:6f:4e:07:56:08:85:ad:bb:67:f9:d1:cb:45:
81:ca:dd:1d:94:59:8d:cf:91:71:cc:8c:e6:9b:4a:66:d5:75:
7c:be:c5:44:5b:52:78:a2:8a:7a:5f:f2:5f:85:e4:ac:e2:50:
48:33:00:92:8a:45:ff:d4:25:d5:7f:9f:aa:d6:34:8f:8f:fe:
15:ed:34:7d:7f:48:71:25:33:16:45:e1:c4:bf:29:eb:d0:87:
53:dc:89:96:b4:b1:fa:f7:b6:b1:0a:9f:d8:88:34:0c:1e:e4:
33:f5:d1:3c:91:e8:b9:a1:52:fd:65:48:56:c5:01:9b:9e:61:
5a:db:ca:55:89:e6:9f:89:49:bb:c4:b0:52:c2:63:43:87:df:
69:c3:c6:7c:ee:6e:16:c7:3c:19:4d:a6:33:e1:d8:8a:fc:45:
a9:44:3c:4a:23:db:3f:46:c5:40:34:50:6a:64:d1:20:ae:a6:
f1:d3:7f:cf:6f:33:b9:ca:90:c1:e9:53:1c:5b:d3:e0:44:7a:
d8:61:a6:58:c2:f7:36:4f:6f:9b:fc:1e:6f:bb:39:07:e6:c7:
7d:58:1c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 19:15:48 2024 by rpki-client on console-ams.rpki-client.org