Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20383334.roa
File: 34352e34322e34352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 6RZYDEnssJ79Xq4nRAXoW7mWUfj5YSwxq+yC50Y1C5k=
Subject key identifier: 35:52:27:4A:86:FE:E0:6B:F1:53:D3:4B:B2:E2:0E:E4:E7:CE:E4:0F
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 33380BC40F895873FF863A9FBE02860C69697AF6
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20383334.roa
Signing time: Sat 09 Nov 2024 10:52:48 +0000
ROA not before: Sat 09 Nov 2024 10:47:48 +0000
ROA not after: Sat 08 Nov 2025 10:52:48 +0000
asID: 834
IP address blocks: 45.42.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 20:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:38:0b:c4:0f:89:58:73:ff:86:3a:9f:be:02:86:0c:69:69:7a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: Nov 9 10:47:48 2024 GMT
Not After : Nov 8 10:52:48 2025 GMT
Subject: CN=3552274A86FEE06BF153D34BB2E20EE4E7CEE40F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:62:18:e3:f3:0c:ed:f9:71:5c:0d:96:dd:
82:07:cd:2c:f0:fa:9d:fb:c9:8a:bc:c7:7e:8b:e8:
c3:3f:41:a4:97:84:8d:a6:75:42:77:62:58:b6:fc:
de:19:6d:df:c7:6f:20:78:c2:f5:c2:dd:a7:dd:33:
0b:ee:c7:93:c6:9a:06:10:c6:c1:47:32:07:5f:4b:
d9:55:25:6b:00:12:8a:49:7f:cb:07:87:07:4a:ac:
86:b5:be:8a:b2:85:c9:d3:7e:a8:a0:9a:35:5c:0d:
08:5b:ae:6d:a9:df:d8:7e:97:15:8a:53:dc:7b:35:
0b:14:a4:2a:31:c3:2f:23:dc:5b:13:b7:89:4b:62:
5a:68:c2:c5:9d:ab:2d:2b:ec:f8:35:f7:17:c3:94:
ae:4f:85:05:5e:61:65:18:55:17:f1:9b:6a:bb:47:
69:1e:63:dc:b7:df:1d:8b:7a:34:70:1d:ae:ce:1f:
62:e9:79:51:3d:60:3e:f3:b7:c5:d3:a6:16:0d:6d:
6d:d9:9d:e8:56:3e:ad:ba:18:4a:ab:39:71:d6:f3:
1f:a3:00:2d:a0:18:34:b5:cd:b8:67:26:7f:9f:4c:
cb:aa:bf:3c:30:85:85:93:5f:03:b9:93:6d:74:4a:
d8:67:fa:6f:d3:c4:3b:73:7f:21:34:89:50:da:ec:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:52:27:4A:86:FE:E0:6B:F1:53:D3:4B:B2:E2:0E:E4:E7:CE:E4:0F
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.45.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c6:a0:97:5d:f6:dc:38:6c:f4:a0:6e:e7:07:ca:8f:b9:02:
38:b0:5a:5b:ab:f6:8d:61:30:c9:cc:f1:21:30:78:6d:d6:d4:
bf:4f:0e:56:e5:9e:74:32:3c:a1:3d:4c:ec:f5:39:1a:bd:2c:
a0:61:2a:53:b9:11:6f:36:62:6d:d4:fa:6f:70:d6:bc:08:31:
ca:34:74:a7:84:8b:82:91:e2:52:b4:f2:ac:93:60:52:be:48:
a0:06:0c:4e:9c:64:9f:9b:96:22:47:8a:cc:e7:f5:fd:15:c6:
42:5d:ea:ae:ac:ba:49:05:d1:a1:08:c1:fd:db:63:d1:04:e1:
32:0e:ae:2c:c9:35:dc:d2:33:15:3a:c8:eb:de:b0:7e:7a:1c:
fe:98:f5:79:fa:a9:b7:ac:ca:cb:ee:e9:0d:a4:04:06:64:69:
6c:67:dc:7c:a1:7b:c8:f1:1c:0c:6a:7a:f8:fd:1a:c9:7a:fa:
76:fd:de:75:06:5e:49:c1:01:38:1c:76:57:10:9e:fb:a7:dc:
32:86:f0:7d:21:52:c4:6a:f3:5a:b5:3c:b2:02:ef:65:46:18:
c1:81:a6:07:eb:db:5c:f4:e8:4c:8c:88:3b:e0:5a:f9:42:68:
af:d8:55:d9:8a:99:c6:1a:54:c5:24:56:56:b8:0e:31:c9:e5:
eb:db:d8:3b
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUMzgLxA+JWHP/hjqfvgKGDGlpevYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjQxMTA5MTA0NzQ4WhcNMjUxMTA4MTA1MjQ4
WjAzMTEwLwYDVQQDEygzNTUyMjc0QTg2RkVFMDZCRjE1M0QzNEJCMkUyMEVFNEU3
Q0VFNDBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/FiGOPzDO35
cVwNlt2CB80s8Pqd+8mKvMd+i+jDP0Gkl4SNpnVCd2JYtvzeGW3fx28geML1wt2n
3TML7seTxpoGEMbBRzIHX0vZVSVrABKKSX/LB4cHSqyGtb6KsoXJ036ooJo1XA0I
W65tqd/YfpcVilPcezULFKQqMcMvI9xbE7eJS2JaaMLFnastK+z4NfcXw5SuT4UF
XmFlGFUX8Ztqu0dpHmPct98di3o0cB2uzh9i6XlRPWA+87fF06YWDW1t2Z3oVj6t
uhhKqzlx1vMfowAtoBg0tc24ZyZ/n0zLqr88MIWFk18DuZNtdErYZ/pv08Q7c38h
NIlQ2uzAKQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFDVSJ0qG/uBr8VPTS7LiDuTn
zuQPMB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj
ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0qLTANBgkqhkiG9w0BAQsFAAOCAQEAOsag
l1323Dhs9KBu5wfKj7kCOLBaW6v2jWEwyczxITB4bdbUv08OVuWedDI8oT1M7PU5
Gr0soGEqU7kRbzZibdT6b3DWvAgxyjR0p4SLgpHiUrTyrJNgUr5IoAYMTpxkn5uW
IkeKzOf1/RXGQl3qrqy6SQXRoQjB/dtj0QThMg6uLMk13NIzFTrI696wfnoc/pj1
efqpt6zKy+7pDaQEBmRpbGfcfKF7yPEcDGp6+P0ayXr6dv3edQZeScEBOBx2VxCe
+6fcMobwfSFSxGrzWrU8sgLvZUYYwYGmB+vbXPToTIyIO+Ba+UJor9hV2YqZxhpU
xSRWVrgOMcnl69vYOw==
-----END CERTIFICATE-----
Generated at Sun Nov 10 23:32:26 2024 by rpki-client on console-fra.rpki-client.org