Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132312e302f32342d3234203d3e2037303138.roa
File: 37342e3132302e3132312e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: Z/+JSCl9craraWXBL2wo07BjH2UHHErDbWoFwYf7xW4=
Subject key identifier: B5:71:1F:98:C0:12:D1:7D:D6:C1:1E:13:E1:FF:81:EC:24:FB:A9:89
Certificate issuer: /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial: 631E026934B48FFDA5715AD2821C18F80076029F
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132312e302f32342d3234203d3e2037303138.roa
Signing time: Tue 27 Feb 2024 16:01:15 +0000
ROA not before: Tue 27 Feb 2024 15:56:15 +0000
ROA not after: Tue 25 Feb 2025 16:01:15 +0000
asID: 7018
IP address blocks: 74.120.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jul 2024 13:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:1e:02:69:34:b4:8f:fd:a5:71:5a:d2:82:1c:18:f8:00:76:02:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Validity
Not Before: Feb 27 15:56:15 2024 GMT
Not After : Feb 25 16:01:15 2025 GMT
Subject: CN=B5711F98C012D17DD6C11E13E1FF81EC24FBA989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:a8:b0:98:4f:f3:40:09:96:f1:fb:9c:2d:
1c:33:01:fc:cc:a4:10:02:32:82:3b:6b:21:b8:40:
7e:4a:85:cf:a3:b2:19:fe:e9:0b:6a:7f:02:87:67:
8f:84:cb:36:4d:1c:f9:7a:bb:b1:94:cf:14:15:f6:
39:89:e7:dd:b7:21:68:bb:ba:ea:7c:1b:55:69:9b:
ea:96:9c:da:2e:77:1e:5c:fc:bf:b8:20:1d:0d:57:
27:8d:7f:94:02:c7:07:c8:fe:49:44:66:10:a6:a2:
4c:29:35:0b:be:2c:bc:61:51:5b:f8:99:3b:7c:b5:
32:90:03:ce:01:27:ba:9d:3c:50:5e:21:02:70:5c:
1e:4f:bb:d1:ab:5b:41:06:38:7f:6e:a9:82:06:c2:
6b:7c:b7:7c:e8:fd:a0:1d:3c:1a:2f:40:7c:65:db:
91:62:70:88:18:54:8f:e5:9a:89:b3:0c:ba:f7:7e:
8d:f4:7d:2b:d8:57:aa:3a:fa:c4:f5:1b:4a:a4:87:
3c:0a:2d:db:14:a0:02:f8:a4:b3:ea:6e:20:c6:07:
5f:db:47:89:94:12:6b:47:d9:26:2a:04:b6:04:a5:
11:46:c0:fe:c0:5b:52:57:be:a1:3a:66:98:d9:a0:
67:b9:11:a2:c0:a5:82:c7:f2:92:be:1c:8b:d6:de:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:71:1F:98:C0:12:D1:7D:D6:C1:1E:13:E1:FF:81:EC:24:FB:A9:89
X509v3 Authority Key Identifier:
keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132312e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.120.121.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:a0:7e:48:f0:e1:5b:1f:55:8b:54:cd:98:83:a8:8f:0d:04:
2c:1f:f1:1c:ae:00:44:fc:76:92:55:ec:10:fd:c7:f7:be:65:
30:63:cf:15:d2:31:ad:e6:e8:32:42:0e:49:1d:00:91:80:d9:
bc:e6:40:18:8d:bd:9e:5e:c2:e9:5d:b3:8d:25:22:4f:2c:e5:
db:72:cf:d2:ba:80:14:cd:16:67:e4:c0:b4:4a:4a:b9:32:31:
9c:57:5b:fb:6a:f3:e8:bd:d7:b1:63:34:a3:3b:26:63:1d:21:
62:ec:cd:46:f9:38:c4:69:c1:8e:53:37:78:54:8c:91:dc:e9:
09:0b:47:10:29:be:11:2a:07:85:7c:73:2f:50:40:09:77:c8:
7a:f0:9a:3b:52:4f:c0:dd:25:f8:73:84:ac:38:a1:cd:c5:27:
11:e8:4c:d5:30:59:af:62:d2:bf:87:7b:0b:56:a3:66:94:ce:
8c:00:74:de:36:8c:8b:e0:14:f2:3c:54:4b:54:25:e5:67:ce:
e0:5f:c7:b2:c0:59:e6:1c:24:0e:ab:df:16:fa:0e:d5:ab:b3:
00:20:7e:99:0d:be:92:a0:1e:e4:90:57:9f:a0:8b:a5:f5:13:
4c:dd:97:eb:00:a0:61:4c:60:7a:7b:f2:40:02:67:c5:d1:3d:
72:e1:d5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:52 2025 by rpki-client