Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e2037303239.roa
File: 37342e3132302e3132332e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: 0xgPhB+8fCslBumR3DnJghOquecCA1v7pD/H6e2k290=
Subject key identifier: A7:9C:80:D6:40:5A:D9:A5:6E:4F:8A:C8:7B:2A:6C:B8:56:72:D8:47
Certificate issuer: /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial: 5E777F396561B2AFFD65C84CDCFE04426C8CAF15
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e2037303239.roa
Signing time: Fri 22 Dec 2023 20:01:12 +0000
ROA not before: Fri 22 Dec 2023 19:56:12 +0000
ROA not after: Fri 20 Dec 2024 20:01:12 +0000
asID: 7029
IP address blocks: 74.120.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 12:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:77:7f:39:65:61:b2:af:fd:65:c8:4c:dc:fe:04:42:6c:8c:af:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Validity
Not Before: Dec 22 19:56:12 2023 GMT
Not After : Dec 20 20:01:12 2024 GMT
Subject: CN=A79C80D6405AD9A56E4F8AC87B2A6CB85672D847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:9f:c1:47:de:50:56:6c:a2:bc:c6:98:aa:
85:33:e6:9f:d6:2b:21:14:b5:51:4d:09:1e:6a:0a:
69:95:26:31:58:47:97:2d:28:b7:52:f8:e8:de:ce:
25:ac:5f:2f:fb:0c:6d:dd:91:b8:9f:a8:77:fd:83:
a5:13:ed:9f:2a:02:bf:33:84:9f:ca:6c:80:2f:a6:
53:97:67:1a:62:b8:30:44:d6:16:65:06:07:37:f4:
a6:08:15:3a:01:42:8d:40:a0:5a:89:19:0d:48:c5:
c9:e2:d9:86:aa:1a:a4:bf:2c:2d:ca:cd:a3:f8:5a:
74:e8:2f:9f:7a:a5:23:6f:69:b7:80:15:01:c6:c0:
0a:45:cf:6d:4d:33:28:87:a1:9a:22:86:30:18:0e:
41:5d:2b:5e:be:bf:d1:af:34:bc:b6:af:03:b7:95:
a0:f9:68:62:ee:16:89:18:16:e0:e4:07:e9:8f:3f:
11:10:3a:c8:80:cc:8f:4d:02:c7:47:35:2d:4b:a2:
30:61:ee:0f:7c:05:06:cb:4d:be:8e:d3:1d:11:75:
66:c8:0f:00:86:ca:2b:f5:63:8a:33:3c:4b:44:cc:
8e:91:ba:d0:4c:53:5f:70:62:9e:07:21:5c:0c:d4:
b7:47:38:55:4a:1a:cb:93:1e:79:cb:ea:6a:d0:80:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:80:D6:40:5A:D9:A5:6E:4F:8A:C8:7B:2A:6C:B8:56:72:D8:47
X509v3 Authority Key Identifier:
keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.120.123.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c5:ba:de:15:62:2e:02:4d:d3:8c:e1:16:3c:cc:3f:c5:b9:
c0:64:f2:2d:62:b7:4c:d9:be:0d:40:3f:e0:19:74:27:93:9a:
84:18:e1:a6:3d:8d:7d:d6:4f:13:ca:ab:15:34:d3:95:ba:89:
bc:e5:19:6a:13:02:27:c2:ce:b2:48:ff:d6:49:1f:93:32:11:
23:13:8f:b3:3c:e4:7c:2d:93:c7:e4:c4:d0:20:ba:c4:aa:68:
7f:00:6e:ff:b9:0a:84:28:51:58:98:90:e9:29:30:d4:71:5b:
b3:50:8e:ef:16:83:b5:15:6c:a0:48:e6:f2:bc:bf:1b:08:d5:
32:2d:f7:28:8c:80:92:33:41:39:90:74:d3:5f:a1:6f:0c:6f:
11:a7:71:8b:6b:d5:28:ac:ce:22:fe:72:3f:43:87:52:a1:87:
df:a6:52:98:ac:66:a6:bf:6c:87:37:8f:d7:f4:eb:e4:6b:0c:
40:5e:38:0a:f2:8f:73:cc:8b:90:68:5e:28:d8:7c:1a:0b:7b:
fa:e4:53:3b:f3:e0:5b:80:27:98:c5:e9:52:49:b8:21:e7:91:
f8:e6:00:2a:a5:45:9a:40:d5:4d:3c:d3:da:b6:46:05:62:53:
63:57:f0:37:e6:85:af:c9:d3:77:fc:e9:c5:cd:34:a2:e2:7b:
ad:01:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:09 2024 by rpki-client on console-fra.rpki-client.org