Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20323038393439.roa
File: 3137322e39392e32322e302f32342d3234203d3e20323038393439.roa (raw, json)
Hash identifier: GpzcGvXiP7JH1iLj0Ji1yjsbYv9Jrt3NxF95P24PF8M=
Subject key identifier: DE:DC:1D:88:39:05:44:2F:AA:89:79:38:31:EA:C3:68:60:03:3B:B8
Certificate issuer: /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial: 6FA3F4666C357256755B74C601488B40B31F0173
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20323038393439.roa
Signing time: Wed 08 Nov 2023 08:34:18 +0000
ROA not before: Wed 08 Nov 2023 08:29:18 +0000
ROA not after: Wed 06 Nov 2024 08:34:18 +0000
asID: 208949
IP address blocks: 172.99.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Nov 2023 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a3:f4:66:6c:35:72:56:75:5b:74:c6:01:48:8b:40:b3:1f:01:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Validity
Not Before: Nov 8 08:29:18 2023 GMT
Not After : Nov 6 08:34:18 2024 GMT
Subject: CN=DEDC1D883905442FAA89793831EAC36860033BB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:34:1b:07:a1:23:d4:8e:97:31:cf:42:7d:
1a:33:d4:39:80:d2:67:60:ae:0e:fe:97:22:63:3c:
25:6e:42:e6:45:7b:85:8a:f0:c4:40:90:30:0f:c0:
be:ca:61:d8:49:a8:a1:b8:54:ef:cb:cb:7f:b5:74:
39:e4:44:20:e1:52:42:84:7a:35:90:20:f1:cc:f0:
42:a4:85:45:7f:e6:38:48:b1:cb:f6:d2:71:16:4b:
bf:2d:df:62:7c:b4:82:88:7d:75:32:03:b3:f6:18:
41:7c:e6:3e:96:36:1f:cb:6f:6e:c9:7f:75:af:1d:
b4:23:f8:0c:b1:1f:9b:78:63:85:21:ad:1f:74:e9:
25:15:f6:15:9e:bc:89:37:a5:da:14:f7:15:c9:d0:
f6:1a:4b:4b:fd:a8:5a:a3:da:b4:54:98:6b:fd:6d:
96:8e:63:b9:48:af:65:aa:4e:03:ec:45:57:9b:8f:
e1:6b:64:3e:89:b4:99:7a:2e:e7:3b:4a:cd:34:30:
1b:33:b8:75:ba:89:ad:38:32:ab:a6:03:ab:c8:4f:
9e:90:34:46:98:b1:d8:4b:b1:23:bf:d5:d7:73:69:
58:fa:14:c5:d7:1b:b2:3e:75:2e:b3:93:6c:83:f3:
c2:44:80:31:ef:0b:7c:71:c8:45:5d:fc:c3:11:40:
8f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DC:1D:88:39:05:44:2F:AA:89:79:38:31:EA:C3:68:60:03:3B:B8
X509v3 Authority Key Identifier:
keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20323038393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.99.22.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e8:8a:fa:6c:2d:5d:eb:5f:ca:43:e6:50:eb:92:cb:f4:43:
4c:6c:a6:c1:c9:b6:2c:db:18:35:66:e1:63:10:16:ec:ee:0c:
5f:04:8a:24:88:6c:62:6a:e4:63:e1:c7:f1:63:3e:59:90:5b:
29:83:9e:ae:60:df:b3:9a:ea:49:94:f7:4e:d4:3b:b1:dc:0d:
55:3f:ea:f0:68:a2:7d:73:34:b4:0d:40:fd:eb:10:82:e4:79:
1d:8d:b5:3c:cb:96:c1:a3:93:7f:dd:4d:1d:23:e4:83:6f:1a:
e4:da:1a:64:6e:5e:85:10:5a:e9:64:5e:0c:00:9a:68:5d:35:
d0:a5:42:53:4b:1e:0c:37:4f:5d:5b:62:5f:97:2c:f2:92:9f:
c6:92:86:ef:d5:a0:9c:b1:3b:71:d1:d7:34:b4:59:67:39:8a:
69:c4:88:c3:c3:89:5a:cc:48:aa:f0:5e:a1:b9:3b:33:5b:c9:
4b:d8:18:44:58:11:b2:4e:52:70:0d:d9:1b:ba:16:89:e9:ac:
9a:22:c4:d1:2c:07:fb:fb:e1:c3:3f:fd:5d:8f:1c:e5:a7:ff:
2f:4b:74:34:c9:f1:6c:a2:96:4e:84:f6:01:73:f8:45:82:d9:
e3:e6:7a:89:6b:cd:34:76:54:7f:91:d8:e0:cb:2b:22:79:42:
d2:e1:0e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org