Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20323034373239.roa
File: 3137332e3234372e3233302e302f32342d3234203d3e20323034373239.roa (raw, json)
Hash identifier: fQJcyE4v1dpLG0ibKq3xfIpApusVLRZT01kIkGUucBk=
Subject key identifier: 60:DC:E1:13:6C:C7:62:8E:9A:3B:B5:B2:0D:12:DB:CB:49:55:CE:0D
Certificate issuer: /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial: 73707BC809411EBD08F9803E593F251DABF2B007
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20323034373239.roa
Signing time: Wed 26 Jun 2024 20:34:38 +0000
ROA not before: Wed 26 Jun 2024 20:29:38 +0000
ROA not after: Wed 25 Jun 2025 20:34:38 +0000
asID: 204729
IP address blocks: 173.247.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 08:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:70:7b:c8:09:41:1e:bd:08:f9:80:3e:59:3f:25:1d:ab:f2:b0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Validity
Not Before: Jun 26 20:29:38 2024 GMT
Not After : Jun 25 20:34:38 2025 GMT
Subject: CN=60DCE1136CC7628E9A3BB5B20D12DBCB4955CE0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:96:32:97:49:3b:fb:4e:64:bc:7e:3e:5a:
74:0f:e3:22:96:03:38:16:cd:36:1c:4b:1c:08:f9:
fe:d7:74:ab:06:39:57:c8:98:fd:25:50:f4:1a:28:
6c:c0:13:ce:8b:3e:3d:ad:86:31:3a:8a:ee:1f:f3:
a1:bc:39:29:8b:a4:d9:9b:ae:72:6a:47:3e:56:64:
c9:75:3b:9d:25:d1:41:fc:a8:a1:57:ae:8c:f9:d5:
3f:81:70:34:13:c0:30:9f:a8:03:2f:9d:ba:08:ce:
fb:60:8a:26:8d:92:fb:44:63:23:39:f2:88:5e:5b:
38:ae:76:2e:a5:9d:83:32:72:be:86:3e:5f:26:2d:
53:7f:25:08:53:1b:46:d4:12:30:bb:3e:63:a2:1b:
48:e4:7d:87:fb:06:33:56:34:ca:35:24:af:6a:e3:
31:11:e8:92:55:ac:dd:da:f5:d2:02:58:c1:fc:a7:
cc:11:b4:a2:fd:a7:d8:fd:34:b7:44:75:a8:8b:10:
ac:92:54:85:85:28:73:ab:bc:b1:48:d4:b0:b5:9c:
aa:05:9f:7a:ca:e4:81:71:32:f7:0f:8d:c3:a2:22:
ea:c0:32:98:84:9f:06:98:80:c9:58:28:2a:65:15:
3b:da:86:04:49:4a:a7:8b:74:80:5b:ca:eb:55:c3:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DC:E1:13:6C:C7:62:8E:9A:3B:B5:B2:0D:12:DB:CB:49:55:CE:0D
X509v3 Authority Key Identifier:
keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20323034373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.247.230.0/24
Signature Algorithm: sha256WithRSAEncryption
43:94:6b:a0:8e:ee:b9:73:d1:c9:40:94:3e:a5:f5:6c:b0:1d:
b6:ec:2c:3f:bd:60:a9:22:35:35:5e:67:7a:a9:c2:a6:6b:c4:
95:48:8f:c6:a2:d4:14:8d:28:5f:3a:33:f0:a3:c2:f2:21:19:
2c:56:1c:88:de:98:2f:56:b1:51:8e:6e:45:27:a7:a9:cc:b4:
6e:69:47:5d:e0:de:56:e9:2a:6b:b1:da:19:02:cd:b4:63:c1:
e2:93:96:33:ec:40:06:63:aa:0a:23:bc:e4:c7:d3:33:c5:e5:
67:a0:92:ad:de:85:9c:50:69:74:01:ca:77:1f:e2:c4:73:10:
8c:49:77:a0:5e:94:7e:3b:4f:9b:42:92:be:ce:6a:66:fb:24:
32:02:84:5c:4e:cf:f6:94:0a:c3:0d:dc:b9:1e:a2:05:1c:64:
6c:ad:74:70:bc:da:04:72:06:c7:05:1e:7a:f6:90:f6:67:b5:
33:bc:37:39:38:01:2c:0b:9c:61:9e:38:a8:eb:11:75:ff:55:
90:07:83:1b:9d:eb:1b:c1:ff:0c:b7:02:7e:1f:54:ca:a7:71:
63:71:71:b0:01:4b:49:8f:30:dc:01:43:6f:e1:64:22:87:72:
6f:bf:f3:c2:42:5b:27:ea:f9:ce:f9:db:b2:ad:cc:68:56:22:
76:50:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 10:24:39 2024 by rpki-client on console-fra.rpki-client.org