Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS202400/0/36342e34392e32382e302f32342d3234203d3e20323032343030.roa
File: 36342e34392e32382e302f32342d3234203d3e20323032343030.roa (raw, json)
Hash identifier: FQY3AVLuealFvrWTqbwm8ywgJ065QnqNjuyFi1yImu4=
Subject key identifier: 0F:09:F5:CB:84:2D:89:C2:EB:25:E2:BB:E5:D0:50:BA:D1:5B:1F:6B
Certificate issuer: /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial: 483E2D1D8718E0959A21FF8E010EA8B847AE942F
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access: rsync://rpki.co/repo/AS202400/0/36342e34392e32382e302f32342d3234203d3e20323032343030.roa
Signing time: Sat 03 Aug 2024 10:48:51 +0000
ROA not before: Sat 03 Aug 2024 10:43:51 +0000
ROA not after: Sat 02 Aug 2025 10:48:51 +0000
asID: 202400
IP address blocks: 64.49.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Aug 2024 13:27:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:3e:2d:1d:87:18:e0:95:9a:21:ff:8e:01:0e:a8:b8:47:ae:94:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Validity
Not Before: Aug 3 10:43:51 2024 GMT
Not After : Aug 2 10:48:51 2025 GMT
Subject: CN=0F09F5CB842D89C2EB25E2BBE5D050BAD15B1F6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:8b:25:68:01:50:00:1d:51:d7:c7:b4:62:
0b:e2:a5:93:49:92:d3:21:83:6d:48:89:65:ad:f6:
03:19:ec:22:8c:d3:5b:f1:c9:05:13:17:cf:12:cf:
b0:9c:7e:a0:6e:3d:05:18:2d:6a:84:61:7d:35:56:
35:45:5f:91:9d:03:2e:7a:67:af:11:2f:fa:01:31:
29:04:fe:7a:12:09:6e:95:69:77:bc:32:34:f6:cf:
bd:54:6c:3f:05:da:3c:1d:9a:45:75:17:08:72:f5:
8a:8c:6d:02:82:c2:94:9a:37:cf:cd:92:1d:7e:5f:
42:44:0f:e5:e3:fc:6e:fc:c8:61:93:ca:18:71:f2:
96:c1:c3:7b:47:4f:e1:1b:9f:64:92:31:bf:74:0c:
b0:04:ad:26:2a:ab:56:02:7b:2a:37:4b:bd:42:d7:
53:a4:48:ec:04:29:52:da:9c:00:45:52:2d:00:ca:
78:87:c9:ab:67:39:68:c9:7d:3c:ee:b1:de:a4:c2:
f2:d9:fa:31:c3:8f:86:43:4d:f6:16:ba:08:5a:89:
71:62:f2:9c:04:37:bb:c1:e0:b4:86:27:88:55:e0:
3e:05:1c:ac:e9:71:8d:39:01:e6:4e:dd:c9:06:55:
70:2e:a8:9a:b4:1d:4b:6b:51:cd:44:19:d1:37:12:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:09:F5:CB:84:2D:89:C2:EB:25:E2:BB:E5:D0:50:BA:D1:5B:1F:6B
X509v3 Authority Key Identifier:
keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS202400/0/36342e34392e32382e302f32342d3234203d3e20323032343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.49.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:35:f8:65:58:bc:70:05:3a:4e:78:89:37:42:fa:95:5c:7f:
83:bb:f6:8d:dc:b0:ee:ba:78:67:50:21:94:d8:75:95:e4:0a:
a2:0d:8d:75:fd:37:13:b6:d5:20:6e:97:7e:66:df:71:0c:dd:
a5:4c:e2:c2:29:bb:65:ac:76:7b:70:ba:ce:d9:54:21:d3:a9:
d6:ea:cf:1d:7a:08:cf:62:58:c3:5d:ac:2f:f5:08:52:8b:5b:
8d:a3:7c:cf:d2:b5:9e:88:d9:12:77:86:3c:5e:d6:67:2a:cd:
bb:2a:2e:ae:a1:cf:63:d4:db:2b:6b:df:f0:7a:d5:39:2a:12:
eb:92:84:cf:e1:ec:e3:8a:94:1e:73:9a:37:67:96:02:1c:f7:
e5:40:45:24:46:86:ef:30:82:78:d5:3f:a7:00:86:ff:6c:56:
1f:1a:25:e9:f2:b1:fb:89:89:21:4e:c8:52:15:af:7d:f9:16:
ad:d2:67:98:a0:37:52:78:75:35:08:d8:f9:12:31:fe:61:ac:
da:b6:2e:50:99:83:53:68:92:54:5b:66:bf:e2:6b:46:b2:f4:
51:5e:43:e7:a8:03:a3:51:1a:71:30:c0:e6:b9:0e:7e:f5:a9:
0a:a1:23:34:f6:db:25:fd:e8:c3:c4:8d:96:e6:a2:44:91:54:
57:65:3e:61
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUSD4tHYcY4JWaIf+OAQ6ouEeulC8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmE1YWY3NGRiYjlkNGQ0MzdjZjNhYzEzMjA2MDY3Y2Fh
MTFiMTc5ODMxOTYyM2YyMWYwHhcNMjQwODAzMTA0MzUxWhcNMjUwODAyMTA0ODUx
WjAzMTEwLwYDVQQDEygwRjA5RjVDQjg0MkQ4OUMyRUIyNUUyQkJFNUQwNTBCQUQx
NUIxRjZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov+LJWgBUAAd
UdfHtGIL4qWTSZLTIYNtSIllrfYDGewijNNb8ckFExfPEs+wnH6gbj0FGC1qhGF9
NVY1RV+RnQMuemevES/6ATEpBP56EglulWl3vDI09s+9VGw/Bdo8HZpFdRcIcvWK
jG0CgsKUmjfPzZIdfl9CRA/l4/xu/Mhhk8oYcfKWwcN7R0/hG59kkjG/dAywBK0m
KqtWAnsqN0u9QtdTpEjsBClS2pwARVItAMp4h8mrZzloyX087rHepMLy2foxw4+G
Q032FroIWolxYvKcBDe7weC0hieIVeA+BRys6XGNOQHmTt3JBlVwLqiatB1La1HN
RBnRNxLLhwIDAQABo4ICWjCCAlYwHQYDVR0OBBYEFA8J9cuELYnC6yXiu+XQULrR
Wx9rMB8GA1UdIwQYMBaAFLC+er2+s+AUfQgSK2mcR4yZobD/MA4GA1UdDwEB/wQE
AwIHgDBdBgNVHR8EVjBUMFKgUKBOhkxyc3luYzovL3Jwa2kuY28vcmVwby9BUzIw
MjQwMC8wL0IwQkU3QUJEQkVCM0UwMTQ3RDA4MTIyQjY5OUM0NzhDOTlBMUIwRkYu
Y3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jw
a2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgw
YS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3
LTFiZTIwNDkzM2FlNS83MGY1ZDgwYy05ZGFhLTRmNmYtOGY1OC0xODFjNWYwYzRi
MGEvMmE1YWY3NGRiYjlkNGQ0MzdjZjNhYzEzMjA2MDY3Y2FhMTFiMTc5ODMxOTYy
M2YyMWYuY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6Ly9y
cGtpLmNvL3JlcG8vQVMyMDI0MDAvMC8zNjM0MmUzNDM5MmUzMjM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMDMyMzQzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDEcMA0GCSqG
SIb3DQEBCwUAA4IBAQCaNfhlWLxwBTpOeIk3QvqVXH+Du/aN3LDuunhnUCGU2HWV
5AqiDY11/TcTttUgbpd+Zt9xDN2lTOLCKbtlrHZ7cLrO2VQh06nW6s8degjPYljD
Xawv9QhSi1uNo3zP0rWeiNkSd4Y8XtZnKs27Ki6uoc9j1Nsra9/wetU5KhLrkoTP
4ezjipQec5o3Z5YCHPflQEUkRobvMIJ41T+nAIb/bFYfGiXp8rH7iYkhTshSFa99
+Rat0meYoDdSeHU1CNj5EjH+Yazati5QmYNTaJJUW2a/4mtGsvRRXkPnqAOjURpx
MMDmuQ5+9akKoSM09tsl/ejDxI2W5qJEkVRXZT5h
-----END CERTIFICATE-----
Generated at Sat Aug 17 16:28:12 2024 by rpki-client on console-fra.rpki-client.org