Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136302e302f32342d3234203d3e20313939383239.roa
File: 3139392e3230342e3136302e302f32342d3234203d3e20313939383239.roa (raw, json)
Hash identifier: r04opfH/9gDrDn7XW380VHyvFW2xuMWKGzrcF6/z0Rc=
Subject key identifier: 39:20:C5:73:CF:33:96:43:C6:AC:C5:E4:F5:50:AB:B3:63:F6:1B:50
Certificate issuer: /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial: 5425693E74518F9BA02469C1C2A36C643F7B645A
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136302e302f32342d3234203d3e20313939383239.roa
Signing time: Tue 07 Nov 2023 16:49:05 +0000
ROA not before: Tue 07 Nov 2023 16:44:05 +0000
ROA not after: Tue 05 Nov 2024 16:49:05 +0000
asID: 199829
IP address blocks: 199.204.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:25:69:3e:74:51:8f:9b:a0:24:69:c1:c2:a3:6c:64:3f:7b:64:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Validity
Not Before: Nov 7 16:44:05 2023 GMT
Not After : Nov 5 16:49:05 2024 GMT
Subject: CN=3920C573CF339643C6ACC5E4F550ABB363F61B50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:ed:70:1a:28:f6:4a:8a:b7:da:90:9f:b3:
8e:d4:6b:ef:fb:20:7b:6d:a4:67:e5:ee:65:01:d2:
91:dd:bf:d3:19:a7:0c:3c:c6:22:36:87:98:d2:13:
1e:ae:b3:20:ea:45:1c:e7:9b:f3:2f:2d:5c:d2:a1:
66:6a:d3:9d:04:df:2e:fc:37:41:0b:8c:58:68:88:
4f:71:bf:ea:ee:21:4c:d9:b3:49:1c:54:ff:e7:85:
06:91:63:86:af:d8:b1:4f:f6:64:8b:d1:8d:77:6b:
55:5f:fe:95:48:c1:3f:5f:bc:ac:cf:c3:31:32:a4:
e4:04:a5:10:ed:7a:b3:50:40:c0:e1:6a:07:b1:2c:
39:bd:87:95:05:ef:93:90:76:20:00:45:a1:d5:fc:
ab:40:53:14:20:4a:c2:26:be:1d:e6:5f:ad:96:1c:
f8:bf:03:a7:c1:93:36:e6:78:c9:a8:e6:71:02:e8:
b0:97:6c:2f:b1:43:50:a7:fa:8a:c7:8a:a8:c0:29:
53:9d:dc:27:ad:e6:ce:ff:61:27:5e:6e:c1:45:a3:
03:c3:5c:48:d1:3f:05:1e:e1:a6:91:ff:83:8b:14:
48:8b:8f:a7:0e:e0:7f:30:a3:b6:e4:87:7a:f5:15:
11:48:5a:a2:88:0e:3d:b4:97:31:b8:76:5b:0c:58:
7b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:20:C5:73:CF:33:96:43:C6:AC:C5:E4:F5:50:AB:B3:63:F6:1B:50
X509v3 Authority Key Identifier:
keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136302e302f32342d3234203d3e20313939383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.204.160.0/24
Signature Algorithm: sha256WithRSAEncryption
89:fb:d0:5b:8b:f7:01:69:b2:63:bb:49:ad:a0:01:04:56:fc:
9a:ca:b5:39:d3:b4:90:a8:b8:59:78:5a:ce:71:93:69:dd:14:
e8:e1:29:49:e9:ca:fd:fe:13:3e:0c:b4:60:85:00:e8:12:d4:
9a:7b:b9:02:a2:90:c6:0b:63:41:48:76:a7:75:a4:3b:93:04:
65:37:6e:5b:65:ac:b6:7f:67:2b:71:5a:cc:ff:3c:79:a1:36:
cb:da:5b:c8:b6:91:9f:19:d2:b5:0d:6a:46:7a:ee:46:3f:52:
ca:75:c3:03:41:73:f5:b0:92:76:61:c8:cf:bf:3c:00:a6:b3:
e1:2e:65:42:c1:e7:18:b2:12:8e:2e:4c:a6:bc:05:e9:00:f6:
51:97:dc:29:09:a7:fd:32:91:64:f2:ae:0f:7f:2c:d2:c7:b1:
7d:77:bf:35:c8:6d:c9:54:d2:92:a0:70:30:90:c1:68:d5:5e:
0e:53:5e:62:5d:25:b8:8b:f0:7b:54:d4:b2:ad:cb:cc:6e:bd:
a3:a7:56:d9:ca:ae:de:6d:be:ef:5a:d8:e4:2d:26:52:88:35:
a4:5f:c0:77:83:bc:f6:10:6e:84:61:51:88:e7:ad:30:43:82:
0f:b7:56:96:81:fb:9c:5c:97:56:f1:c5:47:40:de:5f:b2:a1:
b2:99:30:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:51 2023 by rpki-client on console.sobornost.net