Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136312e302f32342d3234203d3e20313335373532.roa
File: 3139392e3230342e3136312e302f32342d3234203d3e20313335373532.roa (raw, json)
Hash identifier: 8wCP72A7HcsPbqm04bV+ai0yFz46MagaJ3X5F3gok4E=
Subject key identifier: D6:E1:E9:F5:1B:13:6B:AA:CA:08:47:E5:68:30:57:6A:46:EA:07:70
Certificate issuer: /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial: 1DCDB2E0CC68DB16CCD8DD3BD28781A1507A29FF
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136312e302f32342d3234203d3e20313335373532.roa
Signing time: Mon 09 Jan 2023 06:38:47 +0000
ROA not before: Mon 09 Jan 2023 06:33:47 +0000
ROA not after: Mon 08 Jan 2024 06:38:47 +0000
asID: 135752
IP address blocks: 199.204.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:cd:b2:e0:cc:68:db:16:cc:d8:dd:3b:d2:87:81:a1:50:7a:29:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Validity
Not Before: Jan 9 06:33:47 2023 GMT
Not After : Jan 8 06:38:47 2024 GMT
Subject: CN=D6E1E9F51B136BAACA0847E56830576A46EA0770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:df:17:fd:80:87:e3:00:f0:cd:be:bb:c1:fd:
22:6a:50:62:fa:a2:bc:c1:d5:d5:e9:2c:df:68:7c:
50:cc:69:0d:01:37:c6:ef:a9:a2:2d:7a:83:d2:3d:
59:dc:c8:86:d5:ec:f6:a6:a2:a1:be:9c:39:15:1b:
c6:16:95:20:ed:1c:c5:69:0c:6d:65:f8:de:12:c8:
0b:f6:75:3a:4b:2a:0f:36:36:a3:95:14:e6:d1:49:
6e:e8:e0:ff:38:3c:88:ac:a5:8f:07:81:f8:97:a8:
7f:e9:c8:44:fd:1e:d2:81:56:b3:1f:c5:34:dc:e7:
bf:ac:75:9f:14:89:7f:c9:08:4e:ee:7d:16:55:46:
0e:5e:04:cf:ed:74:ce:d1:05:04:ff:17:2b:29:ca:
76:f5:b2:67:4f:5f:ce:63:c2:c4:aa:e8:ee:5a:f5:
5f:cd:28:80:c5:9e:bc:41:07:e1:ca:29:ff:dd:2c:
51:ae:d0:d5:db:c8:a7:10:fb:39:19:84:9e:8b:84:
ed:7a:e2:0f:76:84:d0:d7:cd:36:4e:e4:70:82:a9:
6d:84:2e:0c:84:35:4e:77:c6:1e:6c:0b:77:59:58:
cf:2e:0b:5c:d9:45:e2:74:ce:8c:42:c1:35:0c:78:
1b:6a:51:9e:12:ad:bc:53:27:3b:83:0e:4c:6e:00:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E1:E9:F5:1B:13:6B:AA:CA:08:47:E5:68:30:57:6A:46:EA:07:70
X509v3 Authority Key Identifier:
keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136312e302f32342d3234203d3e20313335373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.204.161.0/24
Signature Algorithm: sha256WithRSAEncryption
90:6b:e9:c7:cb:35:6f:ea:c4:06:8c:20:b0:ad:ad:2a:ad:dc:
e4:08:8a:d5:5e:a1:43:28:3e:7d:fb:32:bc:0a:cf:b6:38:1e:
32:f8:48:dd:59:d8:7d:1a:65:52:43:d1:57:b1:de:84:85:38:
62:e6:d9:96:ae:37:dd:ae:01:4d:58:95:84:d2:16:a8:74:a4:
7d:59:1d:19:07:cc:0f:44:43:ee:58:86:d2:86:0a:e0:ba:85:
46:26:76:8e:4a:e7:20:9b:ec:9d:0f:df:7f:3f:81:d1:a6:7b:
5b:be:5b:e7:c5:df:9e:ff:65:67:2a:bb:c8:5c:c3:c5:30:51:
3b:2e:5b:66:de:0a:28:a0:95:92:8e:e4:d1:46:35:6d:51:f4:
65:12:be:6e:25:6e:3f:8b:34:3e:ac:b4:11:c1:1c:77:0b:91:
c2:07:6d:e9:c4:7a:7c:b3:86:23:ee:4a:e0:7c:f2:0b:c6:ef:
6d:51:33:2f:9e:fb:04:7e:df:54:65:9f:36:1c:40:dd:1e:dd:
48:5d:5e:12:46:33:f1:f9:01:66:e2:b3:a6:97:76:00:66:59:
7a:33:4b:cd:fb:cd:93:c1:90:16:85:3e:84:89:03:b3:d5:2a:
58:3e:20:a4:87:24:cc:27:9d:6b:a4:70:a2:de:bb:a4:2e:cd:
84:48:9c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:52 2023 by rpki-client on console.sobornost.net