Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136322e302f32342d3234203d3e20383334.roa
File: 3139392e3230342e3136322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: VbkvlGd2EnT10/7CDPiLTsqC+r17iKYluCDqT9vHMnA=
Subject key identifier: 78:F1:CA:C6:E5:A0:C4:77:B1:19:1F:2D:A4:E7:64:3E:FD:6D:63:84
Certificate issuer: /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial: 6EF1C6217FECEC096871C99D4B04DAD57480EA
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136322e302f32342d3234203d3e20383334.roa
Signing time: Mon 31 Jul 2023 13:30:02 +0000
ROA not before: Mon 31 Jul 2023 13:25:02 +0000
ROA not after: Mon 29 Jul 2024 13:30:02 +0000
asID: 834
IP address blocks: 199.204.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 16:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f1:c6:21:7f:ec:ec:09:68:71:c9:9d:4b:04:da:d5:74:80:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Validity
Not Before: Jul 31 13:25:02 2023 GMT
Not After : Jul 29 13:30:02 2024 GMT
Subject: CN=78F1CAC6E5A0C477B1191F2DA4E7643EFD6D6384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:bc:4a:8f:1d:fa:66:a3:e5:92:2b:c5:62:
32:83:8f:74:8f:de:72:39:dd:2c:77:ce:44:37:01:
c1:30:df:7f:79:e5:95:3f:60:a4:2b:ad:6a:1a:f6:
b5:29:01:ff:7f:2b:ec:0c:8e:dd:3c:51:d0:a3:9f:
22:e8:7c:a0:52:f0:fe:0a:d2:b5:cf:0d:0a:b6:e5:
a6:88:35:e7:99:82:35:f8:20:86:56:e9:56:a0:ed:
a4:2b:b4:8e:be:7c:d4:9d:fc:20:98:97:23:ed:ed:
84:af:f4:1d:b2:8f:70:58:86:50:ed:80:0c:1f:d9:
89:63:4d:17:ab:20:b3:b7:3e:c3:7f:59:e3:ae:c9:
f8:f6:86:15:f5:30:cd:e1:6f:43:0e:a8:af:91:4c:
d7:00:55:e0:27:55:01:86:cb:0c:ba:c0:8f:42:42:
21:4c:77:ea:8e:88:54:e8:33:b0:d3:3a:d0:5a:1b:
09:2e:2d:2d:9f:5c:14:59:25:7e:df:8d:d4:f4:a8:
87:d7:ce:a9:e9:6d:6c:f4:ab:49:86:f5:7d:6d:f5:
79:27:57:4c:09:bf:65:3b:bd:a8:65:01:ff:ca:f3:
fd:81:76:b3:f6:c6:bd:a4:6f:e3:72:f9:65:95:ac:
03:54:2e:2d:07:48:d3:e3:30:c4:c0:05:66:cb:01:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F1:CA:C6:E5:A0:C4:77:B1:19:1F:2D:A4:E7:64:3E:FD:6D:63:84
X509v3 Authority Key Identifier:
keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.204.162.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ff:1e:21:ba:06:c0:9e:14:ba:5f:f0:f4:07:77:73:2f:41:
76:88:52:43:ec:c4:c6:02:d0:d6:61:d3:06:12:b3:6b:58:24:
c1:02:95:91:ec:5c:d5:e8:46:f6:71:91:b6:34:d0:e7:24:b1:
d5:0f:72:02:61:59:3a:b5:2e:1d:c9:44:fb:e1:71:02:da:7d:
6c:3d:49:a6:29:d9:ea:cb:9f:21:89:64:15:48:5f:d9:68:de:
6e:7d:73:b3:84:a3:19:11:0f:bd:27:08:59:dd:7a:bd:c8:c9:
df:be:07:a6:75:61:71:2d:d6:26:e8:99:ed:c2:91:a4:b2:df:
46:aa:6a:db:46:f1:61:4b:5e:45:d5:b6:00:01:f1:31:6c:3e:
44:0b:62:fb:74:5e:fe:e9:6b:4b:06:bd:0e:0f:43:7a:89:9b:
4a:e9:62:a7:48:5b:ad:07:d1:fc:ad:0f:94:4b:90:1a:f2:8f:
dd:2e:98:61:01:a7:68:36:53:56:e3:38:f2:8e:06:05:4f:95:
6a:d1:56:63:de:ce:76:49:ff:1e:ad:8a:fb:ad:f3:e2:2e:8b:
64:66:ae:dd:ee:c9:4f:c0:b4:09:f4:80:d1:91:7b:dd:b8:0c:
36:25:86:49:68:c8:98:3a:cd:79:d9:9f:d5:43:64:cd:fe:6b:
76:da:a3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:57:33 2024 by rpki-client on console.sobornost.net