Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3135342e302f32342d3234203d3e203631313338.roa
File: 3230352e3233342e3135342e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: tyPgvJHnw7QJtdf6HsN5vj1k1v8NfFSJBO7SvtHUNK8=
Subject key identifier: A4:04:DB:51:91:14:B5:AF:50:96:A6:CC:EC:E4:B2:01:A7:72:19:BD
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 060FA357913B472C55193829DB7DE4912BC66B73
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3135342e302f32342d3234203d3e203631313338.roa
Signing time: Fri 12 May 2023 12:20:46 +0000
ROA not before: Fri 12 May 2023 12:15:46 +0000
ROA not after: Fri 10 May 2024 12:20:46 +0000
asID: 61138
IP address blocks: 205.234.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:0f:a3:57:91:3b:47:2c:55:19:38:29:db:7d:e4:91:2b:c6:6b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 12 12:15:46 2023 GMT
Not After : May 10 12:20:46 2024 GMT
Subject: CN=A404DB519114B5AF5096A6CCECE4B201A77219BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:e4:82:76:08:ad:f5:89:2c:1e:37:0b:73:
19:8d:7d:8d:0a:38:ee:3f:6b:62:69:7d:0e:a5:11:
6d:f0:cf:a4:e0:e1:da:99:0d:a5:fe:88:24:34:46:
ef:fd:4e:2d:26:bd:89:a1:be:92:2d:2a:78:ac:5c:
4f:72:60:3b:9f:58:6b:9d:eb:7b:f7:b8:ef:3f:a9:
07:28:df:56:9d:07:e1:9c:9b:68:a3:cc:79:e2:52:
16:53:93:1e:89:32:23:6f:d5:e5:07:0d:26:61:d9:
9e:94:31:06:dd:31:8c:d7:61:42:5d:02:b0:29:2f:
f0:89:61:25:9f:b2:3e:09:80:cc:92:10:cf:39:ad:
62:5b:86:2b:53:5a:12:25:17:31:72:a6:af:d1:2a:
5d:1c:29:a2:c3:d5:47:03:ae:5c:e0:2a:c7:ad:86:
5f:c1:a3:74:07:10:b0:a1:d5:85:98:c9:2e:50:44:
17:d0:fe:7f:6f:32:41:ac:b4:47:f3:03:7c:99:68:
ce:ae:74:69:e9:f5:bc:5c:6e:1a:b7:8a:e9:dd:ae:
08:94:03:72:a2:12:1a:5d:52:44:db:06:fd:f9:59:
b5:89:a1:90:be:a8:b6:0d:c5:a9:ea:93:1f:71:87:
8a:b9:ae:ec:25:56:e2:7d:32:54:fd:e0:c7:8a:ae:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:04:DB:51:91:14:B5:AF:50:96:A6:CC:EC:E4:B2:01:A7:72:19:BD
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3135342e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.154.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:58:bf:c3:19:51:7d:cc:b5:f0:e9:dc:02:50:26:75:04:f7:
a3:79:b5:8f:46:39:56:00:8d:26:14:55:9b:2a:c4:19:7a:79:
0a:21:ac:c6:99:1e:5f:d8:e5:37:bc:ee:7f:d0:41:c6:be:a6:
ac:c7:de:04:24:bb:fd:08:ab:02:29:fd:2d:b0:07:62:eb:a3:
99:cc:44:e3:94:c1:a6:79:9a:ef:bf:6c:3f:95:d6:12:e7:3f:
01:dd:72:60:97:3c:f3:46:dc:41:72:a9:84:12:50:ba:8f:04:
3e:38:c7:45:c9:42:a7:08:b9:93:58:db:4f:95:be:d0:a9:e7:
0f:b4:01:f2:60:ea:a3:e2:25:6b:38:fb:18:81:18:bc:de:ed:
e8:5d:7e:5e:05:2d:ec:f4:cb:23:ef:f3:30:71:3c:89:c1:bd:
64:d4:a6:be:3f:27:95:b7:c9:0f:06:c3:54:4d:b0:1a:c7:bb:
87:cc:9f:18:e6:ff:07:bb:50:b3:53:be:ce:97:c5:e9:f3:dd:
c4:09:7e:9c:06:eb:a4:0a:5b:ff:9f:80:d0:46:3c:5c:84:3d:
71:0c:ef:81:05:05:b1:35:ef:df:72:c1:b7:35:15:79:55:f4:
bb:f8:45:d9:05:bb:8f:18:8a:fd:70:d2:8f:d2:54:2f:3c:7a:
7a:ed:ea:d5
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUBg+jV5E7RyxVGTgp233kkSvGa3MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNTEyMTIxNTQ2WhcNMjQwNTEwMTIyMDQ2
WjAzMTEwLwYDVQQDEyhBNDA0REI1MTkxMTRCNUFGNTA5NkE2Q0NFQ0U0QjIwMUE3
NzIxOUJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNPkgnYIrfWJ
LB43C3MZjX2NCjjuP2tiaX0OpRFt8M+k4OHamQ2l/ogkNEbv/U4tJr2Job6SLSp4
rFxPcmA7n1hrnet797jvP6kHKN9WnQfhnJtoo8x54lIWU5MeiTIjb9XlBw0mYdme
lDEG3TGM12FCXQKwKS/wiWEln7I+CYDMkhDPOa1iW4YrU1oSJRcxcqav0SpdHCmi
w9VHA65c4CrHrYZfwaN0BxCwodWFmMkuUEQX0P5/bzJBrLRH8wN8mWjOrnRp6fW8
XG4at4rp3a4IlANyohIaXVJE2wb9+Vm1iaGQvqi2DcWp6pMfcYeKua7sJVbifTJU
/eDHiq6SoQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKQE21GRFLWvUJamzOzksgGn
chm9MB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzAzNTJlMzIzMzM0MmUzMTM1MzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMxMzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzeqaMA0GCSqGSIb3DQEB
CwUAA4IBAQANWL/DGVF9zLXw6dwCUCZ1BPejebWPRjlWAI0mFFWbKsQZenkKIazG
mR5f2OU3vO5/0EHGvqasx94EJLv9CKsCKf0tsAdi66OZzETjlMGmeZrvv2w/ldYS
5z8B3XJglzzzRtxBcqmEElC6jwQ+OMdFyUKnCLmTWNtPlb7QqecPtAHyYOqj4iVr
OPsYgRi83u3oXX5eBS3s9Msj7/MwcTyJwb1k1Ka+PyeVt8kPBsNUTbAax7uHzJ8Y
5v8Hu1CzU77Ol8Xp893ECX6cBuukClv/n4DQRjxchD1xDO+BBQWxNe/fcsG3NRV5
VfS7+EXZBbuPGIr9cNKP0lQvPHp67erV
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:42 2023 by rpki-client on console.sobornost.net