Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3137302e3231352e37312e302f32342d3234203d3e2035363530.roa
File: 3137302e3231352e37312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: ahjlTt0mj/lzTcQmvpMcG9pWDHlp1Q6cc6gjWcmLuGg=
Subject key identifier: 5A:69:75:F3:11:71:5F:D8:BE:16:27:09:BE:85:F5:30:48:77:FC:E3
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 1C7E986E45F753368C626E72A65D7D71C1CC3919
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3137302e3231352e37312e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:36:54 +0000
ROA not before: Thu 02 Nov 2023 11:31:54 +0000
ROA not after: Thu 31 Oct 2024 11:36:54 +0000
asID: 5650
IP address blocks: 170.215.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7e:98:6e:45:f7:53:36:8c:62:6e:72:a6:5d:7d:71:c1:cc:39:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Nov 2 11:31:54 2023 GMT
Not After : Oct 31 11:36:54 2024 GMT
Subject: CN=5A6975F311715FD8BE162709BE85F5304877FCE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:35:19:b7:23:16:0f:fe:a8:5c:66:92:c3:
74:bc:63:c4:e0:ec:a3:4a:7d:9a:f9:81:98:7f:7f:
e1:1d:65:6c:16:80:c2:4b:a8:7c:6f:0b:67:cc:db:
46:e0:68:e2:69:b3:d0:13:c7:a5:2d:7f:97:4a:3e:
38:47:fe:e2:07:ac:69:9d:e4:32:04:af:25:c9:94:
f8:da:2e:49:68:48:41:14:72:94:c7:0e:b2:59:07:
5d:6e:8a:0f:35:c0:39:6a:e0:34:f3:96:bf:d1:7a:
44:ec:4f:23:0d:1b:a4:09:39:a5:68:9a:e2:38:a8:
5a:ab:f9:cd:a7:7e:5e:60:77:e1:e9:fc:d0:f0:bb:
9f:cd:29:d3:89:f8:78:70:a7:f0:4a:dd:c6:64:41:
3a:1e:9b:00:ef:07:9c:ee:1c:d7:db:d1:12:d7:0a:
bd:1c:4d:81:65:33:36:3f:d3:68:e8:7b:31:53:c0:
3e:d4:5f:f5:66:3b:a6:7c:f7:a7:c8:97:6f:78:51:
00:c5:9b:79:17:9f:b0:82:1e:87:3c:c8:78:ae:f1:
18:97:17:f4:a4:d4:3d:87:25:5d:7c:1f:e9:99:4f:
cc:2a:99:ac:42:0f:ab:cf:2d:b7:00:0f:44:a3:42:
59:1a:3e:9a:fc:c7:e2:71:83:e6:d4:fb:84:fa:1d:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:69:75:F3:11:71:5F:D8:BE:16:27:09:BE:85:F5:30:48:77:FC:E3
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3137302e3231352e37312e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.215.71.0/24
Signature Algorithm: sha256WithRSAEncryption
52:26:18:f9:45:65:0f:ce:02:57:9e:0d:98:c6:37:63:7c:ed:
5c:77:d6:ec:cf:ed:9b:63:e1:b7:fe:74:b6:34:8d:e9:65:74:
6d:3c:b2:4e:09:5f:1c:71:93:d8:27:8c:26:34:94:ce:0d:cd:
51:71:cd:23:ea:28:0f:06:c5:fa:27:18:d1:eb:5f:f3:40:1c:
1c:1a:a6:9a:01:e2:3f:47:e3:a4:89:87:d1:a2:f6:45:ed:87:
12:6a:48:94:d6:66:44:4e:3d:9d:2a:8b:ca:72:5b:cd:db:2a:
df:71:61:fc:8d:cf:e3:5d:f9:0a:39:b7:13:47:4e:c4:1a:02:
7d:f1:e8:d5:90:44:44:17:56:3a:90:9b:5a:79:70:2f:ab:e9:
fe:20:de:b5:94:a6:a0:6a:4b:1f:44:27:ed:cf:26:02:d8:ec:
a5:95:a3:19:9e:20:24:ac:9c:20:d4:62:81:5a:96:7d:e0:06:
57:88:3c:13:14:73:f6:5c:a0:8a:3d:a1:2b:93:05:d1:25:bf:
fe:ca:36:8e:d7:ee:5d:c7:19:62:9d:81:32:fe:98:b2:db:07:
38:6a:0f:cc:75:89:dc:de:43:c6:c2:4b:c0:df:6e:7c:99:c8:
c7:f1:ad:e1:c7:73:6f:90:c4:5f:ac:53:c4:92:64:b7:89:f8:
94:a9:0e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:44 2023 by rpki-client on console.sobornost.net