Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3137332e38342e31322e302f32342d3234203d3e2035363530.roa
File: 3137332e38342e31322e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: gej/HoV08dYwHioVrQ67h8LA8ob1Az2bahkQz6QC77M=
Subject key identifier: E0:58:8B:12:2A:1E:26:F9:D7:B4:A1:D1:E1:CE:92:A8:B9:39:3A:DE
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 3B22F1E0B2A8FBD7B5A60E8B17B2AD93EC548E5F
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3137332e38342e31322e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:43:26 +0000
ROA not before: Thu 02 Nov 2023 11:38:26 +0000
ROA not after: Thu 31 Oct 2024 11:43:26 +0000
asID: 5650
IP address blocks: 173.84.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:22:f1:e0:b2:a8:fb:d7:b5:a6:0e:8b:17:b2:ad:93:ec:54:8e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Nov 2 11:38:26 2023 GMT
Not After : Oct 31 11:43:26 2024 GMT
Subject: CN=E0588B122A1E26F9D7B4A1D1E1CE92A8B9393ADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:c0:21:bd:f9:f0:25:10:73:72:3d:5f:8a:
73:a2:4f:22:3e:72:64:e9:a7:8b:32:02:4d:d3:17:
4a:6c:67:bb:17:1f:8d:90:f1:50:5a:e6:d3:37:a2:
96:8c:79:1a:b7:30:6d:11:a6:7d:42:90:4b:2e:a7:
d2:87:6a:95:5e:8f:b6:39:1f:cf:f3:e1:0a:1e:77:
4c:22:68:de:30:e2:04:11:83:bd:cb:29:cd:c8:cb:
31:1f:0a:4d:5b:f3:ee:9e:4e:1b:7f:11:44:6a:d1:
c0:34:82:7d:6d:c3:61:08:53:e6:4e:75:52:50:0e:
2f:0d:12:82:19:08:e0:2b:73:a5:d4:38:78:d4:59:
9d:ad:4b:9e:01:32:e4:4b:c2:f0:e3:06:97:c3:40:
59:d5:bb:fd:16:a5:88:65:86:fd:90:73:01:c4:06:
94:68:c3:b6:e4:41:bc:db:38:5c:c0:f6:48:ad:9c:
d0:75:c7:8b:7e:cb:e1:09:38:ae:d7:3e:23:eb:e9:
12:81:fd:3d:78:58:e6:e4:c1:c5:0d:3d:5c:80:31:
1a:9f:8f:ea:e9:ff:37:5e:40:fc:9d:e0:8c:06:2d:
b1:5d:11:7c:c3:5f:d4:33:51:4a:96:9a:bf:63:b6:
55:92:c9:84:d7:7d:a3:c7:94:9e:b4:f3:9c:7b:88:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:58:8B:12:2A:1E:26:F9:D7:B4:A1:D1:E1:CE:92:A8:B9:39:3A:DE
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3137332e38342e31322e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.84.12.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f9:ed:ee:c8:a2:eb:41:a9:f5:e1:74:c9:a5:55:e5:88:60:
eb:fc:2b:83:61:3b:c2:4c:db:a8:16:3f:98:30:f7:ef:a2:5c:
aa:62:e5:da:82:34:cb:99:08:fb:55:e7:2a:19:e3:38:ae:45:
cd:c8:ea:00:c0:81:9c:36:05:11:a1:d2:62:b8:99:6c:89:57:
8d:c1:80:ea:11:16:2f:7f:9b:20:9a:30:6e:80:07:92:38:64:
8a:a5:f2:d1:b0:78:83:97:62:54:a2:06:6c:d3:0a:40:d1:43:
17:5d:b3:2e:e8:8c:9c:7e:d1:ef:f1:15:49:e1:95:b4:f8:13:
c7:85:cf:46:b1:60:9d:21:d2:ea:a3:97:41:24:35:53:b0:d8:
c3:68:0a:93:e4:2b:f9:ac:41:23:5a:3c:9f:d5:d2:30:d3:8e:
f6:51:5f:00:99:42:5a:96:72:66:35:20:05:c7:94:96:e3:e1:
6e:59:9b:11:00:df:af:45:93:63:29:5d:53:4c:cb:c9:4e:6a:
0b:0d:0f:1f:9c:ed:6f:f5:a9:5e:c0:a1:cc:0f:05:aa:b2:87:
69:11:54:8b:ab:20:69:7e:7b:e3:ba:6b:34:d6:17:62:cc:ca:
e3:d4:7b:2e:1d:10:c7:b3:7a:e5:ad:98:31:bc:70:a8:ce:38:
de:b1:d4:9f
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUOyLx4LKo+9e1pg6LF7Ktk+xUjl8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjMxMTAyMTEzODI2WhcNMjQxMDMxMTE0MzI2
WjAzMTEwLwYDVQQDEyhFMDU4OEIxMjJBMUUyNkY5RDdCNEExRDFFMUNFOTJBOEI5
MzkzQURFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTDAIb358CUQ
c3I9X4pzok8iPnJk6aeLMgJN0xdKbGe7Fx+NkPFQWubTN6KWjHkatzBtEaZ9QpBL
LqfSh2qVXo+2OR/P8+EKHndMImjeMOIEEYO9yynNyMsxHwpNW/Punk4bfxFEatHA
NIJ9bcNhCFPmTnVSUA4vDRKCGQjgK3Ol1Dh41FmdrUueATLkS8Lw4waXw0BZ1bv9
FqWIZYb9kHMBxAaUaMO25EG82zhcwPZIrZzQdceLfsvhCTiu1z4j6+kSgf09eFjm
5MHFDT1cgDEan4/q6f83XkD8neCMBi2xXRF8w1/UM1FKlpq/Y7ZVksmE132jx5Se
tPOce4gDiQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFOBYixIqHib517Sh0eHOkqi5
OTreMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzQvMzEzNzMzMmUzODM0MmUzMTMyMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACtVAwwDQYJKoZIhvcNAQELBQADggEB
ACX57e7IoutBqfXhdMmlVeWIYOv8K4NhO8JM26gWP5gw9++iXKpi5dqCNMuZCPtV
5yoZ4ziuRc3I6gDAgZw2BRGh0mK4mWyJV43BgOoRFi9/myCaMG6AB5I4ZIql8tGw
eIOXYlSiBmzTCkDRQxddsy7ojJx+0e/xFUnhlbT4E8eFz0axYJ0h0uqjl0EkNVOw
2MNoCpPkK/msQSNaPJ/V0jDTjvZRXwCZQlqWcmY1IAXHlJbj4W5ZmxEA369Fk2Mp
XVNMy8lOagsNDx+c7W/1qV7AocwPBaqyh2kRVIurIGl+e+O6azTWF2LMyuPUey4d
EMezeuWtmDG8cKjOON6x1J8=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:44 2023 by rpki-client on console.sobornost.net