Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230352e3233382e3232322e302f32342d3234203d3e2033353933.roa
File: 3230352e3233382e3232322e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier: Gjzo7mJtaIJNhz9GAR0zUq++/nyUWQeItJFXW3XxHak=
Subject key identifier: 0F:EE:CE:28:C8:3A:1C:78:65:93:08:EC:38:D4:DD:3F:76:01:5C:C3
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 327D7B4CD2710E25EAEFCE5DD524CB553435AB23
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230352e3233382e3232322e302f32342d3234203d3e2033353933.roa
Signing time: Thu 26 Oct 2023 04:58:01 +0000
ROA not before: Thu 26 Oct 2023 04:53:01 +0000
ROA not after: Thu 24 Oct 2024 04:58:01 +0000
asID: 3593
IP address blocks: 205.238.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:7d:7b:4c:d2:71:0e:25:ea:ef:ce:5d:d5:24:cb:55:34:35:ab:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Oct 26 04:53:01 2023 GMT
Not After : Oct 24 04:58:01 2024 GMT
Subject: CN=0FEECE28C83A1C78659308EC38D4DD3F76015CC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:41:56:c9:b3:ce:0d:a2:7f:e3:b9:09:0a:
47:0c:c8:bc:c8:81:83:ba:48:ed:11:32:62:07:84:
28:36:e9:af:b1:13:34:69:18:c5:08:7d:81:2a:80:
dc:61:d0:d2:f2:be:47:c9:bf:2c:fc:b9:73:ab:d2:
80:4e:6d:75:80:c0:db:09:72:9f:66:14:a4:93:d2:
a2:75:8a:8b:6f:e8:d4:6b:58:a2:b7:b2:9d:b8:1f:
0e:a9:4a:40:d8:37:36:60:95:4e:c9:a4:8e:de:7b:
d4:c0:a0:b3:a6:2a:95:fe:c9:9e:a2:a5:9f:a5:f1:
1d:d6:e9:16:44:2f:c7:7b:1d:76:fc:c2:fc:4c:58:
d8:39:6e:02:c0:7f:ee:03:3a:5a:45:a6:68:26:b0:
93:b8:e8:7c:8a:7f:9e:70:d8:15:f3:a6:d7:7b:f2:
aa:6f:bb:78:35:db:e7:d0:53:99:01:e8:1e:ae:5f:
63:66:12:d0:1b:c9:34:43:d4:ec:2e:3a:6f:16:d6:
c0:29:99:8d:f6:27:2c:73:2c:f1:a8:d8:e4:0d:db:
11:ec:d5:ea:57:62:fd:c1:ab:01:be:95:c5:70:2d:
f9:67:0e:32:da:55:dc:e1:3b:f3:3e:7a:e0:06:c5:
1d:df:53:05:6e:48:90:05:1b:84:70:5d:17:e7:7f:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EE:CE:28:C8:3A:1C:78:65:93:08:EC:38:D4:DD:3F:76:01:5C:C3
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230352e3233382e3232322e302f32342d3234203d3e2033353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.238.222.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7e:66:05:a1:d2:b9:d1:72:51:c8:7f:60:97:ab:ea:c8:62:
7e:cb:36:5b:3e:4d:d4:cf:aa:32:80:7f:17:ac:3b:47:d3:e0:
0d:d0:b8:c8:b6:e7:0e:1e:9f:df:7f:fa:ea:c8:a4:e3:1a:ae:
35:92:e3:77:c3:c8:a2:2f:c1:96:97:53:e6:d3:c1:74:f5:ca:
a5:1a:c9:2a:ab:8d:63:30:d2:3f:5f:24:de:e7:7c:8e:99:46:
60:35:c8:ce:20:66:96:14:05:97:ff:b5:da:45:03:dc:23:0c:
31:d3:cd:8f:6e:69:9d:87:0f:76:34:32:08:7a:ea:ef:c9:ad:
26:ff:11:da:4a:72:b7:c7:65:8f:0d:1b:0f:92:ac:83:04:1d:
76:4e:b5:66:13:4a:58:8a:59:28:82:20:02:af:c3:ed:22:ac:
a7:2f:bd:9c:7f:a4:8a:2e:77:32:77:c1:36:fc:05:6a:fb:a3:
ca:40:39:ed:4b:16:87:d2:02:5c:60:39:70:fc:96:35:59:71:
7f:07:2b:3e:b4:47:e8:1b:12:2d:5f:9c:fb:54:10:3a:46:46:
4c:ae:e1:c1:dc:6b:05:3b:90:de:c8:4c:85:81:b2:0a:02:a4:
15:e5:97:dd:16:84:41:69:92:c3:bf:77:7d:65:a2:cb:5e:88:
f5:d3:56:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:44 2023 by rpki-client on console.sobornost.net