Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e31362e302f32342d3234203d3e2033353933.roa
File: 3230392e37342e31362e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier: FnxaVXbuRHS2bhsaDfQCA9dDvNV1xnpTW+Fi3oxK/8E=
Subject key identifier: 3D:76:B9:FC:FC:91:BA:3B:A4:B5:F8:CD:89:D1:9D:7E:9D:6E:F5:29
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 06597C52EAC72ED2890B994ECFD87F673C34C08E
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e31362e302f32342d3234203d3e2033353933.roa
Signing time: Thu 26 Oct 2023 05:00:30 +0000
ROA not before: Thu 26 Oct 2023 04:55:30 +0000
ROA not after: Thu 24 Oct 2024 05:00:30 +0000
asID: 3593
IP address blocks: 209.74.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:59:7c:52:ea:c7:2e:d2:89:0b:99:4e:cf:d8:7f:67:3c:34:c0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Oct 26 04:55:30 2023 GMT
Not After : Oct 24 05:00:30 2024 GMT
Subject: CN=3D76B9FCFC91BA3BA4B5F8CD89D19D7E9D6EF529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:3e:36:cb:d1:d8:44:f1:d5:00:01:64:1f:
05:ff:6e:7d:a4:6f:c8:47:13:ad:e1:08:a6:ff:fb:
34:8f:73:1e:f7:d4:7f:9f:6a:97:73:b5:9a:ba:d2:
7f:e4:61:57:f7:b0:42:dc:6c:7b:f3:1a:d6:08:e4:
85:64:4b:56:18:cd:c5:d1:d0:f2:b8:33:a0:d1:bf:
31:72:ab:a0:fe:78:71:b4:21:18:17:8e:cb:93:5c:
dd:0a:e8:54:a4:80:92:e3:db:84:4a:1b:80:c1:78:
6d:d5:79:c5:d4:85:45:bb:06:b6:98:44:06:25:7a:
33:e9:05:ba:7f:c7:10:e7:16:7a:8b:29:cf:fb:c7:
21:f4:af:c9:2a:51:b1:fa:92:d8:59:62:54:47:f5:
64:c8:79:68:81:ca:49:6d:43:3c:8d:7b:2b:9d:e3:
ae:ef:63:ba:73:6b:50:59:f4:b3:1f:63:b8:e2:f7:
41:59:0a:a0:eb:17:37:e9:06:33:ac:99:eb:ca:c4:
59:e4:49:cd:f7:12:89:22:5d:23:6f:14:84:11:40:
a0:6f:9b:bb:3d:ac:88:88:ab:72:e8:20:0e:d9:47:
e2:d4:23:1d:d6:9e:21:1f:55:03:be:ab:ce:ff:91:
b2:22:13:15:d9:72:fb:16:ae:1c:9f:96:aa:01:2f:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:76:B9:FC:FC:91:BA:3B:A4:B5:F8:CD:89:D1:9D:7E:9D:6E:F5:29
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e31362e302f32342d3234203d3e2033353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.74.16.0/24
Signature Algorithm: sha256WithRSAEncryption
03:54:72:04:25:66:95:ff:0a:72:c1:59:5b:df:c1:36:e4:09:
a1:7b:00:2f:61:65:ba:36:05:47:da:96:d1:28:ee:4c:66:c9:
5e:50:b6:8b:f7:24:a6:a9:b9:61:bb:f0:ff:1d:c7:45:7d:a4:
03:63:f4:33:77:d9:ee:61:ae:cd:19:e7:79:0d:a6:90:fc:07:
1a:e3:a6:b1:07:ec:d4:18:02:dd:d8:6c:0d:7b:69:c8:ff:f8:
f2:c4:d1:25:97:9d:8e:40:0e:48:e6:14:ff:97:e6:da:04:7d:
67:05:eb:d2:70:a0:24:e6:18:0a:fb:f2:db:3f:33:03:75:bc:
30:bc:ed:58:aa:a0:99:ef:2c:40:e3:b1:89:38:41:40:e5:15:
eb:a9:65:22:80:f2:d4:19:5e:16:fa:81:35:f6:d0:dd:ea:f7:
08:4b:a5:f5:a5:94:19:7c:a5:c4:f2:68:a0:7b:02:4a:46:54:
86:29:ca:b5:1d:c7:57:c7:5d:a2:5c:f3:2b:64:91:7c:9f:f5:
c7:52:ae:65:2c:58:e1:9b:05:c7:f8:ee:52:d4:82:61:a6:d5:
65:76:6d:12:db:28:fe:dc:ad:5f:a6:9b:2a:5f:39:3c:83:d4:
3f:cd:f9:0a:f5:86:d7:b0:cc:40:dc:78:ae:84:3b:6a:f3:3c:
99:9c:cc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:44 2023 by rpki-client on console.sobornost.net