Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3231362e33372e3137332e302f32342d3234203d3e2033353933.roa
File: 3231362e33372e3137332e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier: aMDf8620SnsiLWNEFRa7FXAJY8NC2H9dC5HcVwDgkAw=
Subject key identifier: 9A:8B:5F:93:CC:FE:AB:74:F4:7E:EF:1E:E6:AE:F7:5B:D1:BC:19:36
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 2ED82B5338A9FB53231D9167957B878C4F10E28A
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3231362e33372e3137332e302f32342d3234203d3e2033353933.roa
Signing time: Thu 26 Oct 2023 05:02:00 +0000
ROA not before: Thu 26 Oct 2023 04:57:00 +0000
ROA not after: Thu 24 Oct 2024 05:02:00 +0000
asID: 3593
IP address blocks: 216.37.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d8:2b:53:38:a9:fb:53:23:1d:91:67:95:7b:87:8c:4f:10:e2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Oct 26 04:57:00 2023 GMT
Not After : Oct 24 05:02:00 2024 GMT
Subject: CN=9A8B5F93CCFEAB74F47EEF1EE6AEF75BD1BC1936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a5:51:8c:53:ad:e3:92:c8:31:12:d2:da:c5:
1e:82:29:1b:f1:31:3b:67:7e:c7:35:08:f2:ff:43:
75:ed:05:45:94:24:12:e6:bb:dd:26:68:0c:cd:64:
c3:d2:ae:75:ae:db:af:2d:1a:90:1b:9f:5a:e5:94:
7d:2f:de:3d:2a:52:b8:67:e7:56:fb:9d:d6:bf:cc:
e9:ba:ba:c4:ac:9c:c3:82:3e:f3:90:0f:4e:13:bb:
45:ee:87:d3:c9:1d:49:6d:07:88:e2:56:a8:14:66:
b0:7b:fa:51:8e:a5:c0:9a:81:82:c8:1d:f7:ee:df:
3a:59:da:0a:5c:eb:36:ef:d3:b9:95:71:d2:79:70:
55:08:84:19:e0:eb:b0:4d:7c:96:d0:7a:a2:6f:12:
d3:7c:ef:a3:33:05:df:8c:4e:9d:43:47:7c:0d:48:
fc:54:27:51:14:c1:c6:09:1f:cc:af:f5:6f:fb:70:
3e:05:47:ae:a8:06:c4:31:84:f1:c7:da:f2:8b:00:
b4:4d:02:98:5e:78:fb:34:30:a7:6e:07:6b:95:59:
fc:24:f8:58:0d:6f:19:fd:15:bf:e6:13:32:cb:fe:
34:1b:dd:22:0e:8b:67:1f:2b:03:51:d8:a6:09:27:
e2:fb:d2:6a:01:3c:90:65:04:38:0f:e8:c7:7c:ab:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8B:5F:93:CC:FE:AB:74:F4:7E:EF:1E:E6:AE:F7:5B:D1:BC:19:36
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3231362e33372e3137332e302f32342d3234203d3e2033353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.37.173.0/24
Signature Algorithm: sha256WithRSAEncryption
59:92:60:65:44:e1:f5:36:1e:51:64:d1:92:b8:ec:85:f4:33:
ba:ff:06:80:de:00:7b:cc:f6:b1:40:c4:6e:d1:40:27:c8:9b:
b0:d0:7a:05:28:c7:e3:84:f2:fd:74:30:62:9b:65:e4:13:cd:
2a:98:79:f9:0d:84:90:5e:40:cc:e6:5f:36:b9:05:30:17:1e:
c8:16:9c:31:7a:17:0a:22:ee:21:9f:19:42:69:40:6a:75:e3:
8d:c4:29:e4:cc:1c:7b:df:cb:3e:58:f7:c7:9e:be:87:d6:02:
d4:b3:08:23:c3:12:d0:80:57:76:9e:f1:0e:e2:47:ab:bf:77:
8b:ff:d8:b2:cd:89:49:d2:fb:96:2c:ff:39:f3:d3:d7:dc:34:
24:fc:d8:f2:17:7e:63:55:9b:33:32:d2:5d:a9:b2:59:e6:14:
7d:fc:c7:cc:28:3f:bb:9b:50:85:c8:0d:fe:b8:0d:78:c4:43:
69:44:f5:f1:db:e7:36:bc:d7:c6:18:a6:e2:e2:49:fc:52:37:
7a:31:d6:8d:42:ac:f2:15:99:06:b6:39:ca:1d:8e:26:57:78:
d3:7a:2b:0f:6e:0c:f5:7b:fa:b1:69:52:2a:06:59:f0:23:a7:
2d:75:c7:08:0d:37:24:19:91:6a:42:ea:a5:1e:00:97:eb:ef:
0f:47:7e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:44 2023 by rpki-client on console.sobornost.net