Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e34322e39332e302f32342d3234203d3e2035363530.roa
File: 35302e34322e39332e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: MrbU+bolcfKMRiGoUvGpfKN/i6/rI4x/+4c5n44vqhc=
Subject key identifier: 95:CB:9D:8C:6C:E8:0E:9A:EB:2E:A3:DF:A4:2A:C2:DF:6C:E3:F9:DB
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 17C39158419142B6846CE0AB7B5BC5A77C315AA2
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e34322e39332e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:34:19 +0000
ROA not before: Thu 02 Nov 2023 11:29:19 +0000
ROA not after: Thu 31 Oct 2024 11:34:19 +0000
asID: 5650
IP address blocks: 50.42.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c3:91:58:41:91:42:b6:84:6c:e0:ab:7b:5b:c5:a7:7c:31:5a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Nov 2 11:29:19 2023 GMT
Not After : Oct 31 11:34:19 2024 GMT
Subject: CN=95CB9D8C6CE80E9AEB2EA3DFA42AC2DF6CE3F9DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:9f:0e:18:f1:47:82:02:8e:ef:3f:ff:12:
a9:4c:17:00:33:c6:1b:19:01:23:01:c4:6e:06:d4:
e0:9f:a2:4e:c6:8b:5e:d4:be:55:1a:2c:88:39:49:
55:42:75:93:d5:2c:30:79:5c:40:22:21:f6:43:11:
4a:ac:42:51:78:33:84:3a:b9:86:36:08:cd:78:ab:
a0:5e:46:8d:22:8d:b1:4c:09:3e:4f:63:6f:58:f9:
cf:85:11:72:b9:e0:3e:8c:b4:a2:e9:6b:19:8c:af:
27:92:04:02:4c:3e:2f:75:c4:58:d1:d2:5b:3b:39:
57:7f:a2:c3:99:24:a3:bd:05:5d:5c:a2:f6:d3:dc:
c9:9a:1e:ea:92:54:f6:20:1c:28:e9:b0:24:5e:9f:
36:04:6d:64:49:b0:b1:6b:e3:98:c0:d7:3b:5d:7b:
c0:c1:00:93:69:05:1b:8a:79:72:5b:bf:b8:29:17:
37:f7:9e:c4:0c:90:be:c2:88:91:62:ab:25:92:3a:
e0:aa:e1:9e:d7:c9:b9:63:ba:ad:60:81:b2:54:9a:
43:82:1d:1a:8f:ac:7b:48:1b:64:ef:ed:6b:a0:52:
5e:6f:6b:3e:9c:84:04:5e:ac:f1:77:b4:5d:51:c8:
9e:f5:d7:83:7c:f7:0a:08:4e:1b:38:a6:3c:02:5a:
1e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CB:9D:8C:6C:E8:0E:9A:EB:2E:A3:DF:A4:2A:C2:DF:6C:E3:F9:DB
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e34322e39332e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.42.93.0/24
Signature Algorithm: sha256WithRSAEncryption
94:3e:5a:4a:c0:64:5c:75:67:4c:16:29:d3:b3:92:0b:c7:67:
78:00:9a:06:5e:b8:9a:c9:86:34:0d:45:94:d0:fd:8c:dc:f8:
bc:d2:d1:03:8a:a4:a9:42:5d:f8:a0:ba:a6:e5:1d:4a:e4:b5:
67:f4:d8:ca:74:60:5b:72:92:14:72:ab:3e:97:ab:0b:83:4d:
36:ae:28:fc:63:40:13:38:74:ef:90:dd:8c:8c:38:b2:39:b1:
b7:b9:02:0e:78:97:54:5f:82:31:01:08:dd:62:90:13:5e:71:
81:bc:da:a3:e0:ee:b2:8f:54:fd:0a:53:48:b9:09:da:5a:93:
73:0c:f5:80:2f:de:5c:bf:03:48:3b:c1:32:09:24:a7:3e:be:
02:92:29:db:9e:a5:77:ed:4a:bd:a1:80:4d:eb:c7:19:6e:2a:
f6:e3:c4:42:3c:03:0f:da:36:a0:fd:7c:9f:78:af:36:57:e2:
44:c6:89:cc:ce:62:ea:5c:c1:33:19:cd:3e:af:31:d0:95:e4:
e8:f6:6f:4c:e0:37:d1:80:67:06:21:e0:3f:fc:ee:a7:3c:75:
54:eb:89:98:8d:40:3f:21:13:d1:f0:31:b4:5f:09:ad:9c:ba:
88:3f:d8:a2:d0:1c:66:d1:d3:91:27:3c:08:4b:a1:b3:8c:3b:
49:ac:44:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:45 2023 by rpki-client on console.sobornost.net