Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e33382e302f32342d3234203d3e2033353933.roa
File: 37342e34332e33382e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier: m1MdMX7f9+87km0JB1JCtFAoHdR8JmLwF0dhHxauai4=
Subject key identifier: 7B:B1:E1:34:C6:6C:66:B2:B9:32:E3:4B:1F:1F:5A:97:02:4B:D7:64
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 2D6CFEC2EC441A555223EA1C1A3909F39B81C0F8
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e33382e302f32342d3234203d3e2033353933.roa
Signing time: Thu 26 Oct 2023 04:30:00 +0000
ROA not before: Thu 26 Oct 2023 04:25:00 +0000
ROA not after: Thu 24 Oct 2024 04:30:00 +0000
asID: 3593
IP address blocks: 74.43.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:6c:fe:c2:ec:44:1a:55:52:23:ea:1c:1a:39:09:f3:9b:81:c0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Oct 26 04:25:00 2023 GMT
Not After : Oct 24 04:30:00 2024 GMT
Subject: CN=7BB1E134C66C66B2B932E34B1F1F5A97024BD764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:d7:a2:77:0e:55:a3:e4:18:1f:00:8f:be:
62:26:9d:10:13:14:78:11:2b:df:50:b0:e2:12:57:
78:f6:05:36:40:4e:b9:a3:09:f3:0d:6e:51:3d:0c:
0a:fa:ce:45:21:5a:e5:da:9c:cc:f0:4f:be:17:05:
ac:54:1b:b5:d3:20:bd:87:2a:a8:15:82:e4:f4:a1:
de:b0:47:34:c5:2a:3d:65:a9:2b:c6:9e:0a:84:26:
d6:9b:af:b5:bb:98:5f:e3:7e:10:80:54:4a:88:a7:
f9:06:d8:7c:0e:ef:f0:40:8e:47:2d:f7:e7:47:5f:
38:ce:05:ee:7f:a7:b4:b6:a3:42:58:5e:01:de:1f:
52:82:ba:e8:f9:68:3a:45:6f:dd:95:e0:2c:41:e1:
5f:1a:6b:b1:90:be:fa:45:e5:44:6d:72:a1:6e:cd:
f9:5d:08:04:ae:7f:ef:64:7d:0e:ed:6f:90:fe:fa:
40:9d:cc:17:3d:e0:a9:41:ad:36:8b:ea:75:7f:67:
6e:9a:11:ef:e7:45:e5:1f:98:64:fe:45:28:7c:76:
70:46:b0:9c:0c:7d:41:fc:45:d8:a4:47:c3:57:05:
ff:13:8a:b5:a3:ae:af:53:0f:bb:61:0e:8a:6b:69:
3b:ff:ec:45:df:cb:bc:ee:41:64:ab:99:30:72:a6:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B1:E1:34:C6:6C:66:B2:B9:32:E3:4B:1F:1F:5A:97:02:4B:D7:64
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e33382e302f32342d3234203d3e2033353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.43.38.0/24
Signature Algorithm: sha256WithRSAEncryption
43:28:d1:87:80:e6:b1:de:7a:43:44:12:c3:cc:4d:eb:39:1a:
95:0c:2c:98:68:71:b2:f1:92:3d:af:71:60:b5:17:bb:e1:bc:
cd:7c:da:f4:ce:92:9b:28:6d:9e:98:4a:df:15:25:2b:88:4a:
f7:d7:82:c8:ee:43:8c:80:a3:1e:5e:c3:4e:b1:46:21:2b:02:
32:86:5c:ac:b2:c1:08:b8:6c:e2:cf:39:4d:7c:90:0f:43:08:
95:52:03:28:48:01:f3:26:b2:79:39:74:b6:7b:ca:fe:08:98:
c4:2c:04:a6:60:a6:75:21:e5:17:0b:92:9c:53:f6:74:e1:d9:
d1:0e:4f:22:f1:71:cb:12:26:00:32:4c:98:c6:53:39:8f:5f:
1a:81:75:57:95:f8:a0:87:8c:73:e4:d3:1a:1a:3c:c0:c5:a6:
56:0c:68:70:29:45:63:5f:74:93:0e:bb:1d:0c:f1:94:9d:ed:
d7:32:89:d5:42:1a:4c:31:df:67:d5:4b:58:a4:ca:9d:fd:e8:
09:96:ce:3e:0d:e2:77:ce:21:d6:49:30:d5:01:64:60:4f:27:
6d:3e:be:16:54:73:1e:ee:ee:2a:eb:e4:b9:dd:7f:d3:cb:c9:
99:9d:c9:4e:6f:d2:e2:dc:92:c2:c0:63:35:15:5a:18:1f:33:
db:61:64:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:45 2023 by rpki-client on console.sobornost.net