Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34352e3234332e302f32342d3234203d3e2035363530.roa
File: 37342e34352e3234332e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: sXqrzkDqeGSx5PDFVnXKpZNIoeHPXCH2PYx+EDJYEgo=
Subject key identifier: E3:28:95:73:71:1C:A6:9A:4D:6D:03:3B:BD:72:01:CD:92:5E:21:01
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 16D7C5ABAA32053236346C6B569DDF7B0E673D30
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34352e3234332e302f32342d3234203d3e2035363530.roa
Signing time: Thu 02 Nov 2023 11:36:20 +0000
ROA not before: Thu 02 Nov 2023 11:31:20 +0000
ROA not after: Thu 31 Oct 2024 11:36:20 +0000
asID: 5650
IP address blocks: 74.45.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d7:c5:ab:aa:32:05:32:36:34:6c:6b:56:9d:df:7b:0e:67:3d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Nov 2 11:31:20 2023 GMT
Not After : Oct 31 11:36:20 2024 GMT
Subject: CN=E3289573711CA69A4D6D033BBD7201CD925E2101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:10:83:a7:f7:2a:1d:c5:13:1d:6e:e3:c7:
6d:c0:a4:21:57:d8:1d:45:fd:d8:89:01:80:f8:0d:
ac:95:4d:03:81:41:d0:f2:1f:69:a5:ec:6b:bb:b7:
b6:65:71:74:02:23:4c:ac:08:57:41:c5:8c:83:76:
a8:ac:6e:4b:3b:9b:51:e4:78:62:52:f0:ad:29:9e:
f4:47:72:7f:b5:ff:8e:6f:85:7e:9c:6b:64:9f:71:
38:b8:ab:ce:18:18:f4:f1:7b:d6:c9:99:d4:d0:14:
00:1e:31:96:a3:1a:45:54:a4:13:fd:3d:05:0c:88:
76:b8:d7:7d:9f:13:96:33:b3:a6:f4:50:1e:41:2e:
3d:25:94:ce:b6:62:f4:b3:e1:42:da:cd:40:eb:42:
50:6a:6e:71:36:21:ac:77:3f:11:76:a6:13:d8:11:
36:eb:21:0c:ad:66:85:6f:e7:e5:6d:b4:8a:5f:f2:
0e:91:09:e8:78:29:f3:89:de:ab:77:0b:40:65:ee:
b6:15:92:5e:44:6d:08:fd:71:35:22:cb:3b:27:09:
c7:33:51:c8:43:64:ce:bc:82:0e:46:da:8b:d6:bf:
1c:4b:e4:a8:d5:d9:30:9a:c7:95:ce:16:09:a7:c6:
0e:c6:a9:f1:be:63:c1:d3:71:96:0f:82:31:96:c8:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:28:95:73:71:1C:A6:9A:4D:6D:03:3B:BD:72:01:CD:92:5E:21:01
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34352e3234332e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.45.243.0/24
Signature Algorithm: sha256WithRSAEncryption
84:72:aa:2d:d6:4c:73:3f:4e:df:0c:c3:bc:f8:68:d2:71:81:
d9:02:14:c5:a8:38:87:ad:5c:3f:55:97:3a:89:28:20:3a:b3:
82:f0:ca:21:d4:7c:3e:34:6b:db:41:b4:7c:d7:68:4a:0f:6f:
38:d6:a5:ed:27:90:1b:8e:b3:f3:55:99:ac:b0:d6:9f:eb:e0:
a2:81:6d:7e:a0:08:b6:fb:7f:81:28:80:a6:be:72:37:76:fb:
1f:f2:94:c0:b0:73:d9:0b:f7:49:de:6a:f4:cd:70:07:98:22:
80:81:61:d0:c7:17:62:62:c2:ad:53:50:2e:fc:c7:ac:a3:11:
5a:97:94:57:52:2a:5a:56:09:65:d4:ee:f3:f2:8f:fb:99:41:
40:34:51:db:28:c7:c9:f9:d3:6f:df:90:92:0c:1b:23:bc:fd:
c5:13:9c:a5:4e:7c:9a:99:df:f5:cd:41:2e:1c:f0:2e:66:3d:
5d:18:69:b4:f6:44:f2:fe:8e:b9:61:48:e6:c6:cb:d5:f5:24:
88:09:ab:06:8d:21:ad:5c:6e:13:bc:69:0e:e7:11:b0:09:b3:
f3:e8:05:94:c5:7b:a0:23:1c:49:7e:35:30:02:52:ff:cd:df:
12:c5:68:ad:07:b2:ad:06:23:64:eb:f0:50:8d:dc:ca:37:e5:
8a:36:c4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:45 2023 by rpki-client on console.sobornost.net