Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
File: 3230342e31342e37352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: /Esd2kODiUaZu1kyNAxGX9EI+8GrF7idC0cO91Kj4VA=
Subject key identifier: 3F:1E:DB:57:11:8F:30:26:30:3C:40:83:97:FA:72:72:D1:40:31:04
Certificate issuer: /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial: 040083000A3BEF1919C2074D2D0C7DBB54AA740B
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
Signing time: Thu 21 Mar 2024 00:01:52 +0000
ROA not before: Wed 20 Mar 2024 23:56:52 +0000
ROA not after: Thu 20 Mar 2025 00:01:52 +0000
asID: 834
IP address blocks: 204.14.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Mar 2024 18:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:00:83:00:0a:3b:ef:19:19:c2:07:4d:2d:0c:7d:bb:54:aa:74:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Validity
Not Before: Mar 20 23:56:52 2024 GMT
Not After : Mar 20 00:01:52 2025 GMT
Subject: CN=3F1EDB57118F3026303C408397FA7272D1403104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:17:93:d3:21:00:65:03:b3:c7:ea:df:67:
ed:a2:9d:14:9f:df:04:2e:79:87:e2:53:14:39:f0:
7c:b1:77:f1:b7:f2:a2:2c:13:98:25:58:d2:2e:77:
67:53:1c:0d:19:e5:7d:50:c7:67:d5:6b:14:47:50:
e8:da:bf:49:cf:7e:56:cd:c6:3f:1c:21:71:5e:52:
9e:54:21:46:e4:f5:e1:7b:fb:ab:1d:e4:60:80:ff:
5b:12:37:91:32:65:f5:22:d9:ff:15:54:20:56:b9:
4d:ad:aa:a6:85:41:9b:9c:93:84:35:19:5c:23:18:
72:64:97:7c:b5:b0:d7:d2:50:ad:d2:4d:2d:3c:82:
4f:0f:d2:cc:4b:4c:46:0e:12:11:fb:5d:30:79:78:
0a:b1:cb:4d:c3:6b:dc:80:4c:e4:17:45:1e:1e:57:
88:2f:ef:9f:00:4d:a9:99:6b:8f:63:50:a2:17:89:
80:60:e2:ae:a8:08:64:ca:28:ba:cf:30:4f:e5:04:
73:9d:a9:8f:fd:bc:ee:34:d6:59:76:6e:a6:c2:0d:
fb:c0:72:fc:a2:20:2d:b3:82:53:f0:b1:bc:77:48:
64:d6:12:4f:96:77:25:19:50:9a:df:30:5b:29:78:
97:53:84:3d:33:1d:62:d0:12:9f:7c:81:db:88:9c:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:DB:57:11:8F:30:26:30:3C:40:83:97:FA:72:72:D1:40:31:04
X509v3 Authority Key Identifier:
keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.14.75.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f4:a5:ef:b3:32:e7:a6:9b:83:b1:62:a9:b1:65:21:bb:bf:
21:76:9e:d2:54:b6:bd:f6:d7:3c:f0:35:54:db:2f:fd:37:e3:
29:9a:51:a0:49:2a:5c:71:54:07:11:ef:9f:ab:a8:d8:30:0c:
11:0b:56:89:cc:8b:ab:76:ff:51:d7:b7:c1:5c:1e:b0:48:24:
f0:1d:ed:18:dd:5b:df:6a:8a:9c:95:dd:a3:1e:a2:b9:50:bc:
b6:cf:0a:be:e2:08:4e:4b:b4:6a:c6:e2:18:57:83:3c:96:e2:
23:be:6d:86:20:22:f6:e0:f5:a5:7f:fe:69:1f:31:bb:09:ee:
d4:27:00:43:d5:f3:1f:28:84:01:35:aa:41:02:fd:6a:32:9a:
ba:63:bb:83:fb:8d:27:3d:50:f7:2b:3b:df:26:3a:97:2a:50:
df:81:f4:00:03:6e:bb:f1:b7:bc:18:12:82:48:2b:75:f7:f3:
55:c6:07:fb:30:15:93:8c:1d:9b:00:a9:58:bf:65:da:62:9e:
80:94:24:4c:a4:70:99:5c:9b:30:d8:fc:b8:0c:41:dd:aa:55:
bb:bd:eb:b2:27:cb:df:8c:5b:c2:3c:ac:ec:78:76:c2:ac:9a:
24:d8:68:20:d6:0a:69:69:b7:06:19:2a:ba:0c:ed:18:b3:2d:
d0:f5:a6:d3
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUBACDAAo77xkZwgdNLQx9u1SqdAswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWM5NGExYzQxOTFkNmVlYWY3ZTc3MzM2YTVlZGJjMDVj
Yjk5YWM2M2M3ODM1YThiYzMwHhcNMjQwMzIwMjM1NjUyWhcNMjUwMzIwMDAwMTUy
WjAzMTEwLwYDVQQDEygzRjFFREI1NzExOEYzMDI2MzAzQzQwODM5N0ZBNzI3MkQx
NDAzMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r4Xk9MhAGUD
s8fq32ftop0Un98ELnmH4lMUOfB8sXfxt/KiLBOYJVjSLndnUxwNGeV9UMdn1WsU
R1Do2r9Jz35WzcY/HCFxXlKeVCFG5PXhe/urHeRggP9bEjeRMmX1Itn/FVQgVrlN
raqmhUGbnJOENRlcIxhyZJd8tbDX0lCt0k0tPIJPD9LMS0xGDhIR+10weXgKsctN
w2vcgEzkF0UeHleIL++fAE2pmWuPY1CiF4mAYOKuqAhkyii6zzBP5QRznamP/bzu
NNZZdm6mwg37wHL8oiAts4JT8LG8d0hk1hJPlnclGVCa3zBbKXiXU4Q9Mx1i0BKf
fIHbiJxsXQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFD8e21cRjzAmMDxAg5f6cnLR
QDEEMB8GA1UdIwQYMBaAFN9ORoOgyHb2inK936oFiDCTVsPWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYjJkYWI3Y2MwYTkxLzAv
REY0RTQ2ODNBMEM4NzZGNjhBNzJCRERGQUEwNTg4MzA5MzU2QzNENi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzA4MWJkNjZlLWIxZDEtNDA1YS04YTMyLWM4MzBlYzc5MGNlNS85Yzk0
YTFjNDE5MWQ2ZWVhZjdlNzczMzZhNWVkYmMwNWNiOTlhYzYzYzc4MzVhOGJjMy5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYjJk
YWI3Y2MwYTkxLzAvMzIzMDM0MmUzMTM0MmUzNzM1MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzA5LMA0GCSqGSIb3DQEBCwUAA4IBAQA3
9KXvszLnppuDsWKpsWUhu78hdp7SVLa99tc88DVU2y/9N+MpmlGgSSpccVQHEe+f
q6jYMAwRC1aJzIurdv9R17fBXB6wSCTwHe0Y3Vvfaoqcld2jHqK5ULy2zwq+4ghO
S7RqxuIYV4M8luIjvm2GICL24PWlf/5pHzG7Ce7UJwBD1fMfKIQBNapBAv1qMpq6
Y7uD+40nPVD3KzvfJjqXKlDfgfQAA2678be8GBKCSCt19/NVxgf7MBWTjB2bAKlY
v2XaYp6AlCRMpHCZXJsw2Py4DEHdqlW7veuyJ8vfjFvCPKzseHbCrJok2Ggg1gpp
abcGGSq6DO0Ysy3Q9abT
-----END CERTIFICATE-----
Generated at Sun Mar 24 20:10:55 2024 by rpki-client on console.sobornost.net