Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20343030383636.roa
File: 3230392e38372e3136382e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: MwiPkxIaq2XZyxbgZElL071+XhxBULDPLpXT5p83cts=
Subject key identifier: 51:34:7A:57:50:4F:92:BC:13:77:0F:EE:0F:6B:24:48:98:A6:2D:0B
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 1359231E1DA85F35FF2E21A3DD548B740E5B8754
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20343030383636.roa
Signing time: Sun 31 Mar 2024 16:13:00 +0000
ROA not before: Sun 31 Mar 2024 16:08:00 +0000
ROA not after: Sun 30 Mar 2025 16:13:00 +0000
asID: 400866
IP address blocks: 209.87.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:59:23:1e:1d:a8:5f:35:ff:2e:21:a3:dd:54:8b:74:0e:5b:87:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: Mar 31 16:08:00 2024 GMT
Not After : Mar 30 16:13:00 2025 GMT
Subject: CN=51347A57504F92BC13770FEE0F6B244898A62D0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:c0:93:fa:33:62:2a:3f:7e:2f:10:d9:06:
9c:2f:13:df:69:c7:f5:a8:6e:b3:cf:5c:fb:ff:d0:
25:65:3d:db:09:5b:ce:d1:90:de:de:bf:81:9e:bb:
f4:ca:92:fa:dd:8a:15:9d:9c:ae:80:07:8a:8c:a5:
72:04:b2:36:fd:ec:53:c5:07:d9:a8:d3:a3:34:6f:
63:bd:99:93:62:af:5e:43:d3:d6:77:17:78:9c:61:
94:b0:a4:df:3b:0d:1a:b7:2b:ff:46:6e:cd:ce:bc:
b6:a3:8e:e6:5c:10:3a:c3:69:ed:10:0e:e6:d7:7f:
f9:43:3d:a1:24:9f:f2:d4:18:f0:cd:f1:91:61:62:
e6:2a:d7:86:eb:da:d2:e2:58:b0:ba:b0:b2:54:a1:
93:69:a3:55:6a:18:c3:08:2f:29:4c:0a:4d:6f:43:
a6:04:8e:51:a5:dc:f4:46:e1:de:dc:95:a2:11:80:
bd:1d:fb:fa:42:9f:ee:24:2e:a0:0e:cd:02:66:b8:
a1:ee:2c:9e:4c:88:1b:8f:b1:3d:d1:39:bc:3b:ba:
91:df:f9:07:b1:42:21:e4:86:72:d5:63:7a:51:bd:
21:41:fe:93:c0:88:77:db:a1:c8:2a:a5:68:36:07:
ae:3a:c6:33:aa:a7:b6:0b:93:39:f7:3f:5a:89:73:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:34:7A:57:50:4F:92:BC:13:77:0F:EE:0F:6B:24:48:98:A6:2D:0B
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2d:94:1e:12:22:39:fa:6b:ce:66:5f:f0:7c:5e:cd:c0:3f:
cc:68:ab:3a:b8:da:ab:39:9d:0c:ff:1a:1e:0f:22:1b:e2:47:
82:31:1b:5d:23:6d:ac:80:fc:ee:5b:6b:eb:30:89:c6:a7:cc:
47:e5:92:5f:01:a5:53:1c:3f:e3:06:6d:97:86:07:61:26:e2:
15:0a:68:b8:78:ce:91:13:03:f9:4d:91:43:64:2a:0a:da:82:
3d:72:ca:81:5e:52:94:4c:f8:ef:53:f0:bc:66:f5:76:21:1d:
24:f2:83:f3:42:16:13:3d:a3:59:c5:0e:ec:17:79:40:c4:d1:
a3:c9:52:4e:5b:d4:71:86:3f:86:5e:4a:7a:94:b0:2c:16:ec:
db:37:69:b4:ed:17:79:36:a7:42:67:d9:13:3f:ee:de:0f:3d:
02:bd:b2:5d:5a:d5:60:c0:95:bb:25:98:d2:42:23:57:f4:fd:
f8:30:d9:fb:bc:6c:d4:34:60:9b:fe:52:03:bf:42:1a:df:7f:
2c:9c:48:c1:5f:50:a8:b6:bc:95:05:7e:4a:f5:90:f2:f1:34:
cf:ed:3d:49:13:36:bf:ec:d1:72:b3:b7:68:4a:4b:17:32:cd:
47:76:5e:69:bd:35:70:93:0f:cb:d4:51:3d:fb:c8:2f:1c:d7:
7d:6c:33:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 03:37:25 2024 by rpki-client on console.sobornost.net