Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32332d3234203d3e20383334.roa
File: 3130342e3134352e3230382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: mfhny9CaNJZAYdYxZwziGs62hw9pa86n+sqfNge4iH8=
Subject key identifier: 40:05:85:3B:41:2F:13:06:25:B1:83:FC:98:D2:F0:81:F2:AF:CB:39
Certificate issuer: /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial: 124A423BB3E7EF570D653F782D6B592A42CAC39F
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32332d3234203d3e20383334.roa
Signing time: Fri 11 Jul 2025 19:48:12 +0000
ROA not before: Fri 11 Jul 2025 19:43:12 +0000
ROA not after: Fri 10 Jul 2026 19:48:12 +0000
asID: 834
IP address blocks: 104.145.208.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Jul 2025 05:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4a:42:3b:b3:e7:ef:57:0d:65:3f:78:2d:6b:59:2a:42:ca:c3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Validity
Not Before: Jul 11 19:43:12 2025 GMT
Not After : Jul 10 19:48:12 2026 GMT
Subject: CN=4005853B412F130625B183FC98D2F081F2AFCB39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:d4:03:6a:e1:15:49:bb:e1:34:ca:d1:de:
4a:38:ad:27:d1:bb:41:01:d5:2e:df:d3:4c:38:70:
41:dc:4d:ad:1e:15:f8:a7:b3:c2:5d:ce:c5:2f:1e:
df:1b:69:bc:fa:c9:25:4c:08:74:2c:ad:e3:15:4b:
4c:77:f8:12:01:8d:85:0c:23:74:ee:ed:13:fd:12:
86:07:4c:f1:8f:0c:e3:e6:d7:1c:37:c8:4e:b4:81:
78:32:9f:8a:02:c2:e5:7b:9f:03:82:52:90:fa:a8:
40:25:a4:ef:48:31:03:19:37:95:35:83:bc:d0:2f:
c2:ef:80:67:f1:04:eb:23:21:3a:67:77:2f:51:96:
64:93:fe:3e:c0:7d:d1:ba:4e:a8:4a:c7:25:6b:d0:
0f:2e:f4:89:b5:07:84:cc:50:7f:3c:66:ae:7b:f3:
41:bb:3f:be:5d:c6:8c:8a:03:92:bc:a1:c2:cb:ff:
3e:5d:0f:e8:68:5d:33:f0:4b:63:a2:ef:f1:4a:2d:
6b:cf:ff:9e:14:26:a9:91:41:6d:8e:5f:1b:0e:80:
c3:5a:01:06:ce:57:41:d1:45:1c:2a:29:fd:67:f5:
1f:28:07:8a:31:b8:e8:98:f7:d1:e2:1f:0b:f1:97:
fc:f3:05:c4:8d:16:59:51:14:e8:d4:0b:fd:d2:bd:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:05:85:3B:41:2F:13:06:25:B1:83:FC:98:D2:F0:81:F2:AF:CB:39
X509v3 Authority Key Identifier:
keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.145.208.0/23
Signature Algorithm: sha256WithRSAEncryption
03:a9:5f:9e:b9:fd:c9:a7:f1:9d:21:3c:6d:a2:d4:e2:69:63:
7d:bf:4d:a2:63:d3:6e:25:13:af:f2:3c:13:cf:6f:71:9b:0b:
8c:d9:6c:e7:c6:c9:a0:25:a2:93:1f:f5:d5:2c:1a:ad:8d:b7:
d2:69:f1:0d:89:a1:7a:cd:73:f4:00:7c:df:d8:58:be:8f:6c:
71:5f:1e:57:6f:27:bd:4d:c7:e8:62:e9:9d:4a:ea:1b:e0:3c:
0f:e8:a0:8f:77:b3:e1:5c:b5:ea:cf:15:70:c8:50:74:da:b0:
9c:df:55:73:67:39:a4:83:a7:99:b2:5c:50:67:7d:42:88:94:
88:3e:b0:6e:6b:4a:4f:1c:f2:4d:94:2b:5a:1c:24:57:5c:31:
83:43:57:a9:aa:33:50:ca:1b:af:3c:63:58:68:13:cf:5c:f7:
ef:7e:05:38:d5:4a:9d:68:09:25:a9:ca:de:6a:a8:21:d2:54:
ac:9f:11:bd:c7:aa:86:8d:e0:d4:10:32:a7:0d:94:84:f0:b5:
52:ac:8e:e7:ea:57:07:fb:f8:25:9f:25:59:12:16:a3:a9:0b:
b4:ca:a1:f9:ac:a5:20:dd:41:db:2d:44:fb:3a:01:29:a8:76:
71:cd:ca:b6:a8:9b:77:32:3c:81:57:42:e1:c0:44:08:81:57:
26:5c:15:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:05:19 2025 by rpki-client