Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a3230303a3a2f34302d3438203d3e20313437323937.roa
File: 323430343a336438303a3230303a3a2f34302d3438203d3e20313437323937.roa (raw, json)
Hash identifier: wVRf6Z7bIDScJE7cF6A1TCZnQiIfoLrqm0oG9EO9mDE=
Subject key identifier: 89:95:A7:E5:D9:C5:79:B1:05:5D:43:90:F8:D0:6E:3E:47:D7:A1:BA
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 76A9490ED4FB74F775D0780FA42E2478F0F4ED09
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a3230303a3a2f34302d3438203d3e20313437323937.roa
Signing time: Mon 26 Aug 2024 04:39:59 +0000
ROA not before: Mon 26 Aug 2024 04:34:59 +0000
ROA not after: Mon 25 Aug 2025 04:39:59 +0000
asID: 147297
IP address blocks: 2404:3d80:200::/40 maxlen: 48
Validation: Failed, certificate revoked on Sun 17 Nov 2024 20:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a9:49:0e:d4:fb:74:f7:75:d0:78:0f:a4:2e:24:78:f0:f4:ed:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Aug 26 04:34:59 2024 GMT
Not After : Aug 25 04:39:59 2025 GMT
Subject: CN=8995A7E5D9C579B1055D4390F8D06E3E47D7A1BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:bf:16:a9:bf:b2:aa:62:b5:bc:2b:0b:8e:
ba:dc:22:38:85:0e:52:ac:99:b5:bc:91:e2:f4:3a:
fd:1f:ba:b7:9f:f2:39:63:46:4e:9e:08:a9:ef:c7:
c9:6e:56:64:9d:f0:a6:40:f6:ef:67:42:d4:79:77:
74:b7:c5:65:07:38:b5:04:b8:0d:87:24:87:65:4d:
a1:11:67:51:ad:66:ab:0a:88:54:e1:f7:bf:26:46:
d7:ca:7a:a2:42:87:8d:83:ee:2f:bd:3a:d4:d7:c4:
99:8c:0f:e8:11:a1:47:f7:40:8a:0f:43:03:4b:10:
b0:c2:30:1e:83:66:c2:7d:44:77:22:f8:6b:a3:85:
1c:13:7e:70:97:3a:b5:0f:bf:d6:94:82:5a:41:60:
39:82:13:8a:f1:df:21:72:54:06:ce:d6:37:4a:0d:
01:de:e8:c3:b5:dc:8b:77:31:2f:14:cd:c4:7e:95:
ae:bf:4b:0f:cc:27:68:31:8c:1f:75:45:e2:3b:11:
a8:da:1c:fe:ba:e4:66:b8:21:92:62:54:72:1e:5a:
9a:07:2f:42:9e:fb:58:9f:87:67:b2:cc:70:b6:4e:
91:c6:2d:96:4a:2b:dd:fd:76:57:38:56:f5:55:30:
42:c3:86:25:9a:75:6f:bb:68:9f:f6:38:7a:02:e1:
44:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:95:A7:E5:D9:C5:79:B1:05:5D:43:90:F8:D0:6E:3E:47:D7:A1:BA
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a3230303a3a2f34302d3438203d3e20313437323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:3d80:200::/40
Signature Algorithm: sha256WithRSAEncryption
ba:c1:c6:c3:e1:02:e2:b6:a7:ac:9c:30:38:c1:14:a6:16:c5:
fc:da:be:f5:38:34:05:e7:98:3a:19:6c:6d:11:bb:c5:7d:30:
09:4e:26:6d:f1:08:f9:d9:69:e6:8a:0e:91:d3:21:ba:ce:b6:
07:fe:d4:42:84:d4:5f:f7:62:80:48:e6:04:26:0e:42:e1:bc:
86:2f:9a:1b:5e:40:f7:70:8a:c0:1c:da:f2:40:4d:1e:c9:6a:
8a:7e:72:8b:a9:92:16:bf:cd:d6:cb:d2:23:fc:c5:21:ac:04:
b9:b4:96:fc:9f:db:42:16:cf:f7:58:86:b5:65:33:9e:0e:4e:
e4:f2:a3:fd:cf:c4:39:7c:36:89:54:61:64:41:bb:d4:63:16:
68:8e:1b:fd:64:82:6f:b1:6e:e4:1d:2e:3e:84:8d:b6:55:70:
07:41:03:d8:87:46:f9:ca:5b:57:e9:b6:43:04:d9:53:c1:a9:
0e:2c:04:7b:40:03:5e:98:1b:d0:6e:41:c0:6f:63:30:6d:7d:
94:e7:1d:ba:eb:2d:3d:9a:42:39:b3:f0:30:e4:bb:19:9b:9e:
da:76:c2:8e:9d:f0:38:d3:a2:ef:b7:52:2a:4b:2c:8d:c8:c6:
01:f7:a3:24:15:a8:c6:3e:a2:fe:85:9a:be:3c:bb:78:29:03:
58:cf:5a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:05 2025 by rpki-client