Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130312e302f32342d3234203d3e20383334.roa
File: 3231362e3234372e3130312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: rPNAGBaI6oxz5z5eAaKLBgNRZGRqkSEB0dUpEA0s49Q=
Subject key identifier: C6:13:6D:FF:1A:18:E4:7E:85:8B:E5:50:A7:D2:00:4D:58:87:30:38
Certificate issuer: /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial: 69FB26180CB1D0045FAB8A521161646E6DB0D948
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130312e302f32342d3234203d3e20383334.roa
Signing time: Mon 02 Jun 2025 07:53:45 +0000
ROA not before: Mon 02 Jun 2025 07:48:45 +0000
ROA not after: Mon 01 Jun 2026 07:53:45 +0000
asID: 834
IP address blocks: 216.247.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 08:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:fb:26:18:0c:b1:d0:04:5f:ab:8a:52:11:61:64:6e:6d:b0:d9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Validity
Not Before: Jun 2 07:48:45 2025 GMT
Not After : Jun 1 07:53:45 2026 GMT
Subject: CN=C6136DFF1A18E47E858BE550A7D2004D58873038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:26:a8:85:87:59:8b:38:79:e2:55:ed:53:68:
68:48:50:ac:d5:07:b9:9a:35:b3:81:4e:20:e3:f9:
76:38:ad:03:8f:60:a7:96:b9:55:31:9a:10:6f:77:
83:69:e5:24:54:30:56:39:d9:be:c1:1d:b8:94:54:
0d:af:52:0c:ea:08:6d:bf:a2:03:db:0d:dd:c5:78:
a0:15:e0:c5:09:b2:93:c4:1a:4c:b0:db:9d:b2:f1:
6f:91:ab:3e:83:ee:6e:68:69:15:d6:37:bf:d4:49:
f1:35:c8:5c:e3:58:57:66:b7:7e:e0:d0:23:d2:a6:
9c:1c:eb:b6:20:12:3f:2e:6b:a9:52:d0:fe:e1:7e:
34:16:53:b1:02:e9:30:b1:5c:34:67:5e:f3:1a:b8:
3d:95:1b:48:4d:d3:3e:bc:50:a0:f9:dc:71:52:37:
7b:65:64:61:1b:de:b7:4a:7f:37:ba:f1:ed:7a:89:
00:d2:1e:cd:1b:c9:b4:ec:6b:6c:fd:b7:1d:32:61:
56:10:a8:e3:11:e4:76:11:54:bd:75:f9:58:8d:fb:
e5:93:b4:e6:27:8f:cc:a7:41:bd:de:83:17:f6:22:
15:7e:91:01:7d:4c:28:57:b5:e1:f2:0e:07:f9:42:
1e:0f:30:31:25:b1:99:15:8a:a4:39:6d:09:d4:0e:
7d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:13:6D:FF:1A:18:E4:7E:85:8B:E5:50:A7:D2:00:4D:58:87:30:38
X509v3 Authority Key Identifier:
keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.247.101.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f6:01:ff:2b:57:1d:a2:13:43:42:bd:4c:ab:b0:7c:13:b6:
79:5f:9e:8a:99:34:50:98:c1:bd:36:26:94:99:cb:70:5c:d5:
6c:62:89:46:22:ba:24:fb:82:31:1c:13:e7:4f:4d:67:09:bc:
b1:ba:af:be:6f:c7:9c:98:ff:ee:25:05:a1:86:a7:fd:5b:23:
a7:7a:c9:ce:cb:99:10:9c:81:71:fa:ce:30:d0:e2:0e:01:a1:
75:78:19:9f:09:2b:90:a3:e5:89:48:e4:30:04:db:b0:e1:0b:
b7:0b:e3:df:59:62:be:e4:8b:30:a8:df:d9:67:d3:4d:d1:2e:
fa:14:fc:2f:0c:4f:8d:2d:bc:16:5a:dd:2a:d0:0c:a7:95:af:
50:ce:f6:f1:4e:98:f7:d6:47:35:58:ff:d4:ce:d1:13:31:bf:
3c:9c:ed:27:97:e7:b6:a2:dc:d8:3b:a8:e6:1b:98:f2:a7:68:
a7:b7:08:72:d6:76:1d:6b:ee:2c:6e:ef:c5:ef:3a:61:10:ad:
e1:9b:85:c2:3b:e0:c0:e2:3c:c9:f3:3e:c7:88:dc:62:92:98:
20:30:2f:81:d3:97:76:95:86:5d:2b:89:97:d9:5b:ea:e3:a5:
cf:b2:58:e2:90:bc:3b:ee:d9:eb:47:84:58:8e:c8:54:d6:c8:
f2:39:de:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:23:21 2025 by rpki-client