Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32332d3234203d3e20383334.roa
File: 3230352e3231312e3135342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: MEULgYi2aX3BTifWYxzBD803jsLMSBaHs9rhTdp0SkQ=
Subject key identifier: CB:C0:FB:B5:84:56:7B:83:C1:AB:85:D5:CA:85:49:C4:5A:3A:7C:E0
Certificate issuer: /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial: 7EFF6495CEB5383FEDA04BB495CDC4D7CEC3EDF6
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32332d3234203d3e20383334.roa
Signing time: Wed 20 Nov 2024 00:04:24 +0000
ROA not before: Tue 19 Nov 2024 23:59:24 +0000
ROA not after: Wed 19 Nov 2025 00:04:24 +0000
asID: 834
IP address blocks: 205.211.154.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 15:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ff:64:95:ce:b5:38:3f:ed:a0:4b:b4:95:cd:c4:d7:ce:c3:ed:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Validity
Not Before: Nov 19 23:59:24 2024 GMT
Not After : Nov 19 00:04:24 2025 GMT
Subject: CN=CBC0FBB584567B83C1AB85D5CA8549C45A3A7CE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:2f:03:33:9b:7f:c4:f8:76:2b:2e:84:aa:
81:3c:60:40:11:45:1a:5e:32:98:48:88:f2:07:0a:
f9:dc:9b:e3:fe:cf:ac:4a:42:d6:67:14:d7:bb:8f:
c3:49:e7:da:62:71:c7:ac:9e:94:30:a7:82:c6:c5:
23:c4:fa:76:be:a5:1a:53:be:5c:81:6c:c0:e9:db:
5a:8f:fd:72:56:c3:35:aa:aa:9f:86:6f:ce:08:c3:
83:82:51:ba:c5:34:5c:d9:43:f3:0e:df:f7:46:9a:
24:fd:a4:71:50:9d:90:2c:35:7e:77:5f:77:89:a9:
cf:df:00:aa:e4:b1:ad:92:45:a5:37:ea:ad:49:6e:
69:0d:c5:2b:53:dd:63:a2:47:00:a2:5b:b4:39:9e:
f8:9a:59:da:ac:6e:2f:76:31:fa:41:1b:6c:79:4c:
45:e4:91:2a:40:5c:c8:f8:f3:84:1c:68:f4:65:7d:
e0:1c:ea:a1:c1:11:97:9f:a8:d4:27:f6:8f:98:e0:
08:a5:06:21:34:f8:81:f6:57:80:c5:b2:21:6c:14:
0f:8a:ec:58:7b:9d:48:00:a5:fa:41:f8:b1:b3:8a:
f4:cc:33:37:75:36:7a:c4:e8:de:ec:32:17:08:11:
f6:f9:0f:e5:be:c7:cf:64:7a:0c:59:7b:97:94:1a:
8e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C0:FB:B5:84:56:7B:83:C1:AB:85:D5:CA:85:49:C4:5A:3A:7C:E0
X509v3 Authority Key Identifier:
keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.211.154.0/23
Signature Algorithm: sha256WithRSAEncryption
19:a5:84:96:f6:30:f1:55:68:cf:8e:ec:67:75:63:9c:55:a7:
88:03:df:00:3c:9a:71:2b:13:73:7b:3d:55:b2:59:95:3e:75:
1c:be:13:cd:85:73:54:95:96:72:4c:4a:75:ab:80:11:ea:73:
e5:af:bb:69:f1:46:9c:19:ef:06:68:e6:62:05:5b:c4:2c:07:
0c:84:82:e4:26:1a:21:ec:a7:bb:96:e3:f6:c7:15:da:50:06:
b0:b6:42:f6:80:98:6d:68:f5:23:a8:6f:eb:1e:9f:d8:85:3a:
1a:78:e2:d2:3b:a1:9a:1e:12:a2:bb:fb:62:a6:dd:a6:6b:55:
e1:8a:b1:1d:af:68:3a:91:45:b8:70:12:e8:59:6f:7f:ee:54:
57:dc:c7:5a:8c:0e:2b:ca:e0:c2:5e:7b:69:41:7a:cb:f5:ac:
4a:13:1b:53:12:54:5a:cc:10:d8:cd:6c:29:1a:22:4b:f2:50:
38:ba:ff:04:11:dd:a7:9f:94:66:be:97:db:33:05:65:73:41:
8b:30:2b:ce:98:37:73:0d:aa:98:2b:04:6c:e2:d5:91:36:67:
bb:e4:f2:61:80:7f:2a:71:f1:01:67:bd:a6:3e:c2:c9:41:a7:
3e:c8:bb:de:2b:5f:c6:0c:68:d6:8e:3d:47:9e:33:94:22:9c:
d9:e2:01:b2
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUfv9klc61OD/toEu0lc3E187D7fYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2MDEzOTNmNzhlZTEyZmU3ZjczYWU3OWJiZmI3NGI0
MzFkYTc3MDBjZWYyY2Y4Y2YwHhcNMjQxMTE5MjM1OTI0WhcNMjUxMTE5MDAwNDI0
WjAzMTEwLwYDVQQDEyhDQkMwRkJCNTg0NTY3QjgzQzFBQjg1RDVDQTg1NDlDNDVB
M0E3Q0UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVQvAzObf8T4
disuhKqBPGBAEUUaXjKYSIjyBwr53Jvj/s+sSkLWZxTXu4/DSefaYnHHrJ6UMKeC
xsUjxPp2vqUaU75cgWzA6dtaj/1yVsM1qqqfhm/OCMODglG6xTRc2UPzDt/3Rpok
/aRxUJ2QLDV+d193ianP3wCq5LGtkkWlN+qtSW5pDcUrU91jokcAolu0OZ74mlna
rG4vdjH6QRtseUxF5JEqQFzI+POEHGj0ZX3gHOqhwRGXn6jUJ/aPmOAIpQYhNPiB
9leAxbIhbBQPiuxYe51IAKX6Qfixs4r0zDM3dTZ6xOje7DIXCBH2+Q/lvsfPZHoM
WXuXlBqOMQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFMvA+7WEVnuDwauF1cqFScRa
OnzgMB8GA1UdIwQYMBaAFLIb0XcaltefcHlgkVEvJ4ERFI7wMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjI0NzdmYzQwYWFiLzAv
QjIxQkQxNzcxQTk2RDc5RjcwNzk2MDkxNTEyRjI3ODExMTE0OEVGMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzhjYWJjMWI0LTliZGYtNDBhNi1iYmJiLTY2YWU5ZDVhNjg1YS8zNzYw
MTM5M2Y3OGVlMTJmZTdmNzNhZTc5YmJmYjc0YjQzMWRhNzcwMGNlZjJjZjhjZi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGYy
NDc3ZmM0MGFhYi8wLzMyMzAzNTJlMzIzMTMxMmUzMTM1MzQyZTMwMmYzMjMzMmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHN05owDQYJKoZIhvcNAQELBQAD
ggEBABmlhJb2MPFVaM+O7Gd1Y5xVp4gD3wA8mnErE3N7PVWyWZU+dRy+E82Fc1SV
lnJMSnWrgBHqc+Wvu2nxRpwZ7wZo5mIFW8QsBwyEguQmGiHsp7uW4/bHFdpQBrC2
QvaAmG1o9SOob+sen9iFOhp44tI7oZoeEqK7+2Km3aZrVeGKsR2vaDqRRbhwEuhZ
b3/uVFfcx1qMDivK4MJee2lBesv1rEoTG1MSVFrMENjNbCkaIkvyUDi6/wQR3aef
lGa+l9szBWVzQYswK86YN3MNqpgrBGzi1ZE2Z7vk8mGAfypx8QFnvaY+wslBpz7I
u94rX8YMaNaOPUeeM5QinNniAbI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:28 2025 by rpki-client