Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e2037303239.roa
File: 3230352e3231312e3135352e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: X7CR4AEVfehuSM07SDw20xbt1fQsYggPcz/okZgzVl8=
Subject key identifier: B4:82:09:E9:0D:D2:F3:17:7D:8E:EE:56:FF:64:2A:23:C5:43:B3:91
Certificate issuer: /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial: 1DFA429AC97FDB803987A20D43F7FC60E8B2E35A
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e2037303239.roa
Signing time: Tue 05 Nov 2024 19:47:45 +0000
ROA not before: Tue 05 Nov 2024 19:42:45 +0000
ROA not after: Tue 04 Nov 2025 19:47:45 +0000
asID: 7029
IP address blocks: 205.211.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 00:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:fa:42:9a:c9:7f:db:80:39:87:a2:0d:43:f7:fc:60:e8:b2:e3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Validity
Not Before: Nov 5 19:42:45 2024 GMT
Not After : Nov 4 19:47:45 2025 GMT
Subject: CN=B48209E90DD2F3177D8EEE56FF642A23C543B391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:e4:de:0f:f3:2b:56:1d:f8:62:b1:cd:e6:
83:d5:2c:5d:7d:bc:8b:47:c8:53:30:2c:64:8f:e2:
f2:56:66:16:20:d3:18:ae:e0:78:86:f6:8a:b4:25:
be:7f:2a:86:55:21:b0:96:5a:f5:8c:19:81:57:ec:
7f:90:b2:98:7d:be:8f:35:5e:59:7f:b2:b0:08:68:
c2:6c:2c:e6:31:73:91:89:34:07:e9:bf:f3:f5:38:
6e:c6:7e:2c:84:73:0e:0f:8f:c5:8d:bd:20:d7:29:
ec:d8:3e:ad:b0:8f:da:ee:f9:29:b3:5d:21:4c:b9:
4f:93:b0:35:cc:8b:97:be:9b:98:15:5a:fc:9f:19:
13:34:86:83:74:ac:61:1a:62:c8:07:71:0c:a1:93:
fd:ac:9a:27:07:1f:e1:18:ad:df:7e:0f:5c:30:b7:
c0:7a:81:54:72:1a:25:9a:21:44:f2:d4:48:a4:01:
65:dd:35:38:3f:09:af:2e:37:80:6f:02:aa:ea:2a:
b1:b3:86:e7:05:05:b1:ea:f7:95:ff:86:ab:0e:b8:
45:7f:78:41:6a:85:cb:b1:4d:a6:5f:31:69:87:65:
c0:93:31:3f:c4:19:dd:5a:3e:db:14:80:69:2c:29:
80:80:be:08:0f:9d:db:e6:9c:f7:98:be:82:9a:4d:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:82:09:E9:0D:D2:F3:17:7D:8E:EE:56:FF:64:2A:23:C5:43:B3:91
X509v3 Authority Key Identifier:
keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.211.155.0/24
Signature Algorithm: sha256WithRSAEncryption
59:09:1c:14:b0:ec:3b:a2:10:0b:76:4b:99:0f:1b:10:15:6f:
e9:d5:cf:ec:2e:c9:fd:b0:1b:e2:97:43:94:99:35:e1:a9:88:
71:57:c4:b6:4e:e3:70:70:2e:cc:41:ad:e0:7a:dc:f0:08:c1:
b3:5d:27:4d:dd:31:60:6c:58:70:d5:bd:b3:85:43:d4:36:5b:
2c:bd:bd:28:f0:3b:66:f9:ca:be:6b:74:0e:ce:c7:4d:cf:9c:
2f:cb:5d:2a:cd:52:4f:68:35:f3:78:21:6e:46:7d:81:1d:2e:
d3:23:b2:ce:db:c3:61:dd:68:5f:74:1f:6b:c2:24:48:05:89:
9b:c9:f9:42:48:ef:45:ed:7b:cd:5a:1d:bb:dc:1e:a4:00:b0:
f3:8f:59:22:ab:1b:0c:ad:67:fe:f9:b1:a3:57:1a:ff:0e:d3:
9b:f3:5f:e1:64:8c:76:c9:54:c1:90:c2:e7:2e:49:5a:a2:e8:
cc:ea:97:ca:10:7c:3a:6b:13:c6:95:44:24:1a:2b:48:6e:46:
87:c1:e1:6a:d1:56:a0:91:53:c1:70:9c:92:99:59:88:f3:a5:
57:5e:65:88:a1:72:b4:f2:7d:d1:5f:a6:50:fa:93:8c:6e:2d:
2f:42:1e:ee:87:17:c7:06:69:b7:f2:39:85:b1:dc:25:56:85:
1b:36:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:58:09 2025 by rpki-client