Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20383334.roa
File: 3139392e39312e3130332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: BQsA9JxVz5q5/1jFr/Qb2N0LBRCB8NzE/3tIq9XnGY0=
Subject key identifier: F9:47:A0:5D:C4:77:8C:F4:E3:A2:C2:EE:02:14:91:00:AC:1A:45:73
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 70570CF2BBEC6221360C90116986E500B798EDA4
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20383334.roa
Signing time: Tue 26 Nov 2024 11:13:11 +0000
ROA not before: Tue 26 Nov 2024 11:08:11 +0000
ROA not after: Tue 25 Nov 2025 11:13:11 +0000
asID: 834
IP address blocks: 199.91.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 13:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:57:0c:f2:bb:ec:62:21:36:0c:90:11:69:86:e5:00:b7:98:ed:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Nov 26 11:08:11 2024 GMT
Not After : Nov 25 11:13:11 2025 GMT
Subject: CN=F947A05DC4778CF4E3A2C2EE02149100AC1A4573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:f3:07:f3:ed:dc:5b:34:35:25:2a:5a:a1:
ae:e9:52:14:22:05:08:f1:9d:c4:02:a7:e1:a2:55:
c0:22:2f:2b:01:84:73:dc:d8:da:86:d8:3b:3a:53:
dd:f1:53:af:f1:3c:17:c0:b7:55:17:ff:d4:4f:19:
7d:08:7f:7a:9b:72:45:2f:6b:4f:eb:55:a6:7d:82:
a3:9e:17:0b:e0:62:af:6f:03:db:cf:fc:1e:27:3e:
2f:71:05:e9:12:b0:30:05:b9:db:e0:fd:c2:e7:6e:
28:fb:b4:a0:3e:00:6e:dc:50:1c:e7:de:02:e2:b8:
80:88:b5:13:e4:1c:39:e6:f1:c5:cb:44:69:5d:62:
09:09:bd:fb:49:5d:45:2a:26:c7:a2:40:18:df:30:
d6:af:a6:52:9a:8a:5c:13:0a:f7:25:8b:f8:6b:fa:
4d:2f:83:9c:2b:d8:23:2f:42:80:1a:f3:2d:76:ae:
a5:3e:92:91:06:c6:4f:20:bc:04:94:5a:dc:77:8f:
79:46:69:60:97:e5:da:85:89:55:b8:53:5b:45:81:
31:4f:44:fe:50:1b:79:ee:32:1b:0b:9d:02:07:5f:
5b:05:00:40:e6:c6:85:61:d0:31:ce:a2:ac:df:0b:
6e:1f:cd:2e:58:e4:a2:07:98:3a:94:0f:7d:5c:07:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:47:A0:5D:C4:77:8C:F4:E3:A2:C2:EE:02:14:91:00:AC:1A:45:73
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.103.0/24
Signature Algorithm: sha256WithRSAEncryption
09:bc:50:dd:92:a9:b5:d4:7b:59:37:cb:5b:d6:24:15:35:ab:
71:39:e4:29:f0:92:fd:09:89:1e:0d:f4:6e:36:97:c1:e0:48:
f6:6d:ca:0e:1f:ab:dc:99:a6:9c:44:3d:80:8e:23:f4:e4:62:
e6:8a:21:36:7f:7d:dc:45:a4:1c:49:c3:25:9b:b0:ef:80:c5:
f1:87:d8:28:34:ec:d7:2f:ab:1a:e7:37:7a:9f:db:7f:ff:4d:
1e:14:09:b5:72:5d:27:d1:14:fa:8c:1f:5d:4b:7d:b8:e6:66:
df:1c:ee:5e:f6:e1:ac:ef:79:de:3d:d6:2c:7d:86:c1:96:8d:
cb:f2:0d:1d:3d:c9:b2:21:49:82:08:73:8d:76:ea:ea:da:96:
2d:16:b4:3c:e3:38:65:9b:1c:0e:1b:7a:d2:b6:28:fd:d4:d0:
aa:c2:cd:9e:f7:ed:af:0c:01:f7:c0:04:91:37:bd:0f:86:9e:
f5:98:bd:81:df:e5:78:d4:17:cd:ee:25:ea:a7:0f:47:bf:ad:
86:26:8e:8d:09:86:9c:e3:f9:c8:a8:03:00:82:d6:c7:b8:9e:
13:bd:1a:88:93:75:71:46:35:b1:a7:fa:3f:d9:b7:26:a4:44:
71:b9:fc:f9:aa:f9:a1:26:a7:0c:ce:38:93:c0:33:f9:1d:72:
be:b4:8f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:04:34 2025 by rpki-client