Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20383334.roa
File: 3139392e36382e3231372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 0On/EUpqyaloSNXawBymEYue89R6rDoBKa6tWIdzI6E=
Subject key identifier: 45:30:34:20:A5:80:AF:34:5B:53:D9:B8:DA:EF:39:03:B1:70:65:10
Certificate issuer: /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial: 115648BE1069AC1935449B0F5FECFCD130A1888A
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20383334.roa
Signing time: Sat 08 Feb 2025 00:02:05 +0000
ROA not before: Fri 07 Feb 2025 23:57:05 +0000
ROA not after: Sat 07 Feb 2026 00:02:05 +0000
asID: 834
IP address blocks: 199.68.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 15:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:56:48:be:10:69:ac:19:35:44:9b:0f:5f:ec:fc:d1:30:a1:88:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Validity
Not Before: Feb 7 23:57:05 2025 GMT
Not After : Feb 7 00:02:05 2026 GMT
Subject: CN=45303420A580AF345B53D9B8DAEF3903B1706510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:7b:d9:60:ad:04:64:0b:68:fc:61:cd:ad:
66:5b:35:97:ff:80:27:d9:a4:3a:73:da:d0:71:f3:
2e:5b:78:ef:51:ed:11:ae:7c:7a:15:a9:0c:0f:9e:
79:80:5f:5d:95:9d:6b:d5:82:18:56:fd:b5:f0:4e:
f0:f0:19:5a:a8:37:3f:4c:69:1d:00:49:aa:62:52:
03:06:56:e9:ac:b5:a1:5b:04:01:d7:02:b6:24:de:
c3:23:5c:0e:ac:d4:e3:f8:3f:f0:cc:61:17:a7:f1:
c5:25:ed:e2:30:e9:64:27:1d:a3:c4:9a:f1:c9:e6:
cd:03:f3:12:df:bb:d2:11:3d:8b:28:08:5c:48:37:
81:5b:1d:da:7f:fc:5c:a7:59:b7:93:dc:a6:a7:7f:
87:12:c3:db:ec:ed:09:f8:2b:5e:89:34:f2:9a:a1:
1e:ae:e0:19:29:6b:19:72:f8:fd:34:2b:92:95:b0:
02:4e:75:4c:2a:8d:e0:94:2b:4a:ef:97:18:79:4e:
89:51:79:d6:8c:b9:9f:dc:b1:3d:57:ac:3e:cb:a2:
1e:33:58:e4:9e:0e:7a:d4:ff:a7:9d:5e:c6:5c:62:
a9:57:98:68:14:e1:d4:c8:52:4a:a0:8b:2f:d0:77:
27:65:9b:28:5a:1e:16:1c:01:b2:41:28:7d:6b:23:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:30:34:20:A5:80:AF:34:5B:53:D9:B8:DA:EF:39:03:B1:70:65:10
X509v3 Authority Key Identifier:
keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.68.217.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7c:e0:b0:b9:19:92:20:ab:03:db:b6:50:a0:a4:11:b6:f2:
ce:60:75:b6:bf:9a:03:41:bf:54:3e:82:ce:55:a3:30:37:46:
90:6f:a1:0d:e9:cb:65:a0:88:4e:67:e8:28:67:51:4f:a9:4f:
78:ce:f0:a0:79:3d:7b:5a:b5:04:90:a0:93:10:51:e1:90:19:
51:71:94:6b:bf:ba:85:4d:3d:9c:b9:ac:e3:34:bd:94:32:46:
d6:d8:ca:f6:06:fb:78:c7:b4:2f:e6:61:a2:0e:e7:ef:d3:96:
77:79:86:ec:5a:89:6c:0b:07:84:2d:59:46:6e:b9:f4:78:f5:
78:d9:89:43:16:97:0c:eb:05:c6:e8:3f:25:10:38:65:42:49:
c7:06:26:cf:e4:e1:0b:fd:19:57:13:dd:83:09:aa:08:ef:2c:
9c:6c:3e:68:37:39:5c:81:b0:04:9e:ce:fe:c9:3a:a0:ef:2b:
5b:05:fa:05:f5:32:f4:3d:f5:c7:d7:82:f6:af:27:d4:6f:23:
49:f3:02:54:14:bc:91:f8:d6:24:e2:44:f6:bf:f6:d6:44:52:
d2:44:cd:61:05:c2:5c:7a:eb:26:11:f8:c5:35:11:56:e9:2d:
66:3a:46:d5:e6:0b:9c:5b:35:5e:43:ad:85:a4:0d:18:54:7a:
a2:05:79:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:06:28 2025 by rpki-client