Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e203133333437.roa
File: 3230352e3233332e3135352e302f32342d3234203d3e203133333437.roa (raw, json)
Hash identifier: fl5HPExEfE1ZnkzQCkYdUxwejZ1hGnDUEN6mMdXiCzU=
Subject key identifier: 28:0F:AF:BF:BD:A2:8F:A6:23:27:A8:F2:71:3D:A1:DB:08:E8:20:C4
Certificate issuer: /CN=17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a
Certificate serial: 7F62ABA0ED840546376EEB1B5C8D40E37CB99251
Authority key identifier: 5A:27:49:11:3C:DE:5D:6C:31:A9:57:81:B9:DE:25:A7:37:46:4F:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e203133333437.roa
Signing time: Wed 15 Jan 2025 19:06:41 +0000
ROA not before: Wed 15 Jan 2025 19:01:41 +0000
ROA not after: Wed 14 Jan 2026 19:06:41 +0000
asID: 13347
IP address blocks: 205.233.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 08:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:62:ab:a0:ed:84:05:46:37:6e:eb:1b:5c:8d:40:e3:7c:b9:92:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a
Validity
Not Before: Jan 15 19:01:41 2025 GMT
Not After : Jan 14 19:06:41 2026 GMT
Subject: CN=280FAFBFBDA28FA62327A8F2713DA1DB08E820C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:50:b6:da:78:cc:56:c6:0f:c5:65:0a:80:
15:12:61:63:f3:08:c0:9a:4c:f2:3b:f2:c7:9a:a9:
44:00:c9:e9:9c:2e:16:bc:71:d6:a0:64:4e:e7:9d:
21:fc:b5:16:8b:d2:1e:a0:c8:c4:96:0b:ed:79:0a:
dc:42:f0:27:13:91:5a:51:cc:50:d2:7c:5e:27:ac:
e0:6d:1e:94:2b:fc:f8:f6:c8:3b:76:01:4c:c1:c3:
61:11:96:26:ea:ad:57:69:f9:2f:6b:49:26:c2:24:
a7:f4:41:e9:ef:33:9f:7e:a4:25:20:2f:98:49:d0:
c5:54:0d:f8:12:69:0e:1d:5f:83:96:8b:01:12:33:
81:24:24:19:58:f0:05:4e:af:25:47:ba:b2:e9:14:
69:75:24:2d:a3:10:37:af:f2:11:81:e7:ad:97:cc:
35:1f:70:b2:cc:47:fe:66:c8:ef:f7:e6:b5:cb:55:
fc:83:af:18:96:10:81:a6:a6:50:a2:0f:68:5c:1a:
0f:ac:a0:67:4a:aa:54:78:5c:07:16:46:6b:5d:ac:
c3:16:c9:9b:83:8a:9e:8d:3b:01:e9:4e:9f:31:a3:
ff:27:d0:06:ce:80:63:2d:a6:2f:58:29:49:cb:4b:
50:75:6e:44:a1:5e:b5:bf:df:9b:3d:a1:74:54:cc:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0F:AF:BF:BD:A2:8F:A6:23:27:A8:F2:71:3D:A1:DB:08:E8:20:C4
X509v3 Authority Key Identifier:
keyid:5A:27:49:11:3C:DE:5D:6C:31:A9:57:81:B9:DE:25:A7:37:46:4F:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e203133333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.233.155.0/24
Signature Algorithm: sha256WithRSAEncryption
64:71:31:3c:e9:47:f8:1a:53:ba:6a:83:6e:f2:fc:93:27:8b:
fd:93:63:c2:2c:c3:0c:d2:b0:d3:da:81:7f:ac:3a:73:3f:0f:
bf:8e:81:78:61:94:5e:ae:7e:86:70:c5:53:c4:4f:71:08:76:
14:82:ac:7d:d0:15:80:9e:a3:3d:9c:cc:f1:ee:7c:01:5a:f3:
0f:cc:d3:f3:d9:3c:ad:c6:b5:2b:89:9b:c8:0a:65:a7:0d:8e:
6a:e8:66:6b:49:c6:bc:1c:61:8e:28:88:0a:42:11:bd:26:f6:
99:b5:f1:38:a5:33:7d:02:09:b0:de:e2:bd:60:d4:b6:c1:95:
86:47:d9:72:c6:2a:25:18:66:82:be:ad:14:e2:98:de:d3:13:
63:8e:35:7d:63:41:f4:27:4b:70:0c:f9:7e:6d:a2:b2:88:87:
59:7c:37:17:da:55:3c:94:63:4a:f7:06:dc:cf:3f:6c:a1:18:
54:71:d2:c3:19:83:6c:57:c3:1b:37:c7:c9:b4:9c:bd:cb:70:
1c:08:ad:92:43:8b:f1:18:6b:9a:a6:fe:38:5d:2e:5d:6f:6e:
5d:67:05:57:2a:a5:c7:0b:5f:0c:de:c3:c7:48:68:41:81:3f:
8f:4d:3a:81:95:64:5f:ce:6c:48:81:b3:63:91:71:f7:d1:aa:
fd:57:ec:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:04:59 2025 by rpki-client