![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e20383334.roa
File: 3130342e3235342e3139322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: l5px2cWBuQ3wsDxUYv/YFOH2HvrDMuUNmM8OhVsROyU=
Subject key identifier: EF:F6:97:04:67:E3:81:05:6D:90:79:65:AA:FD:59:C2:04:1E:9F:96
Certificate issuer: /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial: 68CF96DAB20229ACC9F77788CED6FAF7C53A7836
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e20383334.roa
Signing time: Sun 17 Nov 2024 00:01:03 +0000
ROA not before: Sat 16 Nov 2024 23:56:03 +0000
ROA not after: Sun 16 Nov 2025 00:01:03 +0000
asID: 834
IP address blocks: 104.254.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 19:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:cf:96:da:b2:02:29:ac:c9:f7:77:88:ce:d6:fa:f7:c5:3a:78:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Validity
Not Before: Nov 16 23:56:03 2024 GMT
Not After : Nov 16 00:01:03 2025 GMT
Subject: CN=EFF6970467E381056D907965AAFD59C2041E9F96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:0d:77:cf:63:d6:f9:45:f6:8f:c7:9a:23:
e5:bd:ab:b8:eb:a5:26:63:34:20:e1:20:24:cd:86:
ae:0e:63:9b:40:90:64:e2:a0:27:eb:f6:84:6c:c1:
d2:5f:04:e5:4c:a2:1a:66:fc:00:0b:a0:93:e8:2a:
b6:6f:f5:f7:94:67:58:7a:1c:d3:89:01:cf:56:eb:
d6:88:d9:8c:f8:d9:1c:d1:25:44:b6:18:31:b7:70:
e0:3d:ba:1a:4f:5b:79:36:08:b3:03:42:e4:8a:57:
45:a6:f8:17:1c:79:ba:6b:fe:4d:c0:96:91:71:95:
30:fa:4b:9f:c6:19:2e:c6:b5:7c:83:96:b7:1e:18:
99:f0:8a:bc:39:3c:5b:fd:48:df:25:fa:89:06:a5:
6e:06:ff:84:fc:55:32:09:a6:bc:b4:91:94:53:cf:
52:80:80:21:cb:36:2a:37:15:aa:49:15:a4:cc:7d:
ec:8f:e8:f4:9b:d3:68:b1:e6:9d:6f:6f:db:ad:b8:
fd:ba:20:eb:4e:18:fb:5d:09:d5:b2:38:1d:95:32:
47:cc:48:77:60:98:8a:01:9c:20:a5:d4:03:2a:c3:
07:b6:29:cd:af:19:95:ec:3e:4e:43:69:9c:71:bc:
c8:01:3f:9a:50:04:74:51:c5:03:d3:af:f6:46:c9:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F6:97:04:67:E3:81:05:6D:90:79:65:AA:FD:59:C2:04:1E:9F:96
X509v3 Authority Key Identifier:
keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.254.192.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b4:8d:30:5d:c6:57:6d:60:79:85:22:fa:4e:50:03:6b:90:
05:94:e4:1a:25:81:cd:d1:cb:b1:e7:9d:3a:59:ea:61:48:09:
30:f0:23:eb:f3:41:8d:0f:12:19:af:78:ad:b4:8a:24:27:58:
1b:5a:df:ce:70:24:c9:3c:5f:d4:c3:60:b9:96:95:6e:82:0b:
5a:72:23:24:e1:c1:45:2f:a6:72:6f:c0:6b:40:e7:2e:0d:84:
19:70:00:66:d5:cb:e4:6e:19:27:52:aa:03:0d:6c:4a:04:e9:
5a:85:fc:6b:d2:87:a3:c3:47:27:41:e6:02:41:23:95:91:eb:
71:86:7e:c5:12:b4:da:80:cb:98:ee:48:da:ac:06:4b:70:27:
d8:0a:f8:13:55:f7:a6:89:7c:06:3a:e1:69:1c:e4:b1:05:5a:
ec:cd:a4:a2:ab:3b:cb:d0:04:7e:d4:61:3b:f3:89:7a:ca:b9:
bd:33:83:6b:5c:d9:97:da:ef:65:f8:81:bb:6d:16:eb:d4:ca:
c7:1b:94:e0:76:c3:3e:13:87:ee:1e:91:98:ee:12:12:55:7f:
91:29:4e:56:5a:3c:c8:2d:0a:1d:15:ae:ea:2a:b9:ce:0f:a8:
c7:fc:89:a1:b5:a8:58:0f:57:8f:7e:50:d2:4f:fe:0b:a0:76:
93:a7:7d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:07 2025 by rpki-client