Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20333935383339.roa
File: 3130342e3235342e3139342e302f32342d3234203d3e20333935383339.roa (raw, json)
Hash identifier: AhoV2pReN0t+Uul/1m4EarUoiUroew/Y5jXuf/c359s=
Subject key identifier: 46:97:D9:CE:46:41:77:3B:06:B9:76:41:6B:EB:06:06:39:E7:13:18
Certificate issuer: /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial: 1E53C508A45DF0E74933C0E6072A1F704AAD22B5
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20333935383339.roa
Signing time: Tue 12 Mar 2024 13:26:29 +0000
ROA not before: Tue 12 Mar 2024 13:21:29 +0000
ROA not after: Tue 11 Mar 2025 13:26:29 +0000
asID: 395839
IP address blocks: 104.254.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 08:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:53:c5:08:a4:5d:f0:e7:49:33:c0:e6:07:2a:1f:70:4a:ad:22:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Validity
Not Before: Mar 12 13:21:29 2024 GMT
Not After : Mar 11 13:26:29 2025 GMT
Subject: CN=4697D9CE4641773B06B976416BEB060639E71318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:ca:ad:d4:8f:4e:8a:04:9c:2c:73:f4:2c:
2c:e2:84:8b:b2:69:33:2b:fe:d7:11:08:b0:f9:02:
92:c6:c9:d4:3e:55:cf:60:a3:08:07:69:9b:07:08:
7a:b8:94:6c:ea:e2:95:e0:1a:d4:49:29:b9:e1:7e:
4c:88:b7:f2:2d:1e:65:d6:bd:64:1a:d7:14:56:1d:
da:17:5f:71:1b:a9:b3:13:45:24:9f:62:74:fb:39:
94:7b:b6:6c:1e:0c:ff:15:82:35:d2:e4:4f:f3:74:
78:7a:5f:92:4f:4b:59:d5:01:ab:5a:5d:03:18:e9:
c1:09:fd:0a:6a:f0:21:be:bd:2e:66:1d:ce:2b:e3:
cf:a0:b3:0e:71:f3:92:57:bd:6e:00:44:fe:ad:89:
d0:f0:e0:10:77:96:d1:61:df:bc:7c:e0:73:2a:e1:
86:c7:53:45:b2:e9:af:11:94:4d:90:56:a0:d9:bf:
eb:47:08:e2:69:1b:0d:94:9e:8c:a3:bd:17:b9:ec:
b6:47:ad:d7:33:53:63:63:24:d3:48:46:15:85:97:
e3:8f:65:4f:96:91:bb:43:d0:65:6f:31:b7:9c:3b:
0f:6f:4d:42:5b:a9:74:58:0f:c5:53:1d:66:b9:06:
7f:22:a7:9a:fb:eb:0c:db:22:df:6f:d2:eb:71:dc:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:97:D9:CE:46:41:77:3B:06:B9:76:41:6B:EB:06:06:39:E7:13:18
X509v3 Authority Key Identifier:
keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20333935383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.254.194.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e8:3e:33:79:d5:15:8e:9b:4a:e0:c4:e8:40:a1:a1:6c:8a:
37:18:86:5d:1e:22:b1:5b:42:39:a1:dd:ff:43:6c:b3:9e:71:
af:e4:9f:da:5d:7a:fd:7c:15:d5:b1:95:f2:37:38:e4:a8:ee:
76:d0:38:8d:3a:e2:f9:9f:c9:65:fb:f4:3a:48:63:41:16:f5:
28:49:b7:2e:65:08:44:d1:75:cb:bd:7d:4d:a7:2a:c5:97:06:
b1:1c:10:c6:b6:b5:69:68:61:e8:ba:83:66:4b:c6:b1:99:38:
0f:a2:ce:16:51:d1:e0:27:b5:9e:5f:c2:95:44:30:7d:02:0a:
a9:02:f2:cf:12:84:30:d8:6e:78:d7:0f:ad:3a:38:9c:7b:23:
70:f1:62:f6:35:36:5d:fa:a0:80:6d:26:9d:a1:aa:4a:1a:64:
40:27:c5:8d:62:95:df:65:30:9a:e2:df:9f:7f:98:c7:ff:c7:
77:1d:08:fc:08:3f:19:a0:02:6a:2d:a0:d9:b2:fc:b6:54:77:
00:d4:fd:92:66:0b:c0:5b:1a:fe:e8:57:45:45:93:2b:65:1f:
ed:49:32:54:0a:cb:a7:05:1c:d6:4a:4c:40:53:37:74:19:96:
ba:3d:0f:ec:95:ea:4f:f3:14:6e:47:47:20:71:4c:2f:e2:a0:
3b:d6:3d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:26 2025 by rpki-client