![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20383334.roa
File: 3130342e3235342e3139342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: XTgLhEcp4UNTlEDrG8oV+7XOqVTsWHrM1PgR4DK8+wk=
Subject key identifier: 69:00:E3:B7:E4:F7:EF:F2:60:8B:F6:56:39:D4:E7:18:F6:73:D9:16
Certificate issuer: /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial: 6F69129DE7868E51A8F5EC19ED3BFE78E3F7DB48
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20383334.roa
Signing time: Fri 15 Mar 2024 08:11:11 +0000
ROA not before: Fri 15 Mar 2024 08:06:11 +0000
ROA not after: Fri 14 Mar 2025 08:11:11 +0000
asID: 834
IP address blocks: 104.254.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Mar 2024 20:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:69:12:9d:e7:86:8e:51:a8:f5:ec:19:ed:3b:fe:78:e3:f7:db:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Validity
Not Before: Mar 15 08:06:11 2024 GMT
Not After : Mar 14 08:11:11 2025 GMT
Subject: CN=6900E3B7E4F7EFF2608BF65639D4E718F673D916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:ff:28:ab:d9:96:fa:49:92:ce:3e:d2:e6:
0f:b8:07:a0:a5:ba:05:fc:e7:1a:28:ad:c1:94:c8:
85:be:2b:64:c0:68:40:13:41:6c:72:a7:49:13:c2:
12:4c:d5:36:42:06:80:f9:14:6e:1e:48:31:a8:af:
e7:a5:55:6a:f7:dc:d9:79:b3:a9:3a:cf:18:04:7b:
96:54:ed:e0:4e:0a:e9:e4:30:cf:73:6b:76:5b:6f:
f8:bd:5d:31:55:05:49:bb:ea:37:78:58:c7:52:95:
ec:e2:62:b1:39:16:0b:bc:7d:e9:16:8a:f8:78:c4:
31:37:24:4a:3a:8a:a0:49:66:34:73:05:72:b4:f4:
07:6f:5b:24:09:34:b2:41:a5:24:35:59:73:ee:89:
36:6b:47:04:4f:50:7e:6e:9d:3e:97:1c:f7:75:de:
f4:21:7c:30:57:31:9a:91:bb:fd:bd:30:e4:37:03:
8c:0e:77:c4:3b:d8:f6:04:6b:4d:69:43:3b:9a:6a:
5f:85:cf:f8:55:28:71:ed:92:d0:ad:63:4c:be:57:
10:6f:b6:f8:55:3e:f4:da:56:7b:fb:90:f8:b9:c3:
9a:90:50:e8:b1:8e:4f:32:c6:71:ed:b1:4f:f4:b5:
08:c5:24:be:e7:30:a8:34:ab:f5:38:a4:24:ed:cf:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:00:E3:B7:E4:F7:EF:F2:60:8B:F6:56:39:D4:E7:18:F6:73:D9:16
X509v3 Authority Key Identifier:
keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.254.194.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b9:8a:b8:e5:53:42:35:54:9a:b7:90:2e:74:f7:b1:08:6e:
a9:ff:b8:d1:43:d5:85:91:ee:4e:6b:2f:58:2f:4d:af:a2:ac:
5f:11:b8:2c:2b:b0:58:57:d3:0c:7e:bd:67:14:38:f0:94:f2:
3f:69:2f:b3:1a:e4:29:96:f8:dd:d7:54:05:30:84:7f:7f:e7:
8d:2d:3a:cb:c1:ae:1e:97:8e:10:03:b1:ca:ad:69:a2:8f:27:
75:a3:01:63:df:8b:f2:4a:3e:e5:2f:1a:55:24:45:99:93:b1:
08:0a:93:94:7d:95:63:02:5a:f6:de:f8:0d:7d:1c:9f:f0:f9:
d8:ab:a8:1f:f8:bc:f1:d0:f6:bf:36:86:dc:6e:12:38:39:4a:
e4:bd:08:be:c5:dd:18:15:6e:a6:70:e4:58:2e:7a:7d:3b:6b:
e3:69:19:b8:1b:1c:f3:72:d7:b8:6a:0a:8c:e0:d2:b2:51:b0:
e6:60:5a:cf:cc:2e:c3:ec:50:ca:ad:87:62:28:47:93:e7:d7:
b3:db:80:a4:e0:6e:54:e3:34:ba:79:64:0b:70:16:74:be:e7:
fe:68:f4:28:e4:52:87:59:2a:70:17:8d:6a:4b:be:d9:48:a5:
5a:75:16:d3:19:7a:1c:22:7e:3a:9c:bb:a6:96:37:1f:2f:19:
ba:9a:11:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:51 2025 by rpki-client