Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e20313430393032.roa
File: 3139332e382e3230332e302f32342d3234203d3e20313430393032.roa (raw, json)
Hash identifier: t8mOieXPHBoKBns7IKsqGz+TG3JxT/wSOLSljL4YtRQ=
Subject key identifier: 49:A2:44:3E:F8:2D:97:9B:08:92:51:DF:DA:69:88:00:77:B9:13:7B
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 2C156B0FBD031B49ABEF0A06046A7C3579A0CCA1
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e20313430393032.roa
Signing time: Thu 26 Sep 2024 08:48:59 +0000
ROA not before: Thu 26 Sep 2024 08:43:59 +0000
ROA not after: Thu 25 Sep 2025 08:48:59 +0000
asID: 140902
IP address blocks: 193.8.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Nov 2024 11:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:15:6b:0f:bd:03:1b:49:ab:ef:0a:06:04:6a:7c:35:79:a0:cc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Sep 26 08:43:59 2024 GMT
Not After : Sep 25 08:48:59 2025 GMT
Subject: CN=49A2443EF82D979B089251DFDA69880077B9137B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:5b:f8:b8:2e:cb:6b:5e:49:b8:99:7d:8d:
5d:25:51:9e:14:f6:c9:7e:aa:90:a0:b8:77:dc:f7:
10:4f:f7:ea:03:d7:fe:05:3f:f0:33:ef:c6:b8:32:
14:cf:aa:ff:fd:c1:8f:00:c1:bb:05:b9:d5:c9:f9:
4e:f8:86:6c:51:40:0f:c8:8b:58:b5:4d:ac:20:42:
dc:00:27:d8:2c:4d:83:5b:49:c5:97:dc:5e:ec:08:
71:f1:61:12:32:d3:11:47:05:cd:d1:58:83:a0:69:
24:5c:0f:d0:28:52:10:9f:af:30:26:b0:14:c8:11:
61:b0:f6:13:ae:8e:b7:6f:82:cd:a5:1c:c3:30:d2:
31:cf:05:c4:bc:a7:da:5f:a8:0c:bb:7d:d7:be:be:
de:87:a9:9f:dd:de:87:fa:da:37:26:13:c6:14:c3:
84:f8:8c:e0:33:8c:31:2c:35:45:4b:55:44:d6:f4:
b9:b8:c7:be:e6:a2:c4:c6:f7:e5:3f:e8:e5:b5:e7:
9b:93:58:e1:68:11:a1:99:ed:ce:6f:b9:9f:08:98:
6d:f8:36:02:95:8d:e1:da:4e:35:74:ee:09:53:25:
c3:7f:cd:64:c5:9d:9e:c6:29:6c:a1:24:4b:72:6f:
d7:dd:ec:70:3c:e0:1b:00:3b:49:e9:41:35:93:cc:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A2:44:3E:F8:2D:97:9B:08:92:51:DF:DA:69:88:00:77:B9:13:7B
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e20313430393032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:31:6a:4d:72:e2:7b:0e:a4:f9:dd:86:40:74:6b:7d:4f:3f:
60:bb:03:82:7e:8b:ab:0a:a0:06:52:cf:ee:70:dd:e5:9f:0c:
01:d9:cb:90:a5:2e:86:03:a8:fb:51:57:67:f9:d4:dc:cb:84:
17:4f:55:c9:ba:b4:ba:fb:4a:20:f2:d5:7c:29:9f:69:a7:c5:
84:d1:11:14:6e:4b:50:44:0d:f8:48:f2:fb:06:90:57:48:89:
7b:5c:16:d2:aa:04:81:3d:cd:e2:e1:37:18:9d:52:c3:2d:71:
f5:0c:24:05:3e:af:5e:c4:28:b1:52:44:c1:57:d9:bf:20:c6:
fc:b7:bb:82:e8:1f:ff:20:83:4e:83:af:56:08:18:4e:b9:b1:
32:94:4e:7d:b5:2d:a3:40:ce:a3:d4:29:85:9f:d0:d0:9a:ca:
44:b4:28:bd:c4:e4:09:b6:ae:f1:21:be:96:1a:bc:6e:ce:8b:
c7:9c:2a:54:12:81:21:09:ca:37:36:38:23:a6:4c:63:3b:82:
aa:51:b6:19:6d:dd:57:84:f7:a6:09:19:41:5e:72:c6:36:f9:
69:10:00:21:9a:33:5a:97:2f:d3:89:dc:72:5b:ee:39:98:70:
0c:8e:3b:f7:24:58:4d:45:43:55:e8:74:63:55:bb:bb:87:fb:
42:e3:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:37 2025 by rpki-client