Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20383334.roa
File: 3139332e38342e3131312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: otDvO+JbDotw+vVUsEjk8hFVtoSHfIDshALB5MzzZdM=
Subject key identifier: 76:34:B4:A6:10:3E:4F:CC:69:EB:09:7D:AA:F0:B2:B2:52:C8:8C:C0
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 1AB530E6CC571D3D54060911713B2DD59732C916
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20383334.roa
Signing time: Tue 26 Nov 2024 11:13:09 +0000
ROA not before: Tue 26 Nov 2024 11:08:09 +0000
ROA not after: Tue 25 Nov 2025 11:13:09 +0000
asID: 834
IP address blocks: 193.84.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Nov 2024 08:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b5:30:e6:cc:57:1d:3d:54:06:09:11:71:3b:2d:d5:97:32:c9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Nov 26 11:08:09 2024 GMT
Not After : Nov 25 11:13:09 2025 GMT
Subject: CN=7634B4A6103E4FCC69EB097DAAF0B2B252C88CC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:fe:1a:f1:4e:98:6f:6b:cd:68:15:c3:87:
b8:d2:07:cb:46:5c:7e:10:6b:99:8c:44:c2:47:cb:
99:d2:ef:2b:79:4a:30:20:2c:0f:1d:01:28:bb:c3:
86:d4:6c:93:53:14:bc:cb:9d:8c:af:57:81:a0:21:
4d:e9:39:a7:9f:01:37:ab:35:50:cf:0d:bc:b3:18:
6f:c2:b8:66:64:4b:35:a7:92:71:f1:ab:ad:f7:12:
eb:cf:eb:7a:8d:cc:f9:16:a7:04:5f:2b:7d:fa:1e:
e8:8f:0b:02:b5:ef:e7:47:b5:df:4a:e5:7d:30:39:
73:9b:46:82:38:1a:12:bd:aa:2a:7a:96:a4:de:84:
c9:fa:37:f3:4b:f3:39:84:5e:2a:19:6d:58:27:7f:
2a:a2:c7:ab:1f:25:17:17:5d:3f:ec:ba:44:1e:2c:
94:42:46:c8:b5:86:d2:f9:93:59:7b:0a:48:84:57:
4f:c8:88:24:bb:00:20:d7:92:55:16:0d:44:9a:b1:
16:d1:b6:de:64:8f:94:ae:95:5c:49:73:17:f7:5e:
61:0d:a3:31:e5:1a:b7:a7:73:28:88:f7:f4:4a:aa:
6d:48:62:88:48:44:6d:38:78:8b:a9:69:ce:26:c2:
11:fb:19:1d:46:a4:2b:50:d5:56:24:b5:51:a2:46:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:34:B4:A6:10:3E:4F:CC:69:EB:09:7D:AA:F0:B2:B2:52:C8:8C:C0
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:e8:e6:46:63:dc:d9:d6:49:1d:b6:9b:45:21:00:e1:fd:3f:
71:66:65:c8:0a:d5:fb:58:e8:4b:a7:90:18:3c:f2:02:2b:21:
ad:ba:02:7c:9c:56:31:84:5e:4f:68:c6:f2:4d:da:a3:1a:c6:
26:fe:34:0b:33:6e:f9:2d:e2:56:90:e1:e2:5e:49:83:b5:50:
90:c6:a3:aa:f4:b9:10:1d:0b:eb:d2:b0:73:6e:d3:1a:72:5d:
c9:ec:0e:62:8f:ee:2c:28:a9:78:62:52:a8:16:7d:8a:19:fd:
8f:b7:f2:26:79:67:c0:9c:66:df:7e:62:99:e1:9a:7e:1c:2d:
35:30:87:c1:0f:a7:74:57:94:8e:3e:b1:d2:7c:55:0d:4a:02:
dd:ec:27:b8:3d:22:72:c1:ff:f3:78:38:ee:c7:99:3e:7a:ab:
bb:bc:01:41:30:0c:f7:c9:7e:0b:da:82:ba:5f:e6:c3:24:36:
bc:09:fa:39:88:b0:b8:ed:e1:a2:80:72:b0:65:95:d3:2f:78:
bb:af:97:32:10:60:97:8c:75:32:0a:31:c1:ab:2e:ea:58:26:
65:ad:25:4c:48:15:60:f0:b2:52:08:c8:1f:a4:00:29:1c:78:
57:96:6e:60:3b:b3:72:88:6a:0a:7d:ce:f6:34:ab:4a:b6:0b:
13:69:a6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:38 2025 by rpki-client