Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397441.roa
File: AS397441.roa (raw, json)
Hash identifier: F7aVrCvzOvmuEGXEiH62ctpJ8tPtvbh/y5fpZOhCOsA=
Subject key identifier: EC:B3:F6:71:F9:A2:A4:06:FE:F0:FF:B5:00:C7:A3:16:25:D5:D6:F0
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 052AEE640775D09D84F0A2FB6C50A9C47AE5E808
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397441.roa
Signing time: Thu 05 Dec 2024 23:46:50 +0000
ROA not before: Thu 05 Dec 2024 23:41:50 +0000
ROA not after: Thu 04 Dec 2025 23:46:50 +0000
asID: 397441
IP address blocks: 198.12.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Dec 2024 11:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:2a:ee:64:07:75:d0:9d:84:f0:a2:fb:6c:50:a9:c4:7a:e5:e8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Dec 5 23:41:50 2024 GMT
Not After : Dec 4 23:46:50 2025 GMT
Subject: CN=ECB3F671F9A2A406FEF0FFB500C7A31625D5D6F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:c7:c4:5f:be:12:ea:f4:58:12:45:ad:77:
df:49:11:94:91:06:a8:3c:f5:08:8e:a2:34:35:4e:
71:43:9b:73:23:e1:c0:c6:cd:8f:78:32:53:73:18:
95:10:08:50:ce:0a:0e:9b:10:40:f7:85:78:05:ee:
f2:5e:33:0e:a3:ca:b4:79:3c:92:34:96:7e:e4:88:
58:2e:28:32:cb:f3:5f:ab:ac:f6:1a:f5:d1:94:46:
94:41:95:ff:ac:ac:7e:c8:9e:5f:22:04:de:13:ba:
97:da:71:bd:41:c4:35:b6:07:48:6d:73:9d:a4:19:
4b:79:84:54:30:c2:fb:40:c3:72:2d:6c:54:11:80:
59:32:b2:4b:99:f3:4c:31:a4:cb:78:8c:cc:09:06:
21:30:28:cb:5a:b2:ac:fc:04:72:0c:f0:d3:7a:67:
ac:86:1c:d9:fa:e5:d1:a6:0d:c8:58:38:c9:91:b6:
55:89:11:82:0a:bc:94:eb:20:09:c3:18:9d:3d:10:
64:79:f9:72:50:43:30:78:0f:77:d1:9b:31:81:78:
5e:7d:a1:77:33:42:56:fb:80:e8:38:59:aa:ec:45:
b1:c8:38:57:74:18:f3:57:b2:79:c1:bc:bd:c1:73:
a1:3d:7c:9a:d5:d1:56:a9:c8:ae:44:64:27:fe:b2:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B3:F6:71:F9:A2:A4:06:FE:F0:FF:B5:00:C7:A3:16:25:D5:D6:F0
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397441.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.12.100.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c4:c6:1f:11:da:bc:52:bd:9e:56:af:2e:4a:67:8c:23:51:
f0:f1:3e:4d:76:83:13:fc:ad:2d:c0:92:41:ed:f9:74:22:3d:
66:91:3d:b9:da:82:21:ef:e3:a5:e9:54:99:1f:35:b6:c5:84:
77:ae:68:41:4c:0b:f8:42:1d:c6:7d:03:0c:31:14:d7:ea:3f:
91:f1:3f:54:d3:57:b6:ed:70:ff:9f:96:8a:16:e9:5f:c7:a9:
be:57:42:67:4a:bf:06:52:cb:c2:7c:01:dc:62:29:e2:ff:0c:
04:94:fb:2b:66:95:17:53:22:66:f0:ec:a5:fb:78:b7:2d:e2:
f7:d8:fd:ce:47:9e:cc:2e:04:35:1c:44:8b:e9:71:f6:4e:5a:
9e:e1:f5:c4:a1:fe:dc:dd:49:ca:49:24:57:1e:88:50:5e:b2:
9e:02:da:77:3c:46:5f:e7:78:06:6f:b6:16:04:d9:9c:46:9c:
43:e3:a6:b9:48:8d:98:b5:75:e8:f3:ad:7c:78:aa:2b:07:92:
95:0d:c8:71:4b:d1:a3:8a:8d:72:ec:25:e0:bd:19:02:7b:94:
6d:86:c6:43:61:7a:28:dc:5d:af:e6:37:3e:96:72:d7:7d:31:
27:19:b7:eb:7a:ad:d8:30:c8:a8:df:da:78:de:a0:b9:21:be:
03:81:41:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:23 2025 by rpki-client