Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e2036303739.roa
File: 3132382e3235342e3230352e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: gLBWLDGsQlXVWGD0eTWcelyVgfv2bQlYNH82jYHzdKI=
Subject key identifier: DE:4D:AE:37:09:88:B1:83:84:5A:BE:4E:6D:90:02:C4:80:55:C2:E7
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 10AEC4702A0C113CB2C7EF7F2E3B9593D28D6012
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e2036303739.roa
Signing time: Mon 08 Jul 2024 23:24:15 +0000
ROA not before: Mon 08 Jul 2024 23:19:15 +0000
ROA not after: Mon 07 Jul 2025 23:24:15 +0000
asID: 6079
IP address blocks: 128.254.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 19:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ae:c4:70:2a:0c:11:3c:b2:c7:ef:7f:2e:3b:95:93:d2:8d:60:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Jul 8 23:19:15 2024 GMT
Not After : Jul 7 23:24:15 2025 GMT
Subject: CN=DE4DAE370988B183845ABE4E6D9002C48055C2E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ff:e1:56:3c:98:b9:bf:a3:7c:4b:25:17:1d:
4e:e4:b0:fc:6c:55:d4:da:20:56:bc:cf:ec:c4:e2:
71:17:51:31:e7:4c:21:dc:5d:2e:93:7a:fd:d9:48:
f2:90:86:2d:49:fc:0e:34:03:cf:fa:01:1c:01:f3:
a4:ab:22:6d:f2:76:1f:7f:33:e9:24:38:8d:92:66:
0c:db:66:60:36:01:e2:0f:14:64:6d:d5:41:76:ae:
2b:de:1a:25:88:72:23:6f:0e:37:f8:e0:0a:c4:74:
4c:6d:b2:7d:46:0b:0e:09:ba:f1:ec:39:5e:0a:e0:
41:92:87:0c:8a:36:79:88:51:f6:75:b9:1e:18:a9:
8f:f5:c7:15:b5:30:5e:2d:d0:c1:d7:ec:53:5c:fa:
f2:c6:14:8a:47:f4:4e:a6:e2:1e:0f:61:6b:30:a3:
0a:73:ea:87:76:11:f6:da:f4:7b:23:f7:55:80:94:
61:d7:37:3a:80:c9:7a:48:8e:ec:57:a6:7f:92:aa:
fe:1d:a6:53:7f:ee:0d:c4:ff:21:9a:d5:38:34:b3:
ca:10:6e:7a:99:d6:b3:10:b1:b8:d6:2b:67:fe:c5:
da:89:60:3f:3a:15:0f:b2:16:30:41:b6:7c:ab:fd:
13:64:df:c4:e6:a1:07:fa:c3:ca:6e:f4:31:1e:6e:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4D:AE:37:09:88:B1:83:84:5A:BE:4E:6D:90:02:C4:80:55:C2:E7
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.254.205.0/24
Signature Algorithm: sha256WithRSAEncryption
26:5d:76:a4:bf:47:1d:9b:78:c4:39:bb:1e:62:c5:03:9c:9f:
3e:67:2d:84:0a:73:13:cc:cb:d1:70:0b:b9:49:07:c6:eb:70:
42:58:ae:ef:9e:16:da:d1:39:bf:dd:e8:e8:9e:f4:64:9f:f6:
05:e3:0a:e5:16:3b:ad:4b:ac:e1:6f:4f:dc:6f:7c:41:a8:65:
e9:4f:df:65:cf:a3:af:76:60:2e:8a:b6:7e:71:96:19:cd:92:
1a:53:3d:23:0a:05:a5:94:09:2f:ec:85:a3:f9:c6:3e:b9:57:
a0:cf:69:97:06:40:cc:f1:e8:0c:4f:0c:ba:d4:7a:fd:78:3c:
63:05:53:76:d1:bc:37:3a:5d:71:dd:32:53:a7:7e:17:9f:8e:
15:c3:af:1f:44:d8:87:a4:c6:be:96:9e:72:d6:de:c9:a3:a3:
e1:23:98:e2:8c:53:9f:cf:85:1a:d3:16:c6:46:77:ae:8a:33:
10:ee:d7:75:2d:f3:7c:3b:e3:f4:e9:e2:69:65:48:02:68:4f:
b4:18:63:3d:65:3c:a9:02:f1:e9:a8:86:46:fd:d6:eb:16:7c:
ec:09:ff:b2:0e:49:02:f4:99:db:a5:38:3d:b4:f8:a7:bb:82:
d5:98:e0:86:80:c3:f0:e6:b7:ac:eb:18:17:17:30:f8:7b:1d:
c4:bb:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:38 2025 by rpki-client