Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20313533313930.roa
File: 3132382e3235342e3230362e302f32342d3234203d3e20313533313930.roa (raw, json)
Hash identifier: 3gJjXhLxvWBmdcQ05kqBfxh10l2XDaDEBk6yyMQ9yZU=
Subject key identifier: 80:74:4C:88:ED:DB:D0:56:3C:51:BC:CD:BA:9C:93:B2:40:E8:52:D6
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 6E51F455E5A8748303107E19B851E1C5DCB73CEF
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20313533313930.roa
Signing time: Sat 10 Aug 2024 17:33:19 +0000
ROA not before: Sat 10 Aug 2024 17:28:19 +0000
ROA not after: Sat 09 Aug 2025 17:33:19 +0000
asID: 153190
IP address blocks: 128.254.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 22:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:51:f4:55:e5:a8:74:83:03:10:7e:19:b8:51:e1:c5:dc:b7:3c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Aug 10 17:28:19 2024 GMT
Not After : Aug 9 17:33:19 2025 GMT
Subject: CN=80744C88EDDBD0563C51BCCDBA9C93B240E852D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:2e:58:da:4b:0b:d1:cb:4f:7c:30:21:61:
92:6e:c8:49:ca:9f:36:2d:3d:4f:b9:e4:5b:8d:50:
a2:2b:db:b6:1b:a3:a4:0a:37:e1:ec:70:6c:d3:a8:
75:7a:83:f7:b0:59:0b:db:66:6d:6c:bc:fc:91:9f:
6e:ef:c7:28:93:d6:a7:5c:1b:a6:a7:a6:3d:74:2d:
31:44:ad:85:7a:81:d2:f9:fd:0f:87:1e:96:58:26:
70:af:bd:d5:ab:b4:ed:a9:8b:37:a9:9e:c6:1a:82:
48:6c:bd:b5:7b:30:7b:0c:48:86:ca:72:f8:97:31:
44:95:c1:11:8d:73:13:c7:cc:55:55:08:f4:ef:a7:
c0:d9:de:d4:42:88:30:66:74:b7:20:05:b8:2f:da:
67:68:91:e7:7e:03:0a:61:c7:21:75:92:a7:ba:48:
3d:8a:3b:76:e7:60:46:d3:ef:89:5a:5f:ca:93:c9:
5d:fc:27:32:08:ec:0b:85:93:56:f3:aa:d4:46:91:
2a:6b:99:05:4e:bd:82:5a:89:df:52:df:12:68:c3:
e0:ef:63:a1:45:f6:b7:6e:83:93:72:a7:05:3c:42:
58:67:1b:57:72:03:94:9f:fd:59:be:33:56:c0:5a:
c1:86:1b:cc:5c:46:11:d6:6e:9b:6c:89:ad:af:81:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:74:4C:88:ED:DB:D0:56:3C:51:BC:CD:BA:9C:93:B2:40:E8:52:D6
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20313533313930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.254.206.0/24
Signature Algorithm: sha256WithRSAEncryption
81:90:57:df:87:2e:b1:b0:07:3b:e1:41:35:b7:47:6f:90:b9:
ad:a6:9f:3c:91:34:1d:ce:b5:20:56:15:c2:42:9f:3a:10:fe:
b2:bb:2d:fd:91:e1:7b:60:58:f7:ff:3e:d0:63:8b:1f:b2:bd:
08:ca:56:e3:98:09:96:47:e6:b5:17:c9:f1:55:f4:e2:f9:55:
85:38:b5:4b:0a:94:0d:73:b6:62:26:d7:8e:bc:95:13:07:48:
ae:36:70:87:ca:5f:a2:ae:26:ab:53:65:eb:03:7a:70:f6:e7:
96:ea:b5:dd:86:dc:da:05:7c:61:eb:73:37:e1:e5:58:8c:e3:
b6:5b:aa:01:87:af:9a:a0:a9:54:81:a9:ae:90:2b:73:c3:24:
28:0d:9d:80:8f:93:41:7c:4e:82:14:bf:8a:9f:65:20:54:26:
64:68:ab:b4:40:87:b1:a5:d0:b1:0b:de:65:aa:e5:e5:5f:bc:
99:75:bf:de:48:6d:8b:11:8c:94:8b:17:b4:a3:e4:0d:e9:00:
7e:3e:dd:f1:2b:2e:14:8d:12:05:29:ae:a5:30:d7:3a:fc:58:
b1:0a:8f:34:c2:78:81:06:ac:64:57:e2:af:e1:97:2c:45:f8:
75:54:5c:63:f9:e5:a0:66:9e:5b:48:ae:d8:f5:7c:f7:8b:1c:
b1:5c:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:48 2025 by rpki-client