Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e2030.roa
File: 3139322e3230392e36332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: a8qtIc32R132nirMjfvJOslwGVzQrGSfr8tsEBaEhOA=
Subject key identifier: 5A:F8:E7:AA:B1:58:68:73:E7:62:F5:D9:30:63:3D:9E:3E:53:D0:F3
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 0FA33FB6A180C886CC788EDCF75F6C78C21BEE58
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e2030.roa
Signing time: Sat 02 Nov 2024 06:03:32 +0000
ROA not before: Sat 02 Nov 2024 05:58:32 +0000
ROA not after: Sat 01 Nov 2025 06:03:32 +0000
asID: 0
IP address blocks: 192.209.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Nov 2024 19:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a3:3f:b6:a1:80:c8:86:cc:78:8e:dc:f7:5f:6c:78:c2:1b:ee:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Nov 2 05:58:32 2024 GMT
Not After : Nov 1 06:03:32 2025 GMT
Subject: CN=5AF8E7AAB1586873E762F5D930633D9E3E53D0F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:27:a1:b3:6f:dc:25:e2:e8:7d:d2:d2:b3:
5b:c4:c0:66:5e:68:43:21:f8:8d:a4:6a:f0:8e:a3:
fe:02:d7:71:79:32:a9:67:bd:8b:0b:ee:d8:4a:a3:
bf:55:39:de:7a:f5:3e:41:94:33:bd:5a:89:91:9b:
c5:b4:d2:b3:07:82:b7:c7:2b:f7:c6:df:7d:9d:79:
40:ce:05:f7:03:ce:ac:58:04:f6:24:67:0f:00:07:
a2:f2:d5:6f:a6:97:ef:f4:d2:43:04:57:50:46:d6:
ac:1c:b3:f0:eb:02:8d:7c:e0:a1:7a:4e:07:20:1b:
ef:25:13:59:c2:31:40:40:de:40:4f:4a:36:97:1e:
a7:5b:f7:cf:67:00:17:4c:09:c4:51:61:1d:ae:00:
51:8f:02:65:52:9e:0e:7e:a1:c7:33:9d:81:84:fe:
28:a6:f8:99:9e:bf:55:86:2e:6d:00:28:75:a9:cb:
d8:3a:29:81:63:40:46:a7:b7:da:d2:eb:f4:72:cf:
60:16:6f:56:d2:43:93:04:8e:cf:a2:78:ac:c9:94:
b2:32:af:f5:51:a8:a1:43:29:86:f8:19:50:6b:ab:
4d:bd:43:bd:f9:c0:78:d7:0c:7e:82:1c:5f:ac:61:
e6:6f:1e:2b:08:17:c0:93:72:ba:6f:50:b2:b9:66:
86:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F8:E7:AA:B1:58:68:73:E7:62:F5:D9:30:63:3D:9E:3E:53:D0:F3
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.209.63.0/24
Signature Algorithm: sha256WithRSAEncryption
21:84:01:06:5b:ed:9b:6b:f2:18:97:43:47:39:58:08:78:74:
c0:00:8a:5e:b2:52:ac:74:2b:80:a9:a3:06:ac:2e:0f:d4:5d:
0c:95:50:3b:f0:6e:c8:f8:73:aa:4b:0b:a5:a1:c4:1a:a0:ec:
c5:de:56:79:1e:35:68:9b:fd:02:e5:92:18:8c:3f:8c:d9:fe:
91:b1:f1:79:2b:1d:97:95:aa:41:2e:2a:ad:9a:e7:43:53:aa:
bb:4b:57:fe:1c:b0:6d:14:fe:40:4d:8e:21:94:b8:54:25:25:
16:74:92:6a:d8:06:16:83:25:30:8e:fe:c3:d4:3b:44:c4:ec:
2e:6e:f7:7b:00:7e:77:d4:d1:81:d4:ce:65:13:c6:64:45:ad:
b7:95:4d:77:03:8f:1b:77:02:4f:a6:24:50:a5:73:a5:24:ed:
12:88:8a:74:a6:02:15:9b:c8:e9:30:fe:5b:01:17:01:2d:b5:
c5:cf:cb:f5:eb:8b:09:3c:28:dc:0b:38:29:b2:cb:1c:9d:45:
64:0a:e3:cc:32:c7:38:1a:e9:ff:7d:3d:4d:d4:0f:20:75:96:
23:db:ab:d5:7e:53:e8:8d:fa:6b:7c:bf:0d:79:cf:62:59:c8:
7c:c8:61:4a:2b:77:b3:9a:0c:ed:55:8e:39:7f:44:f0:ca:e2:
98:a8:3c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:59 2025 by rpki-client