Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20323034313336.roa
File: 3139322e3230392e36332e302f32342d3234203d3e20323034313336.roa (raw, json)
Hash identifier: ErK9HTopdD1+gZunLmdgoV7FtYHn4FVNny7hpK/2EkU=
Subject key identifier: 98:4A:03:6B:CF:DF:06:15:2F:8B:08:B0:C6:F0:AD:6C:17:10:84:9F
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 72BC317B6DC268B669B8A57E6D211980DC783F2C
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20323034313336.roa
Signing time: Mon 02 Dec 2024 04:03:44 +0000
ROA not before: Mon 02 Dec 2024 03:58:44 +0000
ROA not after: Mon 01 Dec 2025 04:03:44 +0000
asID: 204136
IP address blocks: 192.209.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 00:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:bc:31:7b:6d:c2:68:b6:69:b8:a5:7e:6d:21:19:80:dc:78:3f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Dec 2 03:58:44 2024 GMT
Not After : Dec 1 04:03:44 2025 GMT
Subject: CN=984A036BCFDF06152F8B08B0C6F0AD6C1710849F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:af:5b:a7:7e:07:7d:dc:02:43:b3:d9:57:
0f:df:41:b2:cd:ee:4b:bd:a6:35:21:fd:40:de:dd:
3a:57:a0:ad:25:80:97:c6:83:52:3c:77:7f:f1:63:
fd:98:93:de:12:04:45:58:87:41:c0:e7:9d:69:c0:
fb:a6:47:b0:4f:71:e3:5e:d7:e1:18:12:6b:35:29:
b7:cc:5b:24:e6:e4:cb:31:4a:da:ef:ef:7a:7a:65:
14:87:ed:64:1c:63:8e:10:41:ab:90:16:65:66:5e:
d1:3a:c9:75:5e:d3:55:cb:2b:a3:d7:6c:8f:f3:38:
56:02:37:f4:70:4f:ea:5f:90:3f:47:a9:db:e7:14:
e8:9e:11:2e:ed:8c:55:13:4b:08:5c:59:e5:db:d1:
2b:29:fc:05:bb:3e:43:f8:41:06:4a:7c:cb:07:54:
c3:80:1d:f3:49:5d:5c:00:07:b5:2b:44:3a:31:4b:
c5:b2:4b:c2:f4:da:ee:54:45:2b:0e:f1:95:b4:e1:
2d:19:78:bb:bb:43:22:2d:c9:ac:09:84:3d:12:b1:
4a:d2:b1:76:ef:eb:62:38:3a:e1:65:28:9c:3a:e8:
6d:86:4d:c7:9f:87:cc:0f:4d:22:e1:6d:36:7f:55:
0f:dd:7a:3e:19:2d:eb:6f:25:31:19:40:76:80:4b:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4A:03:6B:CF:DF:06:15:2F:8B:08:B0:C6:F0:AD:6C:17:10:84:9F
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20323034313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.209.63.0/24
Signature Algorithm: sha256WithRSAEncryption
72:55:55:f5:d8:44:06:c7:63:d2:14:f3:57:d3:d6:6f:09:19:
e5:c2:78:d7:34:89:07:b9:63:05:44:33:f4:fd:df:7c:56:c4:
8a:7a:11:46:69:d0:25:82:28:6f:6c:2f:64:d8:4a:ba:e2:a1:
dc:c7:4b:95:bd:9c:c0:88:01:f8:87:8f:98:3d:8a:44:7a:e8:
37:98:b2:19:6c:57:16:be:f0:e7:8c:90:04:34:52:c0:38:73:
a8:51:6f:66:65:6f:8f:34:a7:54:db:bc:0d:56:eb:b9:12:15:
ae:6e:e5:99:15:d7:29:82:47:38:1d:fc:44:0b:b0:51:64:49:
eb:68:57:47:5e:61:7c:4a:0b:da:51:7b:de:f2:78:3b:5e:a4:
5d:a4:75:30:85:ca:e7:26:9d:10:f8:0c:a5:84:4d:dc:2c:99:
c0:41:42:0f:7d:a0:a1:5b:dc:5f:22:7d:69:f5:7e:34:07:8a:
ba:d6:5a:60:58:18:19:c4:7c:61:d0:e3:9c:36:ac:a8:bf:e2:
a6:ba:ab:70:e8:69:20:12:fd:13:ba:7b:25:17:de:08:7b:e0:
e8:ae:a1:94:9a:43:a9:87:d0:26:1c:71:9c:65:ae:c7:b9:d9:
9e:76:13:0c:07:a9:a8:70:09:ce:c3:a4:0d:31:0a:d0:fa:30:
42:0b:35:77
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUcrwxe23CaLZpuKV+bSEZgNx4PywwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjQxMjAyMDM1ODQ0WhcNMjUxMjAxMDQwMzQ0
WjAzMTEwLwYDVQQDEyg5ODRBMDM2QkNGREYwNjE1MkY4QjA4QjBDNkYwQUQ2QzE3
MTA4NDlGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJevW6d+B33c
AkOz2VcP30Gyze5LvaY1If1A3t06V6CtJYCXxoNSPHd/8WP9mJPeEgRFWIdBwOed
acD7pkewT3HjXtfhGBJrNSm3zFsk5uTLMUra7+96emUUh+1kHGOOEEGrkBZlZl7R
Osl1XtNVyyuj12yP8zhWAjf0cE/qX5A/R6nb5xTonhEu7YxVE0sIXFnl29ErKfwF
uz5D+EEGSnzLB1TDgB3zSV1cAAe1K0Q6MUvFskvC9NruVEUrDvGVtOEtGXi7u0Mi
LcmsCYQ9ErFK0rF27+tiODrhZSicOuhthk3Hn4fMD00i4W02f1UP3Xo+GS3rbyUx
GUB2gEvUEwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJhKA2vP3wYVL4sIsMbwrWwX
EISfMB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMxMzkzMjJlMzIzMDM5MmUzNjMzMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMDM0MzEzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNE/MA0GCSqGSIb3DQEB
CwUAA4IBAQByVVX12EQGx2PSFPNX09ZvCRnlwnjXNIkHuWMFRDP0/d98VsSKehFG
adAlgihvbC9k2Eq64qHcx0uVvZzAiAH4h4+YPYpEeug3mLIZbFcWvvDnjJAENFLA
OHOoUW9mZW+PNKdU27wNVuu5EhWubuWZFdcpgkc4HfxEC7BRZEnraFdHXmF8Sgva
UXve8ng7XqRdpHUwhcrnJp0Q+AylhE3cLJnAQUIPfaChW9xfIn1p9X40B4q61lpg
WBgZxHxh0OOcNqyov+Kmuqtw6GkgEv0TunslF94Ie+DorqGUmkOph9AmHHGcZa7H
udmedhMMB6mocAnOw6QNMQrQ+jBCCzV3
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:26 2025 by rpki-client