![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32322d3234203d3e203631313338.roa
File: 36342e34392e31322e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: gdOvvlmVlvTEqQD2DSkWzAoO0Jv5w3gavAtXpESsYU8=
Subject key identifier: F2:B4:73:EB:51:9C:23:3F:77:D6:21:28:AC:90:11:F5:30:23:89:88
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 32CB77E969028CD289351957283C7EB744545A56
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32322d3234203d3e203631313338.roa
Signing time: Wed 26 Jun 2024 20:35:44 +0000
ROA not before: Wed 26 Jun 2024 20:30:44 +0000
ROA not after: Wed 25 Jun 2025 20:35:44 +0000
asID: 61138
IP address blocks: 64.49.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 03:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:cb:77:e9:69:02:8c:d2:89:35:19:57:28:3c:7e:b7:44:54:5a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Jun 26 20:30:44 2024 GMT
Not After : Jun 25 20:35:44 2025 GMT
Subject: CN=F2B473EB519C233F77D62128AC9011F530238988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:0f:1f:9c:a3:1a:e9:28:1c:5a:51:89:af:
ee:be:a7:ea:d7:3b:e2:ac:05:cb:7c:6e:4b:50:21:
88:80:ac:6d:50:d0:d9:21:cd:2a:e5:05:9f:7e:2a:
9d:d7:3a:57:54:ae:f7:e9:5c:1c:ef:62:a5:14:a2:
67:51:3e:9d:cc:27:fc:89:1d:f3:f1:e7:07:1d:16:
c5:eb:f8:22:94:f5:15:04:43:e5:3d:1f:b7:1b:61:
7d:79:60:bc:78:43:12:43:73:b5:1b:9e:fd:46:e4:
1f:e8:e8:81:9e:9e:02:2d:16:29:b7:dc:f0:26:1c:
91:10:96:a7:43:9e:1d:68:c5:16:de:bf:61:86:00:
bc:42:5c:01:49:73:e8:43:83:6a:54:58:c6:97:16:
9f:bd:74:5d:af:60:37:93:43:38:1a:28:3e:d6:87:
29:99:b9:12:66:87:04:ec:68:cc:67:32:02:91:ae:
13:a8:a4:6a:e2:4f:fd:63:17:4a:c0:74:9c:36:23:
30:6a:0d:02:94:64:13:ac:7e:17:6d:e8:5c:c1:7e:
82:88:27:56:76:a0:8d:f9:d2:fc:f4:c7:75:f1:c2:
fe:a2:10:df:26:11:31:4d:60:43:16:10:77:31:cc:
f7:7d:4f:cf:c0:38:d7:56:32:66:bf:a3:78:8d:fa:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B4:73:EB:51:9C:23:3F:77:D6:21:28:AC:90:11:F5:30:23:89:88
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.49.12.0/22
Signature Algorithm: sha256WithRSAEncryption
00:0d:62:b0:ff:e0:1b:48:77:69:bc:52:35:ba:e2:96:fd:bb:
a8:d5:a1:aa:94:37:94:11:0e:2a:2b:b1:01:e8:f7:ca:dd:bd:
56:19:d1:a0:cc:90:8e:b8:b2:b7:4d:2c:a5:90:8f:6c:29:99:
18:28:d7:e5:b9:60:16:29:d2:3a:03:ac:ef:68:52:42:25:b0:
ec:e1:07:a8:6c:06:47:3d:db:45:ec:e7:93:aa:b9:c2:e4:a2:
b6:56:96:90:14:ef:4b:0b:ba:ad:56:3d:ba:58:ba:24:42:fa:
e9:2f:7b:ba:b9:e3:4f:bf:d5:ea:40:d7:7d:cd:12:86:17:67:
83:64:c0:ae:09:15:a7:a4:6c:51:c9:69:9b:ba:c3:b5:08:fe:
8e:86:41:7d:5c:49:b7:ef:5a:68:dd:ab:19:2b:62:16:d4:01:
1f:b6:99:57:6b:ac:7d:c1:63:de:77:c0:92:72:7e:e8:74:d5:
58:84:b4:e2:2d:9f:13:d3:75:04:73:23:74:ae:20:63:ac:2a:
f6:71:c2:99:dd:d9:62:97:75:2e:b1:d4:85:1a:a3:0b:09:ba:
e8:de:4f:62:19:39:ac:23:aa:d6:da:15:57:7b:ff:c6:6b:25:
f8:e4:e9:f8:70:83:f5:ca:5b:17:e5:09:49:0b:a6:3f:48:1d:
4d:1e:1a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 06:06:32 2024 by rpki-client on console-fra.rpki-client.org