Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32322d3234203d3e20313531383137.roa
File: 3130332e3230382e38342e302f32322d3234203d3e20313531383137.roa (raw, json)
Hash identifier: X9Yn86ezedhaTWr3qMLljPXX9irYP65hYuiK3g/wz50=
Subject key identifier: B1:1A:5B:9A:50:54:59:20:0B:C5:3E:87:65:AB:95:CA:33:1E:55:27
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 1559951A9F852C141C1F9E591EE4FF809A39059D
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32322d3234203d3e20313531383137.roa
Signing time: Sat 03 May 2025 14:54:13 +0000
ROA not before: Sat 03 May 2025 14:49:13 +0000
ROA not after: Sat 02 May 2026 14:54:13 +0000
asID: 151817
IP address blocks: 103.208.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 May 2025 02:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:59:95:1a:9f:85:2c:14:1c:1f:9e:59:1e:e4:ff:80:9a:39:05:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000, serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Validity
Not Before: May 3 14:49:13 2025 GMT
Not After : May 2 14:54:13 2026 GMT
Subject: CN=B11A5B9A505459200BC53E8765AB95CA331E5527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:36:73:9d:45:be:a8:ab:83:23:5a:cd:92:
0a:22:61:15:5a:26:87:03:f9:f4:82:80:40:b8:c0:
10:d8:61:e9:d1:4a:e0:80:67:8c:94:56:ba:00:11:
fd:0a:7d:17:73:c3:1e:32:b6:35:de:49:7f:98:aa:
ce:47:2a:ad:00:71:a0:2f:7a:dc:ec:72:7a:a4:a2:
2b:e2:79:b3:0f:22:a8:fa:ca:a5:a3:08:91:8f:c0:
00:19:7e:b3:b8:eb:07:9d:cd:e2:65:b4:d4:46:4f:
d5:00:5b:11:06:01:62:e5:98:0e:84:c2:80:d2:3c:
86:94:88:d4:c5:18:49:f7:94:25:05:32:46:f2:78:
89:ad:eb:bb:b9:82:61:18:99:dd:f0:6e:c0:df:97:
c4:83:b7:ee:67:cc:06:30:e4:1b:40:7d:6f:2a:88:
63:94:87:2c:43:10:6e:67:e6:a2:65:11:69:0e:16:
43:14:42:80:c5:4a:d4:66:cb:ac:9e:09:46:94:c4:
55:dc:0e:06:54:eb:ab:9a:69:d7:7e:d2:b3:4a:47:
35:fc:77:a9:78:f9:e3:39:0d:8f:de:c5:ab:e0:51:
86:a1:ec:04:bc:da:fb:34:1b:9b:1d:75:10:c6:db:
2e:e8:90:eb:fd:eb:cf:b5:a4:e8:3d:b7:79:4c:ef:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1A:5B:9A:50:54:59:20:0B:C5:3E:87:65:AB:95:CA:33:1E:55:27
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32322d3234203d3e20313531383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.208.84.0/22
Signature Algorithm: sha256WithRSAEncryption
73:9a:c6:f2:1f:13:f3:0d:b2:c9:62:ef:21:ad:28:13:5e:50:
29:81:5f:7a:60:7b:b1:b2:62:c2:9a:5c:1a:42:c8:fc:0c:e2:
d5:6f:ba:42:6d:8c:76:7a:3d:1e:dd:08:5a:0f:b8:d8:1b:f4:
a9:e7:47:56:54:7e:74:f6:35:9b:21:d8:0a:89:b9:25:b1:ac:
39:7f:62:04:b5:a4:d8:77:7c:6f:15:26:e4:a2:0c:41:fc:33:
53:6d:56:fd:19:a1:92:5f:75:ed:0c:1c:e6:e6:6e:e2:5f:85:
1c:72:7e:1f:b5:5a:02:cd:6d:5c:5b:6b:2b:fe:03:b8:86:f2:
1e:b2:db:ce:ca:03:59:8a:2d:b9:0d:8c:82:8c:3a:cf:e8:8f:
c1:2b:6d:b2:e4:72:aa:10:d0:43:5a:a5:9f:cc:38:d1:df:e9:
cc:d0:39:ac:1b:2e:86:fe:43:81:6a:36:07:01:06:d7:6b:2c:
57:fc:4b:2c:e5:ca:95:91:b4:bb:c5:af:ac:b4:e8:31:e8:88:
20:1c:e7:62:41:24:81:68:23:68:8f:84:ef:92:fe:9d:79:ac:
a9:85:99:4c:01:51:b9:32:41:d0:c2:bc:3c:75:3e:72:08:30:
29:a7:56:8e:5c:29:b4:e5:39:00:75:c5:61:06:63:c1:4e:83:
85:a9:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:27:53 2025 by rpki-client