Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e2030.roa
File: 3130332e3234342e3232362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: YeYx5DxBxbI5+dBqOvCUMz+A9i6WP1k7oxdayOMOdOU=
Subject key identifier: AD:BB:37:94:7A:C7:7F:E2:E9:AC:01:E4:5F:E4:9D:E1:0F:92:50:2F
Certificate issuer: /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial: 61CC2BA5B28D7FA8D3B471E63B450E0AAFC181C5
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e2030.roa
Signing time: Fri 31 Jan 2025 04:21:49 +0000
ROA not before: Fri 31 Jan 2025 04:16:49 +0000
ROA not after: Fri 30 Jan 2026 04:21:49 +0000
asID: 0
IP address blocks: 103.244.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 20:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:cc:2b:a5:b2:8d:7f:a8:d3:b4:71:e6:3b:45:0e:0a:af:c1:81:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C1E0000
Validity
Not Before: Jan 31 04:16:49 2025 GMT
Not After : Jan 30 04:21:49 2026 GMT
Subject: CN=ADBB37947AC77FE2E9AC01E45FE49DE10F92502F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:28:ee:dc:0b:20:9d:e1:60:f1:d0:29:38:cd:
82:e6:ec:05:ba:0d:4d:b8:9b:b8:87:da:7a:5b:65:
53:70:44:b4:02:60:d6:56:15:e1:0a:97:34:5a:c2:
bd:63:e8:4b:b8:72:48:bc:fd:86:cb:53:bd:7b:5a:
a7:5b:f9:33:ed:95:2d:6d:8f:a1:90:4b:5a:c2:21:
58:19:3c:20:da:e3:47:75:94:b3:5c:d2:fe:de:34:
54:a3:42:8b:d7:93:e7:10:cd:43:f0:35:88:34:d9:
3b:79:c7:46:2c:8b:bf:e3:24:6b:df:f0:9f:90:16:
30:46:a3:bc:28:7a:a4:4d:ac:67:37:b9:00:96:28:
23:2b:8a:88:4c:05:53:68:c5:e1:94:74:67:e7:bc:
45:61:e9:58:eb:12:d7:34:db:8d:5f:86:30:f8:bd:
1f:99:4e:46:dd:26:5c:bd:28:c0:20:54:70:02:3a:
0e:90:61:7d:e5:92:1c:58:68:c2:0b:42:0d:be:44:
e7:96:b9:21:eb:2e:b0:1c:08:aa:e5:0a:d8:47:ef:
df:d1:de:23:e1:35:2b:fd:9d:ab:fc:76:52:bd:9f:
c3:ad:a7:e0:f6:6e:db:86:58:0a:30:31:ae:98:44:
d2:8a:f6:ec:fc:1f:45:99:ad:a0:21:35:c7:71:a9:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BB:37:94:7A:C7:7F:E2:E9:AC:01:E4:5F:E4:9D:E1:0F:92:50:2F
X509v3 Authority Key Identifier:
keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.226.0/24
Signature Algorithm: sha256WithRSAEncryption
62:df:34:ab:5c:9c:e7:91:35:83:18:54:9e:59:09:5a:76:9a:
91:01:49:fc:c3:88:f4:04:e7:74:81:fb:c8:f3:9b:41:13:5c:
d2:c7:48:8c:7b:f9:0c:02:ec:ef:a5:ae:dc:bc:55:b2:a2:58:
31:24:a5:3a:1d:e1:b1:6a:d9:bc:ae:39:ca:e7:dc:9b:49:92:
f2:57:83:61:38:8a:bf:4f:13:b7:6f:a6:45:4c:fd:f5:7a:2f:
af:5e:7a:4e:d2:b4:ad:ac:b7:90:24:ce:75:e5:6b:64:38:c5:
76:08:27:1c:39:30:67:72:95:b1:45:ea:71:79:43:1f:fb:22:
1c:40:d2:cc:62:f5:df:f3:10:37:43:36:75:4c:fe:3d:b7:dd:
ca:8a:57:2e:9d:cf:25:59:42:1d:11:4d:50:f1:76:16:96:f3:
81:a9:54:9c:12:e2:dc:e4:b8:72:b6:a0:db:ac:86:eb:a4:7b:
6f:8d:b3:1e:5f:17:43:fc:5a:bc:4e:49:8e:80:b4:46:45:62:
bc:e9:5f:d6:57:8a:c1:1f:9f:e8:1a:ad:82:5a:f0:8a:b7:f6:
da:c1:64:4a:79:ed:36:3a:3d:ba:29:d5:4f:f5:77:42:d7:21:
70:f1:15:4d:44:91:85:19:e0:81:14:e2:17:8f:55:43:ba:a7:
0d:2b:69:b7
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUYcwrpbKNf6jTtHHmO0UOCq/BgcUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTlDMUUwMDAwMTEwLwYDVQQFEyg5RTk3OEUwRjc3
RTYxQkFFQ0QwMzkxQjA3MzRENjJDNzJBODEzOUZCMB4XDTI1MDEzMTA0MTY0OVoX
DTI2MDEzMDA0MjE0OVowMzExMC8GA1UEAxMoQURCQjM3OTQ3QUM3N0ZFMkU5QUMw
MUU0NUZFNDlERTEwRjkyNTAyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJgo7twLIJ3hYPHQKTjNgubsBboNTbibuIfaeltlU3BEtAJg1lYV4QqXNFrC
vWPoS7hySLz9hstTvXtap1v5M+2VLW2PoZBLWsIhWBk8INrjR3WUs1zS/t40VKNC
i9eT5xDNQ/A1iDTZO3nHRiyLv+Mka9/wn5AWMEajvCh6pE2sZze5AJYoIyuKiEwF
U2jF4ZR0Z+e8RWHpWOsS1zTbjV+GMPi9H5lORt0mXL0owCBUcAI6DpBhfeWSHFho
wgtCDb5E55a5IesusBwIquUK2Efv39HeI+E1K/2dq/x2Ur2fw62n4PZu24ZYCjAx
rphE0or27PwfRZmtoCE1x3GpshECAwEAAaOCAjUwggIxMB0GA1UdDgQWBBStuzeU
esd/4umsAeRf5J3hD5JQLzAfBgNVHSMEGDAWgBSel44Pd+Ybrs0DkbBzTWLHKoE5
+zAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC80LzlFOTc4RTBGNzdFNjFCQUVDRDAzOTFCMDczNEQ2MkM3MkE4
MTM5RkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL25wZU9EM2ZtRzY3TkE1R3djMDFpeHlxQk9mcy5jZXIwgZsGCCsG
AQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzQvMzEzMDMzMmUzMjM0MzQyZTMyMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZ/TiMA0GCSqGSIb3DQEBCwUAA4IBAQBi3zSrXJznkTWD
GFSeWQladpqRAUn8w4j0BOd0gfvI85tBE1zSx0iMe/kMAuzvpa7cvFWyolgxJKU6
HeGxatm8rjnK59ybSZLyV4NhOIq/TxO3b6ZFTP31ei+vXnpO0rStrLeQJM515Wtk
OMV2CCccOTBncpWxRepxeUMf+yIcQNLMYvXf8xA3QzZ1TP49t93Kilcunc8lWUId
EU1Q8XYWlvOBqVScEuLc5LhytqDbrIbrpHtvjbMeXxdD/Fq8TkmOgLRGRWK86V/W
V4rBH5/oGq2CWvCKt/bawWRKee02Oj26KdVP9XdC1yFw8RVNRJGFGeCBFOIXj1VD
uqcNK2m3
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:19 2025 by rpki-client