Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20313338393935.roa
File: 3130332e3234342e3232362e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier: nhisdRWQOOZvEkyGXBL82lTKY2b9l0x/StlqBjFuQqo=
Subject key identifier: 54:50:CA:BD:78:71:A1:34:B8:C4:07:4D:4B:43:78:17:93:26:6A:37
Certificate issuer: /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial: 4F09BA5AEE1AA82E8B3A8A9D0AD38A2B7BFC91C9
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20313338393935.roa
Signing time: Tue 08 Oct 2024 00:39:59 +0000
ROA not before: Tue 08 Oct 2024 00:34:59 +0000
ROA not after: Tue 07 Oct 2025 00:39:59 +0000
asID: 138995
IP address blocks: 103.244.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 23:56:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:09:ba:5a:ee:1a:a8:2e:8b:3a:8a:9d:0a:d3:8a:2b:7b:fc:91:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C1E0000
Validity
Not Before: Oct 8 00:34:59 2024 GMT
Not After : Oct 7 00:39:59 2025 GMT
Subject: CN=5450CABD7871A134B8C4074D4B43781793266A37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:ee:53:04:ce:72:c6:05:9c:01:b2:8a:79:
fd:96:eb:f0:a8:28:3c:d7:4b:09:f6:a2:36:8a:19:
a5:7f:c7:95:2b:b5:ad:7c:07:7c:43:ed:40:f4:17:
f0:3a:c2:69:16:94:cb:59:f9:60:16:d4:d8:b7:b1:
3b:8b:00:81:6a:6d:c8:1f:f6:6e:41:9a:10:df:4c:
8e:ce:79:71:e1:86:c2:0f:16:13:08:a7:dd:23:b4:
03:40:21:34:f8:03:b6:4c:6d:6e:ac:6b:6e:03:0c:
17:88:34:50:b2:72:3b:e0:76:02:ec:ae:2b:18:ea:
be:77:19:28:93:c7:a7:ee:43:e6:33:93:d4:b9:ca:
8a:86:41:9f:9e:26:c7:91:cd:4a:b5:36:50:e9:06:
f1:c1:d0:94:a0:5e:a3:58:19:cc:c4:b7:a4:2d:e2:
7c:4f:a3:e4:59:bd:d3:d1:25:81:50:b7:c1:57:14:
4a:68:93:7e:fc:d8:d4:07:cd:18:3d:d0:0e:fd:74:
70:80:a9:0a:2e:46:00:8b:6c:8a:ba:c0:27:96:6d:
96:1a:f1:05:0c:71:eb:72:ae:72:c0:aa:39:51:d4:
34:e1:fd:b4:38:09:a2:72:80:3d:38:69:31:84:03:
31:0d:09:b5:9c:11:ea:37:cd:31:1e:49:f9:9d:d8:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:50:CA:BD:78:71:A1:34:B8:C4:07:4D:4B:43:78:17:93:26:6A:37
X509v3 Authority Key Identifier:
keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20313338393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.226.0/24
Signature Algorithm: sha256WithRSAEncryption
32:80:e1:d3:b6:e7:7c:54:93:39:bb:82:17:28:50:04:2b:98:
94:66:de:72:73:7f:db:b1:af:87:f3:45:d3:cc:47:11:0c:4b:
f4:23:24:f7:94:2e:52:62:98:a3:6c:38:f6:64:27:c8:0e:06:
f4:d5:71:72:d7:da:42:65:27:f8:49:47:6f:28:3d:55:b9:40:
6d:02:05:8e:5d:a2:b1:f6:34:c1:40:62:1b:5d:10:87:52:f8:
bd:41:ec:df:2b:9d:e4:2b:dc:14:7c:c1:4a:c3:c5:67:c4:15:
37:49:07:91:6e:9f:56:7a:74:ea:33:3e:af:d6:bf:bd:05:49:
05:8a:38:e6:db:dd:b2:db:69:12:91:d8:a2:82:c7:9c:ce:d1:
e7:1f:b3:2c:a0:55:a2:27:67:8f:fe:ca:18:20:ea:48:66:23:
de:5f:f3:33:ac:96:d0:19:c9:6f:b1:31:b9:15:d0:77:1f:27:
45:d0:b5:58:92:7a:0d:b6:2f:5e:3d:f1:e9:f4:88:5b:48:0b:
c8:97:81:ce:fb:d5:58:a0:92:fb:63:90:9e:8f:55:41:a6:7b:
9b:e9:8c:08:6f:67:32:e9:24:3f:12:66:bf:cd:1e:7b:c2:98:
91:30:e4:e0:47:dc:5c:99:6c:4f:73:81:93:93:d3:fe:ce:eb:
f7:35:b8:c1
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUTwm6Wu4aqC6LOoqdCtOKK3v8kckwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTlDMUUwMDAwMTEwLwYDVQQFEyg5RTk3OEUwRjc3
RTYxQkFFQ0QwMzkxQjA3MzRENjJDNzJBODEzOUZCMB4XDTI0MTAwODAwMzQ1OVoX
DTI1MTAwNzAwMzk1OVowMzExMC8GA1UEAxMoNTQ1MENBQkQ3ODcxQTEzNEI4QzQw
NzRENEI0Mzc4MTc5MzI2NkEzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMdH7lMEznLGBZwBsop5/Zbr8KgoPNdLCfaiNooZpX/HlSu1rXwHfEPtQPQX
8DrCaRaUy1n5YBbU2LexO4sAgWptyB/2bkGaEN9Mjs55ceGGwg8WEwin3SO0A0Ah
NPgDtkxtbqxrbgMMF4g0ULJyO+B2AuyuKxjqvncZKJPHp+5D5jOT1LnKioZBn54m
x5HNSrU2UOkG8cHQlKBeo1gZzMS3pC3ifE+j5Fm909ElgVC3wVcUSmiTfvzY1AfN
GD3QDv10cICpCi5GAItsirrAJ5ZtlhrxBQxx63KucsCqOVHUNOH9tDgJonKAPThp
MYQDMQ0JtZwR6jfNMR5J+Z3YcS0CAwEAAaOCAkAwggI8MB0GA1UdDgQWBBRUUMq9
eHGhNLjEB01LQ3gXkyZqNzAfBgNVHSMEGDAWgBSel44Pd+Ybrs0DkbBzTWLHKoE5
+zAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC80LzlFOTc4RTBGNzdFNjFCQUVDRDAzOTFCMDczNEQ2MkM3MkE4
MTM5RkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL25wZU9EM2ZtRzY3TkE1R3djMDFpeHlxQk9mcy5jZXIwgaYGCCsG
AQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC80LzMxMzAzMzJlMzIzNDM0MmUzMjMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzMTMzMzgzOTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn9OIwDQYJKoZIhvcNAQELBQADggEB
ADKA4dO253xUkzm7ghcoUAQrmJRm3nJzf9uxr4fzRdPMRxEMS/QjJPeULlJimKNs
OPZkJ8gOBvTVcXLX2kJlJ/hJR28oPVW5QG0CBY5dorH2NMFAYhtdEIdS+L1B7N8r
neQr3BR8wUrDxWfEFTdJB5Fun1Z6dOozPq/Wv70FSQWKOObb3bLbaRKR2KKCx5zO
0ecfsyygVaInZ4/+yhgg6khmI95f8zOsltAZyW+xMbkV0HcfJ0XQtViSeg22L149
8en0iFtIC8iXgc771VigkvtjkJ6PVUGme5vpjAhvZzLpJD8SZr/NHnvCmJEw5OBH
3FyZbE9zgZOT0/7O6/c1uME=
-----END CERTIFICATE-----
Generated at Thu Apr 10 00:31:35 2025 by rpki-client