Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203239383032.roa
File: 34352e34322e34342e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: YDk4P0Vm0rhD1OBR6bPf+AqI/VPOcNTcE4LQPlHFs7I=
Subject key identifier: CF:BE:F1:7A:D0:CF:63:2D:5C:01:5B:FE:70:D4:5C:EF:4E:11:33:82
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 1C48DF679FA2984EDD8606058799AB151B7690A0
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203239383032.roa
Signing time: Mon 05 Aug 2024 12:16:13 +0000
ROA not before: Mon 05 Aug 2024 12:11:13 +0000
ROA not after: Mon 04 Aug 2025 12:16:13 +0000
asID: 29802
IP address blocks: 45.42.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:48:df:67:9f:a2:98:4e:dd:86:06:05:87:99:ab:15:1b:76:90:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: Aug 5 12:11:13 2024 GMT
Not After : Aug 4 12:16:13 2025 GMT
Subject: CN=CFBEF17AD0CF632D5C015BFE70D45CEF4E113382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:6f:3a:3b:72:73:cc:6c:76:cf:06:ee:c5:
35:c3:76:af:2f:2c:8f:37:13:1b:c4:c7:63:6a:b9:
3b:e4:0e:1e:05:36:89:44:70:49:18:5d:d3:ae:7d:
c9:a7:d2:d5:19:7c:c0:04:4f:b8:28:e0:e5:0f:47:
18:82:30:ee:e6:fc:b5:44:b0:6d:a6:16:b6:ad:b3:
36:e3:54:75:23:d9:f9:10:73:37:3a:4f:ec:ed:7e:
17:0c:84:c0:1d:48:bb:71:29:f7:9e:45:eb:94:8a:
ee:b8:ba:66:02:bc:f9:2d:6e:ae:3d:46:36:c5:ee:
6b:93:c1:9e:d7:d0:3a:e1:99:81:74:2f:b5:ff:3f:
08:cd:7b:e7:2f:8f:ac:8e:7c:4f:e1:3e:41:ea:c2:
50:b3:01:3b:62:5c:5b:1c:d7:9f:1c:7f:c3:e6:64:
2f:3f:57:fe:6e:cb:67:4a:23:0d:06:9b:df:ea:43:
a3:b6:7f:8f:65:cf:91:cb:41:1a:fb:9f:a8:ec:3f:
6f:44:f7:a5:bd:96:de:48:fd:bb:88:39:33:50:a4:
ca:4e:cb:c9:a1:f4:a6:40:25:48:3c:1a:92:56:ed:
96:ff:03:68:18:f2:04:8d:cf:d5:09:ec:a9:40:f6:
39:38:05:a8:ee:7a:d1:19:a8:04:31:22:e0:9d:c2:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BE:F1:7A:D0:CF:63:2D:5C:01:5B:FE:70:D4:5C:EF:4E:11:33:82
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.44.0/24
Signature Algorithm: sha256WithRSAEncryption
86:4f:a5:c9:ca:c5:43:92:eb:48:60:33:4c:4b:bc:46:f1:e8:
b4:47:14:21:29:62:64:79:40:ad:9e:3a:0c:32:3f:80:12:db:
b3:78:88:01:ab:69:2b:b0:54:01:29:ec:97:4e:f7:0b:18:03:
27:54:7d:7e:4b:08:3f:37:cd:91:cd:bc:61:2f:be:1c:8b:32:
ae:9c:6a:16:92:e6:f1:31:1d:20:f1:70:d3:70:3a:b0:25:db:
83:ab:ee:44:ee:71:41:4a:03:bf:50:28:ef:10:de:2e:dd:d1:
3e:49:23:4f:d2:ec:26:9d:08:74:5d:81:48:01:40:30:34:ad:
27:74:98:c5:c8:bf:fc:13:12:d4:32:af:00:94:88:87:a1:c1:
5a:9b:28:bc:6b:52:8f:fb:a4:0b:e7:65:42:62:12:d1:2f:ba:
cf:1d:a6:95:75:6b:c6:d2:bd:c6:43:3f:61:b4:28:0e:21:78:
1a:ff:e5:99:16:d6:db:9a:61:71:b5:49:12:ff:c2:97:23:6e:
bc:a5:cf:90:c9:93:44:bd:8c:ee:d0:a1:50:b9:11:c2:8d:37:
08:3b:e4:72:8d:61:41:e7:c7:9e:36:6f:ea:3a:7e:36:69:c9:
cc:87:82:9e:59:5b:e0:2f:2b:72:6b:3c:03:01:d1:d3:68:6b:
dd:95:cf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 19 19:19:49 2025 by rpki-client