Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203135323837.roa
File: 34352e34322e34352e302f32342d3234203d3e203135323837.roa (raw, json)
Hash identifier: mR5RPifeTO1F2NvqzT4hAQNc+FWgg7UkF1vT0B7nMJY=
Subject key identifier: 40:0F:FF:9B:27:CE:DC:30:28:DF:2B:26:05:AB:83:55:A8:46:47:AE
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 2B1DF5EE1D9C83DC17D7E51ADA38BE489E4A0918
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203135323837.roa
Signing time: Sun 10 Nov 2024 20:44:14 +0000
ROA not before: Sun 10 Nov 2024 20:39:14 +0000
ROA not after: Sun 09 Nov 2025 20:44:14 +0000
asID: 15287
IP address blocks: 45.42.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 11:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:1d:f5:ee:1d:9c:83:dc:17:d7:e5:1a:da:38:be:48:9e:4a:09:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: Nov 10 20:39:14 2024 GMT
Not After : Nov 9 20:44:14 2025 GMT
Subject: CN=400FFF9B27CEDC3028DF2B2605AB8355A84647AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5c:de:45:6e:b9:fb:10:a7:c8:b4:b9:d8:51:
9b:b0:9a:1e:1f:65:c4:7a:e6:3c:89:1c:e7:12:28:
97:08:3a:b1:c1:29:81:ee:90:1d:37:52:63:ef:b3:
f8:5c:6f:86:56:f4:8c:2f:2c:a6:88:13:65:4f:12:
cd:40:7b:da:20:86:be:1b:ec:a8:34:bf:23:d7:3c:
d6:05:cf:6b:e5:7b:7c:f2:e9:d9:da:5f:4d:8d:9e:
81:6b:c8:04:12:5f:d6:d8:bb:3d:62:5d:49:84:8a:
11:58:09:6a:aa:a7:75:f5:38:7d:c3:76:73:7a:5a:
a9:3d:0e:c5:69:6e:70:67:c2:b6:7d:b0:51:3d:f4:
27:cd:97:8f:26:a3:db:0b:e7:2f:26:82:4a:cf:87:
ae:80:fc:24:66:52:c2:93:51:22:da:d7:c6:24:ea:
15:8a:bb:2d:55:4d:bc:62:1f:ff:8e:fe:cb:2a:56:
e0:0d:2f:37:7b:1b:23:23:9b:42:d4:c1:ee:2e:6e:
75:ae:e6:78:80:0e:e7:c9:44:5e:30:c1:e0:a5:16:
33:2e:39:7a:d1:a0:cf:82:5c:32:cb:47:11:87:b2:
87:98:6a:bf:c7:e8:4e:0a:dd:09:4c:88:b8:e7:68:
8a:03:68:09:35:f6:93:c9:e7:51:f1:0c:c3:73:d7:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0F:FF:9B:27:CE:DC:30:28:DF:2B:26:05:AB:83:55:A8:46:47:AE
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.45.0/24
Signature Algorithm: sha256WithRSAEncryption
20:1c:e4:64:a2:55:e1:16:e4:a0:e9:40:5a:ae:0a:40:59:6a:
bc:ad:8d:03:45:d3:58:98:04:12:1f:b1:59:b0:18:6f:0b:d9:
58:3d:ee:99:b9:07:c6:66:34:9a:66:a6:88:4d:58:45:b3:49:
e2:50:e7:b9:2d:98:50:d2:4b:ef:5e:a6:67:95:e8:51:33:d1:
8e:4e:eb:f2:b3:00:20:34:cc:23:00:9e:df:4c:ed:61:ea:a1:
9d:b1:4d:85:6d:e0:e0:b6:9d:9e:3b:72:65:1e:74:1f:03:81:
8a:c9:ce:4d:8a:81:fc:26:d0:f1:77:d6:eb:fd:cd:c9:e0:7b:
31:dd:f8:0b:f5:b5:7b:2f:37:2a:7c:06:d7:b5:de:b8:9d:91:
0a:0b:ca:7d:43:42:a9:82:65:c0:9a:6c:b0:4d:92:a0:82:42:
80:24:97:ad:3a:a9:a9:88:52:b9:ef:17:57:2a:20:83:f5:36:
19:8b:03:88:34:2e:79:8e:2b:3e:5a:06:84:0d:fc:eb:a5:14:
b3:3b:5b:59:90:6e:6d:50:65:8e:4e:21:50:38:80:16:b3:8c:
eb:93:cd:9b:f1:c2:20:0b:a6:e0:60:29:ce:8f:f4:bc:d8:f8:
a6:59:32:07:91:f4:6d:8f:e5:b7:68:21:aa:88:bb:14:7b:71:
d2:c6:ae:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:43 2025 by rpki-client