Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20383334.roa
File: 34352e34322e34352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mWdZBF5nlv+uiro2WavBvDUdG3dFamqZVA3JVGTUexM=
Subject key identifier: 22:13:A2:32:B2:5E:08:EC:44:BE:BA:A1:25:95:0B:78:4E:51:1C:65
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 26DF467DC2304B30447E9950A4439B33B0B78444
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20383334.roa
Signing time: Tue 11 Mar 2025 11:16:41 +0000
ROA not before: Tue 11 Mar 2025 11:11:41 +0000
ROA not after: Tue 10 Mar 2026 11:16:41 +0000
asID: 834
IP address blocks: 45.42.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 18:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:df:46:7d:c2:30:4b:30:44:7e:99:50:a4:43:9b:33:b0:b7:84:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: Mar 11 11:11:41 2025 GMT
Not After : Mar 10 11:16:41 2026 GMT
Subject: CN=2213A232B25E08EC44BEBAA125950B784E511C65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3f:62:e8:11:92:3b:68:9b:cb:33:0a:d0:38:
d9:52:1b:66:68:6b:ef:00:d5:90:30:86:9d:68:69:
6c:ba:46:18:96:61:a8:63:c6:f0:1a:b0:37:37:d1:
b8:c7:0b:ed:d9:4e:b5:3d:76:73:53:98:22:e4:7c:
07:2b:e6:22:6c:a3:27:8c:a0:ea:69:02:6c:7f:a6:
82:8c:6f:cc:cd:41:18:9a:cb:e5:c8:53:69:fc:f6:
03:c9:7e:17:7f:5e:9c:f2:3c:8d:c1:f4:27:32:87:
60:b4:ec:7d:40:00:5a:76:c6:d6:56:39:71:28:83:
f5:a2:0e:b0:7e:60:9f:ed:49:6f:83:66:31:7d:69:
9f:38:cd:7a:c9:f1:2a:e6:82:0c:af:04:6a:28:36:
58:94:f1:4c:af:3d:ff:f3:0b:bd:ad:9e:1a:bf:6e:
ce:2d:0e:5c:e3:c0:66:d6:0e:da:5a:c1:2e:5e:03:
d8:d9:e5:92:1d:e8:02:4d:d4:70:f8:0a:91:75:16:
9c:4f:61:fa:d7:53:2b:4d:1f:6c:1f:a8:27:86:1f:
dc:63:27:2d:f5:87:2b:59:fa:f3:3b:77:4c:fe:0d:
85:fa:d4:fb:e6:8f:43:1e:97:6b:db:bd:e9:77:68:
ef:5a:ca:af:7f:72:a6:b7:87:0c:5c:1e:bd:cb:c0:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:A2:32:B2:5E:08:EC:44:BE:BA:A1:25:95:0B:78:4E:51:1C:65
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.45.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f1:30:e1:e2:24:dc:73:c0:d8:46:5f:89:8f:d7:2a:ca:2b:
cc:7d:62:39:82:fb:22:ed:65:89:fa:6b:d1:bb:0b:48:b5:da:
37:26:dd:d1:77:19:78:78:a9:b1:35:03:6c:9c:10:1b:70:c0:
71:25:15:31:c4:7b:b1:cd:49:10:8c:39:3a:10:14:a3:30:97:
85:1d:8e:6a:42:d5:94:4d:65:73:a4:cf:79:b7:2e:33:b6:de:
5d:54:ca:22:a5:2d:0e:6f:58:b8:69:85:64:c3:60:84:cc:1b:
78:1b:75:a8:b2:b6:65:bf:5d:31:23:23:f3:ef:65:77:5a:7f:
ac:cc:f0:06:10:58:e5:ab:71:76:84:9d:17:22:b4:42:29:87:
07:d6:8c:0c:c5:f3:85:b7:a8:a9:af:ec:09:e9:1a:05:76:ce:
ea:5c:74:28:87:ab:bf:d1:5b:d9:1b:27:d8:a0:28:1f:ff:7a:
67:78:2e:31:7c:28:01:61:2f:ab:dd:47:ce:c7:db:43:db:d6:
1d:4c:44:3d:d3:15:5f:ee:8b:3c:9f:61:97:a1:bc:20:60:08:
98:91:5d:dd:2b:9e:2f:92:f7:ea:c9:85:80:2b:ee:58:0a:9e:
60:4a:cc:d4:d9:66:d2:8a:08:3f:fc:6e:c2:e5:ef:61:52:1c:
8c:73:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:13 2025 by rpki-client