Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32332d3234203d3e20383334.roa
File: 34352e34322e34362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: qhMH4gZQrPZlpyoyR1qgx8FaDZJebveQlqv8p78Jm6E=
Subject key identifier: B4:1E:FF:2F:61:1B:81:E4:F3:BB:9F:C9:FA:7B:D2:78:50:E9:43:0D
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 7192071FAA095B1AF04D0D77F30C037DB2BA41E3
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32332d3234203d3e20383334.roa
Signing time: Sun 01 Jun 2025 00:02:51 +0000
ROA not before: Sat 31 May 2025 23:57:51 +0000
ROA not after: Sun 31 May 2026 00:02:51 +0000
asID: 834
IP address blocks: 45.42.46.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 07:53:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:92:07:1f:aa:09:5b:1a:f0:4d:0d:77:f3:0c:03:7d:b2:ba:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: May 31 23:57:51 2025 GMT
Not After : May 31 00:02:51 2026 GMT
Subject: CN=B41EFF2F611B81E4F3BB9FC9FA7BD27850E9430D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:55:82:00:8d:b1:b6:2b:be:ae:4f:2b:68:
c8:aa:a7:69:c3:dc:bc:eb:e9:34:8e:bd:67:d8:2c:
fc:52:d6:89:9b:aa:5b:82:9e:1f:22:5e:3f:d4:b3:
d0:ad:d3:d6:08:6d:2c:c0:6a:78:b6:27:87:16:3b:
8f:68:a9:62:2f:9f:ee:b8:88:6d:c3:2f:41:04:d4:
31:f9:b4:7d:97:85:f6:d1:0a:6a:e1:d6:73:b0:c4:
98:df:37:02:95:e3:01:32:4d:42:a8:cb:9c:e5:69:
1e:d0:81:76:09:69:72:74:b8:f7:ca:f1:2d:54:45:
e5:6b:3b:24:cf:a2:1d:4e:67:b7:4f:b2:42:06:33:
2b:da:f5:d5:57:09:38:81:fe:8d:39:23:d4:71:e4:
79:98:89:d1:bb:a2:a0:50:d4:1e:4d:21:30:e9:bd:
d0:75:27:f2:03:f0:88:ab:5d:eb:52:e2:4a:2f:3a:
31:26:8a:f3:21:0d:20:89:a6:c4:4a:5c:1e:eb:68:
41:d9:9b:91:31:4c:7f:a4:94:06:38:5d:2b:4a:94:
9d:5b:89:ae:83:f7:e4:5f:4f:a6:3b:1f:94:2c:71:
5c:be:98:9d:b6:d2:0f:47:a9:f7:1f:99:6b:15:ad:
b7:29:94:03:5a:12:9d:52:d9:12:61:e6:b1:0a:08:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1E:FF:2F:61:1B:81:E4:F3:BB:9F:C9:FA:7B:D2:78:50:E9:43:0D
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.46.0/23
Signature Algorithm: sha256WithRSAEncryption
23:2e:01:4a:8f:f0:1a:2f:52:12:3e:23:9b:82:5f:cf:62:d8:
fc:2c:68:0e:d4:5a:6d:a0:51:fe:88:bc:0c:14:86:f1:88:95:
37:6e:95:b7:35:eb:1e:b3:d1:d9:3a:5d:6d:3c:70:ec:ab:fa:
b0:cf:6a:be:a6:ac:e1:a6:a6:d7:a6:fb:09:a6:40:b2:95:1b:
0f:aa:e2:73:2d:38:cc:4e:08:18:94:9a:ec:9a:12:2e:28:db:
aa:d7:ed:98:76:12:73:d0:e4:85:12:2a:c7:23:55:29:96:0f:
7b:9e:db:c8:c6:3e:9e:36:fb:21:8c:1d:1b:fd:5d:1e:7b:df:
8e:ca:80:3a:48:82:38:ad:4a:d3:2b:06:1f:a3:1e:ef:2d:9a:
73:b9:2a:e7:be:e3:1e:79:18:cb:cf:48:a1:6f:6f:43:49:3b:
1a:b9:b2:97:cc:92:6b:87:fb:76:d2:96:b5:fb:74:0d:e4:7d:
8e:57:15:8d:5e:73:ef:07:19:68:10:bb:5c:49:a0:66:40:cc:
fa:c9:48:38:06:8d:b2:22:23:8d:91:db:32:14:05:f1:05:91:
f8:fd:26:7f:6b:74:c6:7c:75:bc:2c:cd:87:f0:06:17:66:08:
b4:25:56:7d:03:1a:39:6c:28:18:fe:ca:0d:00:9f:b9:83:08:
f9:a1:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:52:50 2025 by rpki-client