Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20383334.roa
File: 3230382e39312e3138392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: EwKCja0d8U8GUcxrTZPoZdXPdwZTGJzi7MFcvtppHR4=
Subject key identifier: 7B:4E:D1:67:1A:7B:6A:A9:BE:3D:FF:CF:C3:1A:3C:C5:C2:E9:02:74
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 2CC6012CC35A6E9A8306648DA9ED6AE059094E28
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20383334.roa
Signing time: Mon 01 Jul 2024 12:39:27 +0000
ROA not before: Mon 01 Jul 2024 12:34:27 +0000
ROA not after: Mon 30 Jun 2025 12:39:27 +0000
asID: 834
IP address blocks: 208.91.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 07:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c6:01:2c:c3:5a:6e:9a:83:06:64:8d:a9:ed:6a:e0:59:09:4e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Jul 1 12:34:27 2024 GMT
Not After : Jun 30 12:39:27 2025 GMT
Subject: CN=7B4ED1671A7B6AA9BE3DFFCFC31A3CC5C2E90274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:d6:38:09:ff:13:22:4a:3a:f5:73:78:33:
61:d8:f0:ee:74:35:ce:d5:15:98:82:b5:25:51:04:
48:fc:59:75:88:5c:ef:d7:d8:f1:24:31:a0:24:a1:
88:7b:be:22:b5:08:51:f0:13:ff:eb:02:b5:57:7e:
20:fd:0f:69:52:16:32:b4:5c:26:44:4f:0e:0c:c6:
94:a0:9e:d1:26:e7:85:42:f3:d8:ca:60:7a:73:de:
d4:7a:58:e8:af:67:25:b2:81:39:79:34:ef:ec:f8:
07:bf:ac:d1:17:a6:e1:38:85:80:c9:d5:9c:58:0d:
3b:b2:ea:52:8a:6d:d5:6b:6b:85:f7:e8:bb:3f:bd:
cf:18:ec:8d:37:52:2c:1e:6d:62:38:62:61:d3:4a:
a5:f2:95:8f:a2:d2:5d:29:af:62:a5:9b:1d:73:05:
93:26:ce:b2:d5:ef:13:cb:be:b6:4b:61:c9:4b:8d:
05:33:88:26:75:2b:cb:4d:0a:7c:e7:8c:48:53:0c:
d6:c0:17:99:84:47:f7:ea:28:a1:17:7e:be:2d:07:
41:57:24:4f:11:bb:37:e6:8a:d0:18:51:34:99:8a:
02:45:0b:20:b0:a9:cc:e5:d1:f7:20:b2:c8:6d:96:
ef:51:69:92:1d:06:0d:26:6f:df:fb:22:79:e6:f0:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4E:D1:67:1A:7B:6A:A9:BE:3D:FF:CF:C3:1A:3C:C5:C2:E9:02:74
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.189.0/24
Signature Algorithm: sha256WithRSAEncryption
78:9e:cc:21:a9:28:ca:f4:53:dd:96:95:24:43:3c:c9:98:63:
2f:08:3b:77:f6:7a:ff:9e:30:66:09:2d:59:4e:b1:85:c3:90:
bf:4b:cd:86:07:1c:eb:ef:f6:0b:5d:df:0e:a9:17:d2:44:87:
27:78:fd:a1:13:6c:80:fd:f0:36:3d:8e:8c:9d:60:ad:3f:7b:
10:6f:f6:e4:fa:d9:f5:21:9a:40:a1:f1:20:bd:57:e1:b0:d5:
13:53:b8:b6:7e:17:3b:19:2e:a0:f1:bf:9c:43:7f:c4:cc:b0:
cc:ec:56:b5:cd:69:a2:54:b6:4d:cb:58:f9:be:05:c6:74:e1:
6b:ff:8a:2d:9d:7a:21:6d:a0:00:8d:b0:ca:1b:a2:68:a1:5b:
04:cb:f2:87:c7:3e:a1:fa:84:c1:8f:8f:66:8c:1b:92:f9:a4:
ff:f8:1c:f6:02:35:93:ad:d1:41:dc:b3:dd:71:7c:ed:0f:5e:
3f:3e:7f:98:40:f5:a1:0d:6a:89:bc:f7:fc:db:fc:6c:a0:53:
1d:02:1e:70:7e:07:73:83:02:f3:3d:d8:26:92:fb:2f:6b:67:
f4:8b:32:5b:53:f3:6c:4b:6a:26:b3:0b:0f:af:e9:88:70:96:
94:0f:cf:a2:74:10:26:5e:18:35:28:1f:e0:5b:a0:1e:95:3e:
d2:c6:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:08:02 2025 by rpki-client