Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e20383334.roa
File: 3230392e38372e3136302e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: LaHXsY/vX6Ad9YeZSr9bgTjuhVbmWYQgOYCBMCVarpQ=
Subject key identifier: 78:AB:76:F5:98:CC:BB:05:32:F8:5C:83:4D:21:C2:FA:AD:C0:B7:DD
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 165DCCA25FCFC586EC57FEC3F52691D2C84F0911
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e20383334.roa
Signing time: Mon 04 Nov 2024 00:02:19 +0000
ROA not before: Sun 03 Nov 2024 23:57:19 +0000
ROA not after: Mon 03 Nov 2025 00:02:19 +0000
asID: 834
IP address blocks: 209.87.160.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 10:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:5d:cc:a2:5f:cf:c5:86:ec:57:fe:c3:f5:26:91:d2:c8:4f:09:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: Nov 3 23:57:19 2024 GMT
Not After : Nov 3 00:02:19 2025 GMT
Subject: CN=78AB76F598CCBB0532F85C834D21C2FAADC0B7DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:5d:1a:43:89:86:03:9f:6c:86:35:9f:22:
a4:7d:34:14:e7:f1:21:b9:f3:32:be:71:1d:f9:de:
8b:5a:29:e5:94:88:d4:3a:ec:65:cc:58:a6:f8:e6:
82:94:ce:88:33:92:1e:a6:97:50:51:c9:12:c7:b4:
9c:9a:72:ad:f9:89:00:92:f9:88:e8:ee:3b:34:50:
7d:92:7e:3b:a1:92:7a:a5:00:02:8d:9b:ed:fb:1d:
c2:e5:ef:6a:df:db:56:80:8e:bd:4c:91:28:a9:fc:
5e:3d:19:8d:cc:b9:bc:27:29:22:42:87:c0:7d:4c:
ea:45:a6:a2:0b:63:1f:b5:b2:5f:9f:22:b2:0a:69:
93:ec:ec:76:bc:c6:74:fe:1c:c3:ad:3e:e2:d6:f6:
ab:c8:6e:c1:10:61:6f:d0:cc:91:f3:1c:a3:96:ee:
59:cc:fe:ad:14:73:25:2b:e1:54:56:ea:ab:67:28:
e4:f8:51:92:27:86:c7:fc:b3:88:8f:02:e3:f1:72:
30:c8:d5:06:4f:1a:a6:44:b7:4e:99:f8:15:e5:b0:
3c:51:18:89:e6:62:ea:63:90:02:cb:19:fa:e5:b9:
51:aa:d3:15:89:e0:31:2f:92:25:73:eb:85:d1:f1:
2a:93:be:a1:bb:04:f2:28:23:89:fe:ae:cd:62:0b:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AB:76:F5:98:CC:BB:05:32:F8:5C:83:4D:21:C2:FA:AD:C0:B7:DD
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.160.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:7a:2b:70:4d:a3:fd:ff:2b:e6:df:87:4b:92:d1:9a:17:99:
b8:8f:27:31:e2:8c:3a:75:f8:66:9c:ae:be:ae:66:cc:8c:e5:
6f:3a:73:3f:df:64:7d:16:4b:06:63:db:26:e6:9e:50:76:d1:
56:6d:46:92:ec:4c:14:92:ff:89:67:f4:46:a6:d9:90:eb:e3:
7e:ef:ea:9a:5b:50:63:85:ec:1a:8b:e6:e7:cc:73:7f:67:98:
76:73:18:81:34:1c:72:4d:91:0e:22:08:4c:c1:63:ba:ed:5c:
af:94:4f:db:b7:11:f4:94:9f:84:e9:d9:3e:0d:27:d2:0b:58:
7b:89:5f:e5:07:17:f7:74:98:15:d6:9a:e9:77:d8:92:35:73:
fc:f3:cc:3e:e0:9f:e6:09:79:9f:0c:b6:b9:7b:12:47:7a:1c:
34:75:ec:d1:54:3b:68:f3:35:a8:f4:f5:39:19:33:89:9e:9c:
97:06:aa:af:e0:a9:0c:8d:e3:a3:43:ce:2f:1c:e9:80:a9:44:
d7:eb:5c:dc:86:70:71:a7:e6:48:24:3b:7c:a9:1c:06:a3:7c:
e4:e8:bd:0e:b4:98:24:7d:aa:da:53:3a:cd:c2:33:f2:59:3e:
84:2f:69:e0:3a:72:d0:9c:4c:ae:b0:90:fa:1b:4e:e1:c2:54:
f5:ec:72:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:00:38 2025 by rpki-client