Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20323134363534.roa
File: 3139322e3230382e31332e302f32342d3234203d3e20323134363534.roa (raw, json)
Hash identifier: 5dXp8MxO4mZ9jZuGA7xnwNJDiVg4YtGs5gDHZ7vZ+BA=
Subject key identifier: F4:A0:71:F8:4C:AE:CA:AD:A5:97:25:49:38:43:30:7F:02:37:1B:41
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 0CC5C40EFE584B7F60F006A0100D6B1CEB9EF25E
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20323134363534.roa
Signing time: Fri 29 Nov 2024 15:28:54 +0000
ROA not before: Fri 29 Nov 2024 15:23:54 +0000
ROA not after: Fri 28 Nov 2025 15:28:54 +0000
asID: 214654
IP address blocks: 192.208.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 00:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c5:c4:0e:fe:58:4b:7f:60:f0:06:a0:10:0d:6b:1c:eb:9e:f2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 29 15:23:54 2024 GMT
Not After : Nov 28 15:28:54 2025 GMT
Subject: CN=F4A071F84CAECAADA59725493843307F02371B41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:57:df:2d:71:7f:49:97:24:da:cb:36:e9:
10:9e:b2:a3:d9:67:03:37:ed:8e:e1:64:70:47:52:
37:5e:1c:53:8e:26:fb:0e:51:4c:7c:a4:53:b6:3d:
b7:9c:18:98:a2:85:e6:27:b7:17:76:13:75:90:04:
5f:6e:c4:e4:dd:47:f4:ec:55:b1:bc:52:cd:df:fb:
c8:9a:74:bb:93:07:6e:04:5e:0e:54:47:92:95:51:
79:53:bf:e4:1a:92:a4:9a:e1:62:f5:f1:4b:ff:62:
04:14:c5:9d:d8:96:da:70:1f:b1:ce:93:e3:64:ef:
3f:fa:e7:d2:76:32:98:ae:bf:95:39:88:45:f5:a9:
46:e3:6c:76:44:d5:b1:26:f2:f0:ae:45:02:b0:60:
81:63:5d:8c:fc:d5:8e:17:de:d4:f8:3d:55:3a:02:
f3:0f:26:1b:68:e0:c5:66:49:40:aa:95:0a:56:ce:
1e:97:db:e2:01:c4:20:41:1f:bf:e3:d6:0a:ea:97:
5d:35:12:61:cf:67:22:b7:71:9f:4c:e8:a9:0b:dc:
41:4c:87:20:d6:c0:08:de:f7:29:54:de:c2:97:ce:
ce:9c:e3:18:05:c8:3e:3c:67:06:48:9a:3f:8d:4f:
6f:76:5d:0b:a1:b9:31:95:7a:4a:c0:e7:7f:80:ce:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A0:71:F8:4C:AE:CA:AD:A5:97:25:49:38:43:30:7F:02:37:1B:41
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20323134363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.13.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:8c:b5:5a:fc:8f:28:88:aa:ad:dc:7a:31:31:0c:d0:11:bc:
f2:61:51:ac:e5:5a:be:57:fa:9e:30:d0:44:4e:93:b3:91:0d:
9a:ac:d8:8f:37:e5:b3:a9:9f:3e:5d:21:59:2c:67:4b:c7:d8:
97:53:ff:3e:5d:91:64:51:87:92:34:78:84:a9:64:4d:9a:cd:
62:38:e5:b9:e2:aa:56:e1:f3:1f:91:a1:8c:fa:c7:3c:ed:3c:
1b:98:82:8a:fa:03:e9:06:c2:b1:05:25:37:32:b9:94:3f:e4:
37:02:ea:57:4c:13:8b:cb:7b:88:45:31:78:6d:9c:d7:b3:ea:
46:52:a9:8e:90:00:88:b4:8a:ed:38:e6:c2:dd:46:53:39:86:
c7:ee:bb:f3:4c:69:df:31:72:01:52:e8:1e:4e:75:1a:20:4b:
3e:16:13:34:cb:44:d8:74:9b:4e:fa:d4:e3:bd:2c:12:05:79:
76:0f:51:22:86:62:39:37:32:b7:70:c8:5b:ce:70:8f:d3:fd:
8c:12:ee:29:88:54:eb:0b:33:96:66:87:66:e7:f1:99:e5:34:
c6:98:19:e8:d6:92:2a:8c:81:35:90:17:1e:c2:c2:a3:2a:81:
ca:91:29:48:84:c1:6c:cd:58:1f:8b:c7:19:80:fa:95:56:b2:
69:b2:a0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:55:13 2025 by rpki-client