Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20383334.roa
File: 3139322e3230382e31332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: zBr6q8aHZcL6J7dzdyspXatvC6T5dmSN1szaP2/WWDI=
Subject key identifier: 8F:DE:E6:A1:9B:EF:4C:2B:29:EF:18:D8:78:E5:47:36:C3:34:63:FD
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 3FCB1812F861252D5ACEE3E5EBBCD536B30BF7DC
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20383334.roa
Signing time: Thu 28 Nov 2024 00:04:05 +0000
ROA not before: Wed 27 Nov 2024 23:59:05 +0000
ROA not after: Thu 27 Nov 2025 00:04:05 +0000
asID: 834
IP address blocks: 192.208.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:cb:18:12:f8:61:25:2d:5a:ce:e3:e5:eb:bc:d5:36:b3:0b:f7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 27 23:59:05 2024 GMT
Not After : Nov 27 00:04:05 2025 GMT
Subject: CN=8FDEE6A19BEF4C2B29EF18D878E54736C33463FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:79:e4:d0:be:db:ae:56:d1:49:36:fa:09:
ed:8f:07:42:41:3b:60:5b:e0:fa:9c:39:c5:f5:da:
e0:76:80:fc:92:4b:4d:c9:49:29:4d:a8:fd:0f:d1:
da:9d:67:fc:c0:5b:f1:16:42:0c:da:da:e1:52:8a:
b8:5b:12:7f:5e:3c:e5:10:13:8d:06:be:ce:23:cf:
50:59:6e:17:cc:67:f5:07:65:ed:b4:31:11:cb:fc:
48:6b:3e:33:87:f6:d5:76:23:57:01:f7:61:d0:5b:
77:13:a2:df:b9:ae:bd:0a:40:8d:63:fe:4f:12:b9:
01:a5:04:06:6a:fe:b7:ad:4b:0f:70:f0:df:55:a8:
92:b8:07:94:40:a0:a2:7a:ad:41:20:36:26:f8:95:
7a:28:eb:f8:c3:1b:9d:bc:99:0c:79:84:60:b8:7e:
7d:ac:8c:5b:38:db:41:42:bd:63:ef:17:3f:71:79:
ec:17:c5:70:97:56:50:65:3f:6d:1c:e3:83:0f:80:
a9:b6:8f:2d:cb:63:fb:56:0f:e3:bd:0e:92:77:2e:
eb:fb:cf:74:2f:7c:36:e9:20:52:7b:a5:71:17:04:
d3:f1:10:c0:0c:54:2b:7f:1e:12:df:23:6c:a6:00:
b6:51:8e:dc:c1:d1:ce:0a:67:db:6c:0e:7d:6e:5a:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DE:E6:A1:9B:EF:4C:2B:29:EF:18:D8:78:E5:47:36:C3:34:63:FD
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:75:36:31:0e:33:c2:c7:03:83:92:a1:50:de:8d:ee:5c:71:
ea:b8:b7:67:fc:50:19:b1:3b:19:8d:b7:b0:56:ae:aa:cb:a8:
71:ad:2c:80:a0:8d:92:40:a5:66:99:66:8f:4f:3e:06:65:ba:
41:f6:98:fe:0c:60:b2:90:c0:ff:30:c6:84:d6:61:7d:eb:f9:
35:ce:b2:2b:26:31:06:b9:d5:d2:d7:d9:c1:3f:3b:bc:37:32:
2e:2a:a8:92:0d:68:ad:eb:80:13:4c:3e:da:d3:df:e4:f0:fe:
d8:df:ac:56:1a:b8:70:af:c9:04:3c:1a:fc:44:74:29:94:26:
10:86:2d:f4:97:47:ee:7c:3c:2d:5e:10:23:a1:eb:5b:5d:01:
0c:c9:06:ea:26:9a:c9:b5:ce:16:65:bf:26:f5:96:01:bb:55:
31:de:05:ef:47:dc:3e:b0:98:25:95:a0:92:13:de:ab:18:1d:
9c:f5:3e:e7:fa:8a:da:3d:16:a2:aa:33:18:7c:f3:5a:40:f3:
79:42:18:69:d1:0e:62:fb:94:f5:cb:82:4c:5a:5b:c5:ed:41:
a2:58:e3:06:0a:fe:da:b7:73:f8:95:1f:64:42:04:bc:f9:ee:
cf:bb:b8:7a:69:17:bb:b0:8e:94:69:40:e6:2c:ff:e2:af:9e:
31:00:82:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:17 2025 by rpki-client