Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20323135333034.roa
File: 3139322e3230382e31352e302f32342d3234203d3e20323135333034.roa (raw, json)
Hash identifier: m1G4q/D5oltKVHmcLRpD54E84ciHzoxODmcUXwwN3tk=
Subject key identifier: A4:42:D4:CB:95:CF:F9:F2:EF:99:26:2D:92:3D:65:7B:FE:AD:04:EA
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 4ECDC84CAD2DA44E14B1D8C8A95E04ACFE80E30C
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20323135333034.roa
Signing time: Thu 28 Nov 2024 12:00:52 +0000
ROA not before: Thu 28 Nov 2024 11:55:52 +0000
ROA not after: Thu 27 Nov 2025 12:00:52 +0000
asID: 215304
IP address blocks: 192.208.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 00:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:cd:c8:4c:ad:2d:a4:4e:14:b1:d8:c8:a9:5e:04:ac:fe:80:e3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 28 11:55:52 2024 GMT
Not After : Nov 27 12:00:52 2025 GMT
Subject: CN=A442D4CB95CFF9F2EF99262D923D657BFEAD04EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4d:2e:e7:b0:ad:0b:5f:6b:cc:bb:81:37:53:
97:fa:d8:53:6d:86:96:0b:10:4f:88:a2:ef:0e:c4:
00:86:e5:bb:cf:51:d0:a9:76:c5:a3:0c:4d:4b:5e:
82:56:2c:e1:65:4b:f7:09:e1:f1:85:60:39:72:2c:
6c:f5:3a:f3:f7:e0:15:7f:75:6c:15:f7:99:a6:b3:
df:91:88:2a:53:79:8b:04:fa:d2:18:1d:17:f7:17:
df:bd:44:f0:ec:e1:fd:92:8e:de:1e:40:04:a4:76:
2b:63:d2:9b:96:2b:2b:f4:19:6c:ed:52:65:b0:af:
ee:43:62:9a:59:1f:93:1b:ee:3c:06:53:3b:4a:1f:
e0:bc:01:6a:69:d6:4d:48:a4:ea:12:01:8f:62:b0:
d4:65:73:44:03:46:83:fa:cf:18:51:03:90:ea:68:
98:8e:29:2d:1b:1b:e7:f0:de:82:69:d5:d0:20:bf:
ac:c6:14:26:aa:2c:9a:06:05:6b:cf:45:a3:57:fc:
ad:1e:4e:e0:6d:0b:44:63:80:b5:a1:99:79:c7:d6:
a3:be:e7:3c:52:a3:05:d3:b5:1c:1d:8d:9e:4f:88:
5f:32:a2:cf:5f:35:17:4f:6a:7d:9a:34:7d:79:2f:
eb:59:f6:ea:b9:e6:8a:02:4c:b2:17:fc:31:f8:38:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:42:D4:CB:95:CF:F9:F2:EF:99:26:2D:92:3D:65:7B:FE:AD:04:EA
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20323135333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.15.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:88:41:6c:c1:4e:45:59:ae:db:c0:7b:30:6b:8f:eb:93:ad:
c7:dc:eb:04:bd:c8:dc:09:18:2d:73:f0:67:94:4c:83:a9:1e:
28:7d:a9:f6:12:92:e0:d9:d0:17:69:d8:8e:ed:26:5a:2c:86:
91:f2:9e:e5:d7:d4:f1:ed:bb:46:f9:bd:96:1f:b0:59:6e:4c:
07:50:5c:e8:40:16:fe:87:80:47:71:c7:a3:12:50:44:3b:50:
59:b5:a9:69:90:28:be:83:dc:9f:61:ff:d4:68:32:75:04:ca:
ec:da:d9:12:56:d8:85:09:ab:c7:60:ba:ec:c4:14:dc:5c:21:
17:39:2b:8a:ef:bf:f9:0e:9f:0d:62:be:96:b7:06:fc:80:03:
d3:94:78:92:f9:a2:f3:8a:a2:49:51:a6:c4:5c:33:45:05:d8:
f6:87:4c:36:9e:bb:41:ad:8b:09:62:a3:41:1e:e7:d7:ff:db:
a1:54:eb:e8:1a:7a:5d:d5:61:c0:57:05:b2:84:20:ee:93:2c:
b0:79:0e:8c:2f:e4:5a:32:39:e6:2b:3c:74:f6:a9:c0:e7:36:
ee:43:fc:29:f5:d5:97:52:81:c5:13:2f:dc:8f:07:95:a7:46:
e1:3e:52:59:43:72:99:2a:56:d9:4b:74:cc:9c:e2:17:79:8b:
7e:18:b9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:39 2025 by rpki-client