Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e203336353330.roa
File: 3139322e3230382e31352e302f32342d3234203d3e203336353330.roa (raw, json)
Hash identifier: ol+3/EomkqcH5GiBGZs3wMJmwFSvFKKP3BJb5UwG+PM=
Subject key identifier: B4:8D:90:D0:62:42:4E:FC:FA:96:D9:8F:90:C5:E4:70:41:9F:36:FF
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 3D8A888FD11AC67998E756F7C643FF98824A91DB
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e203336353330.roa
Signing time: Thu 28 Nov 2024 12:00:51 +0000
ROA not before: Thu 28 Nov 2024 11:55:51 +0000
ROA not after: Thu 27 Nov 2025 12:00:51 +0000
asID: 36530
IP address blocks: 192.208.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 00:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8a:88:8f:d1:1a:c6:79:98:e7:56:f7:c6:43:ff:98:82:4a:91:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 28 11:55:51 2024 GMT
Not After : Nov 27 12:00:51 2025 GMT
Subject: CN=B48D90D062424EFCFA96D98F90C5E470419F36FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:d2:e3:b0:94:b5:85:0d:a3:9c:86:fe:d3:
7a:e0:05:5e:40:0e:53:4c:fd:fd:23:86:2b:a3:13:
a3:31:79:e1:00:d5:6b:f7:6e:b1:e9:0a:ef:42:92:
ec:47:bf:0c:29:c4:60:0c:10:fc:17:cc:75:82:08:
04:af:c2:eb:05:a6:ec:c0:19:06:d4:0a:98:7d:cf:
08:ee:0f:bb:05:e4:ed:24:b0:16:b7:b1:08:70:f8:
18:bb:94:ca:5b:be:9e:16:c0:33:0f:c7:27:b5:60:
82:d1:99:ff:cb:68:ef:fd:c2:68:1b:65:bf:d7:91:
1c:36:c5:17:b1:d4:ca:61:ec:ca:df:c2:d6:3c:3a:
12:77:c6:3d:69:c1:69:6d:47:40:86:42:b4:24:c6:
53:2d:61:3d:bd:c6:64:43:15:25:9b:82:37:db:67:
f2:45:53:22:20:24:7f:aa:59:47:69:79:aa:dd:f7:
a0:0f:5c:a9:90:f5:80:84:80:a0:f3:95:c0:21:84:
fa:2d:12:b0:6b:b3:99:50:58:2a:e8:8f:68:3e:cd:
d6:e7:7e:91:8a:b9:4a:ae:00:e5:b5:93:71:35:b1:
48:eb:4a:f6:dc:90:2e:ef:4a:6e:b7:f3:19:b8:e2:
69:96:30:80:05:da:46:3d:1f:ef:dd:43:29:6d:d1:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8D:90:D0:62:42:4E:FC:FA:96:D9:8F:90:C5:E4:70:41:9F:36:FF
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.15.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b6:77:3b:90:70:c1:6c:00:ee:da:6b:d5:cd:07:6f:92:b9:
6d:8d:01:18:d7:e4:79:61:0a:87:b0:57:ed:7a:93:ba:6e:7c:
07:f5:19:31:0a:36:ad:0b:5f:ec:d1:06:f7:7d:4f:10:60:24:
be:b0:d6:c0:f2:a6:b3:81:0f:ea:c1:e7:0a:4c:c8:64:e3:84:
1d:97:82:13:33:c2:a0:51:88:dd:e7:f4:ee:46:e8:fa:99:fb:
e8:9d:ca:7a:8d:bc:97:6a:59:f4:63:ed:fe:06:d7:c6:c2:0e:
6a:70:60:7f:e9:29:db:80:c1:da:db:bc:02:1b:5b:db:37:8f:
ea:35:5f:65:4a:87:82:56:9a:83:40:a7:8a:7b:36:23:9f:af:
47:ba:5b:02:7e:bc:86:90:a8:07:33:ca:d8:7e:94:f5:33:5c:
74:ce:4e:89:d3:d6:84:70:41:0a:2e:62:7a:ba:95:1b:6f:3f:
3a:a0:50:36:4b:4c:f0:a8:d8:9d:b8:11:da:24:4c:36:ed:d7:
f1:f9:b6:fb:0a:d7:ae:b0:b3:50:42:d4:a5:f4:33:48:0f:c0:
dd:ce:ca:4f:30:7d:39:6d:06:da:64:97:19:e3:b3:22:fb:6c:
5d:3c:a7:90:f0:cd:2b:49:c0:ab:bb:02:9f:0d:87:49:fc:03:
b0:ca:2c:cb
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUPYqIj9EaxnmY51b3xkP/mIJKkdswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjQxMTI4MTE1NTUxWhcNMjUxMTI3MTIwMDUx
WjAzMTEwLwYDVQQDEyhCNDhEOTBEMDYyNDI0RUZDRkE5NkQ5OEY5MEM1RTQ3MDQx
OUYzNkZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCnS47CUtYUN
o5yG/tN64AVeQA5TTP39I4YroxOjMXnhANVr926x6QrvQpLsR78MKcRgDBD8F8x1
gggEr8LrBabswBkG1AqYfc8I7g+7BeTtJLAWt7EIcPgYu5TKW76eFsAzD8cntWCC
0Zn/y2jv/cJoG2W/15EcNsUXsdTKYezK38LWPDoSd8Y9acFpbUdAhkK0JMZTLWE9
vcZkQxUlm4I322fyRVMiICR/qllHaXmq3fegD1ypkPWAhICg85XAIYT6LRKwa7OZ
UFgq6I9oPs3W536RirlKrgDltZNxNbFI60r23JAu70put/MZuOJpljCABdpGPR/v
3UMpbdG0hQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFLSNkNBiQk78+pbZj5DF5HBB
nzb/MB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDE3
ODM2MTE3MzhmZi8wLzMxMzkzMjJlMzIzMDM4MmUzMTM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzNjM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMDQDzANBgkqhkiG9w0BAQsF
AAOCAQEAarZ3O5BwwWwA7tpr1c0Hb5K5bY0BGNfkeWEKh7BX7XqTum58B/UZMQo2
rQtf7NEG931PEGAkvrDWwPKms4EP6sHnCkzIZOOEHZeCEzPCoFGI3ef07kbo+pn7
6J3Keo28l2pZ9GPt/gbXxsIOanBgf+kp24DB2tu8Ahtb2zeP6jVfZUqHglaag0Cn
ins2I5+vR7pbAn68hpCoBzPK2H6U9TNcdM5OidPWhHBBCi5ierqVG28/OqBQNktM
8KjYnbgR2iRMNu3X8fm2+wrXrrCzUELUpfQzSA/A3c7KTzB9OW0G2mSXGeOzIvts
XTynkPDNK0nAq7sCnw2HSfwDsMosyw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:43:22 2025 by rpki-client