Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20383334.roa
File: 3139322e3230382e31352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: BcK5egTpVmVA+W1W8HnNJA/l1pEbgNu9bJnWhcsE5hg=
Subject key identifier: 15:30:88:7B:E8:16:00:6B:E4:35:26:AB:E9:66:52:EF:CC:74:91:51
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 694CE7B9DB8290DC24484EBD704DC30F17637B72
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20383334.roa
Signing time: Thu 28 Nov 2024 00:01:02 +0000
ROA not before: Wed 27 Nov 2024 23:56:02 +0000
ROA not after: Thu 27 Nov 2025 00:01:02 +0000
asID: 834
IP address blocks: 192.208.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:4c:e7:b9:db:82:90:dc:24:48:4e:bd:70:4d:c3:0f:17:63:7b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 27 23:56:02 2024 GMT
Not After : Nov 27 00:01:02 2025 GMT
Subject: CN=1530887BE816006BE43526ABE96652EFCC749151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:b1:84:d3:ca:ce:3e:4f:fb:69:0b:b1:da:
85:05:de:45:c6:a8:70:d6:26:8f:60:ed:d0:87:0e:
b6:dc:40:b7:25:ee:20:a1:41:91:a6:1c:97:9e:36:
e4:b6:73:14:e3:86:ca:1b:bb:f1:b8:b3:3e:7c:9f:
9d:53:66:7a:c7:82:41:2b:0d:4c:06:e9:f0:3a:0c:
45:30:d5:8b:af:ba:24:ce:49:a8:48:0d:29:ea:5f:
d7:d7:26:d6:4a:33:39:6e:8e:c9:15:4c:11:d3:eb:
3e:3e:53:19:10:3a:65:a3:14:69:db:27:5d:ad:6a:
57:c8:25:0e:e9:e3:14:31:14:66:02:f3:e7:82:ff:
20:eb:91:0f:80:49:db:fa:00:02:de:cd:93:66:cf:
0d:f9:96:27:e1:18:e1:d4:76:c7:28:83:de:8a:c2:
34:4b:1f:6d:c2:a8:6f:2d:09:36:09:98:b9:b3:2a:
73:a1:b6:d0:5d:72:6b:c1:95:79:f3:d3:99:38:64:
35:53:e1:a5:dc:44:1a:7f:1d:f6:c0:e2:02:7f:31:
69:8c:96:ed:e8:74:f3:74:3f:4e:6a:3c:a4:23:63:
37:bd:0c:3c:a3:ec:ed:ed:ec:c0:fc:b2:1d:ca:46:
5d:6e:2d:77:ba:72:0d:46:30:92:45:5b:06:24:26:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:30:88:7B:E8:16:00:6B:E4:35:26:AB:E9:66:52:EF:CC:74:91:51
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.15.0/24
Signature Algorithm: sha256WithRSAEncryption
60:05:3e:93:f4:2a:53:c1:f5:f6:15:2f:81:54:36:01:cf:13:
81:08:15:94:b9:da:ef:1f:83:bb:09:a4:41:fd:92:8f:fd:2e:
e5:97:db:24:72:f4:f8:6e:cc:a4:04:d8:26:82:1f:d9:c1:0c:
f4:ac:d7:43:60:93:c3:51:7d:e0:c2:7f:a6:96:2f:a2:b8:ea:
2a:e5:af:46:c5:72:92:6e:ca:05:ef:08:d6:29:1e:62:ad:bc:
c1:c3:0c:44:d8:a2:7b:65:f5:fa:6e:e8:6e:38:aa:1f:b3:58:
98:5d:b9:a0:46:14:1b:43:88:3c:dc:87:a8:68:dc:23:74:21:
a3:a7:2f:7f:e9:98:76:53:69:e4:a6:e9:4a:d0:96:fb:39:0a:
75:41:ba:fc:f1:73:84:6b:ef:d1:7c:cc:f2:59:de:58:d5:ce:
91:5c:0a:8d:e2:e8:dd:0d:05:78:27:15:91:b3:83:ac:1c:01:
5a:7c:3e:10:1a:17:3a:65:d4:ef:28:d0:46:6f:3e:49:53:bb:
9e:b4:cc:30:10:99:19:34:82:10:4c:20:47:65:75:55:d7:6a:
31:2b:06:a7:66:cd:09:9e:63:fb:bb:67:81:07:c1:17:8a:97:
7d:0c:6c:c5:27:27:4f:3d:c2:70:a9:08:ff:49:cc:fc:2e:90:
17:00:81:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:47:19 2025 by rpki-client