Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e20323135333034.roa
File: 3139322e3230382e392e302f32342d3234203d3e20323135333034.roa (raw, json)
Hash identifier: AE4kIknUYKB1I8l1bgnRF+T6LxpVcLMPsFDOtsizng8=
Subject key identifier: 60:D0:ED:8F:62:07:18:5A:DC:23:2B:E5:4A:2C:71:0E:7B:11:47:C0
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 31BC4C260D2C43E0C4BA19923A07447F684BA2F1
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e20323135333034.roa
Signing time: Thu 28 Nov 2024 12:00:53 +0000
ROA not before: Thu 28 Nov 2024 11:55:53 +0000
ROA not after: Thu 27 Nov 2025 12:00:53 +0000
asID: 215304
IP address blocks: 192.208.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:bc:4c:26:0d:2c:43:e0:c4:ba:19:92:3a:07:44:7f:68:4b:a2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 28 11:55:53 2024 GMT
Not After : Nov 27 12:00:53 2025 GMT
Subject: CN=60D0ED8F6207185ADC232BE54A2C710E7B1147C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:20:5d:d3:0d:9f:ed:99:40:41:67:2b:5b:
94:f6:97:ac:85:13:d6:40:fc:14:2f:72:11:a1:c4:
2f:a4:8b:7c:06:38:61:83:da:f6:89:05:fe:ad:8a:
21:8a:3c:60:30:29:c1:ed:a8:38:a1:32:1b:50:fd:
32:35:7e:0f:42:ab:06:60:83:70:ec:f5:70:8b:2f:
67:45:15:c1:40:6d:73:a1:39:bb:94:d5:a0:7c:c0:
6b:25:fd:95:39:da:98:35:cb:9e:6f:0a:fb:1f:42:
c6:13:cb:02:3f:7f:31:94:55:53:f9:a9:ae:03:2c:
77:45:6c:07:84:1e:de:96:ac:aa:72:52:57:c9:29:
f6:21:d2:ba:a8:a6:07:3f:7e:18:a7:65:0f:5f:ea:
88:27:45:b0:0e:3f:3d:fe:80:70:d4:ca:a1:dc:0e:
16:e5:da:ab:9b:9b:d9:bc:d0:97:11:79:c3:2b:b0:
f3:db:2e:24:42:45:2f:66:2c:fc:d8:47:b1:ca:eb:
01:02:5a:d5:f4:71:3f:fb:6a:86:7c:06:8c:9c:30:
b3:7e:0f:60:db:c7:93:a1:ec:af:9a:37:69:fd:ca:
4b:cf:65:2d:40:2f:56:44:d3:f6:03:35:07:b6:93:
5c:72:78:b2:ec:df:ec:16:73:33:63:c9:4e:91:7b:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D0:ED:8F:62:07:18:5A:DC:23:2B:E5:4A:2C:71:0E:7B:11:47:C0
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e20323135333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.9.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0d:18:89:81:fa:49:06:67:56:05:d2:a2:f3:a5:00:68:55:
74:c6:f6:f2:4d:ed:08:45:a5:b8:99:b4:15:fd:26:12:fc:02:
4e:a8:38:db:85:29:5d:e4:ce:0b:7e:b9:4f:a5:f2:eb:07:a0:
b7:c9:60:b8:1e:5f:ed:49:ab:e0:f9:39:84:b4:7d:90:b1:fd:
c6:82:0a:81:00:89:21:20:08:c4:7d:98:e0:37:01:1e:6c:6b:
ac:58:fb:e0:e9:e6:5f:99:37:b1:00:21:73:ce:6e:d9:8b:12:
11:8e:7e:b7:a3:1f:66:d3:4e:84:62:7d:ad:34:5f:24:11:88:
90:ce:cc:22:fa:a0:cb:ce:53:75:00:2c:d5:80:e3:76:ac:28:
8a:c5:1d:4e:79:f4:02:9f:81:dc:ff:c6:a1:30:23:2e:87:a6:
1a:11:ec:6d:80:e5:ce:7e:76:fd:d4:87:60:55:3a:50:f9:d6:
86:a4:cf:49:10:3c:a3:63:c2:d6:dc:4f:d9:35:60:40:78:3f:
93:c5:4f:40:3a:9b:11:a6:34:13:19:ec:96:db:39:39:6e:c7:
d3:f0:0e:58:d7:12:5b:83:4c:4a:ec:52:0f:d8:90:dc:37:42:
39:22:21:6d:9f:f5:90:af:fd:ff:cc:37:04:b8:86:fc:c9:c5:
6f:f4:ac:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:17:47 2025 by rpki-client