Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e203336353330.roa
File: 3139322e3230382e392e302f32342d3234203d3e203336353330.roa (raw, json)
Hash identifier: 2pkwyzkiAReUsAIouQl5gsfS90goz5Pzrk4uiNGkguQ=
Subject key identifier: 9F:4C:90:CF:AD:24:02:86:21:71:F8:8F:E3:81:67:40:F6:EB:DD:7F
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 29F940319D2EACEA4F396C9FD2132053B2B73DF6
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e203336353330.roa
Signing time: Thu 28 Nov 2024 12:00:53 +0000
ROA not before: Thu 28 Nov 2024 11:55:53 +0000
ROA not after: Thu 27 Nov 2025 12:00:53 +0000
asID: 36530
IP address blocks: 192.208.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f9:40:31:9d:2e:ac:ea:4f:39:6c:9f:d2:13:20:53:b2:b7:3d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 28 11:55:53 2024 GMT
Not After : Nov 27 12:00:53 2025 GMT
Subject: CN=9F4C90CFAD2402862171F88FE3816740F6EBDD7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:6c:f4:e1:6e:c1:10:a2:99:9b:87:df:86:
67:50:3e:d3:bf:8c:3e:ee:15:e3:00:2a:8f:d4:25:
33:ac:e8:49:b8:b4:54:4c:61:d6:aa:3a:96:90:8f:
99:fb:be:d9:7e:a7:b9:c4:51:3f:a1:ee:a4:59:44:
5f:f7:fc:ae:17:7c:e6:6b:17:a0:9d:45:8d:8a:bb:
b0:5f:b0:e9:f9:38:fb:4a:12:fc:80:08:e4:fa:95:
01:52:9b:9e:bb:64:26:99:e3:5f:23:ae:ee:af:2e:
59:17:d2:70:bb:24:ed:93:82:26:56:4a:70:09:01:
ad:0e:15:2f:be:f6:93:07:e1:7b:dd:1f:73:e2:2a:
bf:1a:35:5a:1a:87:0e:73:93:06:17:6c:5c:06:64:
19:6e:77:fc:b6:f4:43:0a:fa:d5:dc:d2:db:ec:4e:
ff:76:74:27:61:91:28:9a:09:43:35:3a:db:9c:21:
0e:0a:a9:cc:e5:23:91:f2:db:75:d2:69:00:f8:76:
24:e3:44:9a:f4:37:41:a2:39:4e:32:75:33:27:f2:
94:3b:26:cb:61:3c:2f:45:02:31:d0:3e:e5:cb:50:
bf:7a:1d:ca:a9:90:21:50:fe:25:0a:d0:47:69:e7:
73:6f:2c:c4:c6:1a:82:98:c8:43:24:d5:39:d5:e5:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4C:90:CF:AD:24:02:86:21:71:F8:8F:E3:81:67:40:F6:EB:DD:7F
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.9.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c6:54:eb:ad:64:e0:42:be:ad:5b:06:a7:d3:44:57:ab:5f:
09:11:b8:98:a4:0f:ae:76:e8:b9:fb:b2:be:a0:17:ae:6f:47:
6f:ff:de:29:db:41:6e:f9:78:48:b1:86:1c:06:a4:07:f6:b5:
06:84:7e:e9:ee:23:34:af:ec:1e:e9:d0:69:32:b5:62:16:65:
5f:0a:86:b3:a2:00:48:fb:8b:e6:ef:4e:4e:9a:eb:0f:29:cb:
4d:03:5f:c2:4a:0f:86:c1:8e:88:fd:42:9f:9a:d3:ba:1d:a2:
c0:3d:37:85:c6:5f:54:0f:ee:22:1c:7e:ba:0a:14:c1:e1:6c:
ca:59:42:c2:48:c8:db:5d:56:ee:3f:f9:36:75:c0:41:6c:cc:
9b:29:27:15:09:5e:dc:6b:9d:e1:77:fb:01:80:0a:a3:41:f0:
39:dd:b7:bd:88:78:df:bb:2b:61:ff:26:16:8f:e5:ce:64:28:
1f:8b:bd:ab:53:46:f0:6b:cd:63:e6:af:3d:55:25:c5:dc:ba:
68:43:f8:da:c2:6c:40:0e:58:c2:88:ec:1d:bf:26:53:32:8f:
8b:72:81:91:1b:3b:0a:db:b5:bb:39:e9:6d:db:c9:e7:25:b8:
b0:40:b9:3c:a3:1d:14:87:81:d8:9b:7a:87:99:bf:2b:25:ee:
5d:e9:68:fa
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUKflAMZ0urOpPOWyf0hMgU7K3PfYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjQxMTI4MTE1NTUzWhcNMjUxMTI3MTIwMDUz
WjAzMTEwLwYDVQQDEyg5RjRDOTBDRkFEMjQwMjg2MjE3MUY4OEZFMzgxNjc0MEY2
RUJERDdGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2Rs9OFuwRCi
mZuH34ZnUD7Tv4w+7hXjACqP1CUzrOhJuLRUTGHWqjqWkI+Z+77Zfqe5xFE/oe6k
WURf9/yuF3zmaxegnUWNiruwX7Dp+Tj7ShL8gAjk+pUBUpueu2QmmeNfI67ury5Z
F9JwuyTtk4ImVkpwCQGtDhUvvvaTB+F73R9z4iq/GjVaGocOc5MGF2xcBmQZbnf8
tvRDCvrV3NLb7E7/dnQnYZEomglDNTrbnCEOCqnM5SOR8tt10mkA+HYk40Sa9DdB
ojlOMnUzJ/KUOybLYTwvRQIx0D7ly1C/eh3KqZAhUP4lCtBHaedzbyzExhqCmMhD
JNU51eUYAwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJ9MkM+tJAKGIXH4j+OBZ0D2
691/MB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDE3
ODM2MTE3MzhmZi8wLzMxMzkzMjJlMzIzMDM4MmUzOTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMzMzYzNTMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADA0AkwDQYJKoZIhvcNAQELBQAD
ggEBABXGVOutZOBCvq1bBqfTRFerXwkRuJikD6526Ln7sr6gF65vR2//3inbQW75
eEixhhwGpAf2tQaEfunuIzSv7B7p0GkytWIWZV8KhrOiAEj7i+bvTk6a6w8py00D
X8JKD4bBjoj9Qp+a07odosA9N4XGX1QP7iIcfroKFMHhbMpZQsJIyNtdVu4/+TZ1
wEFszJspJxUJXtxrneF3+wGACqNB8Dndt72IeN+7K2H/JhaP5c5kKB+LvatTRvBr
zWPmrz1VJcXcumhD+NrCbEAOWMKI7B2/JlMyj4tygZEbOwrbtbs56W3byecluLBA
uTyjHRSHgdibeoeZvysl7l3paPo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:41:31 2025 by rpki-client