Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e20383334.roa
File: 3139322e3230382e392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: JCSzuVpHDKPQC9+k8QCdbN522y+xsXxy1HO8QdfjejE=
Subject key identifier: 2E:A0:69:78:68:CA:7D:2F:FF:67:C0:8A:79:57:C0:A5:80:86:8F:1A
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 0962F7EEA7FB6E1BD6CACEB3BA14B70124D05545
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e20383334.roa
Signing time: Thu 28 Nov 2024 00:04:03 +0000
ROA not before: Wed 27 Nov 2024 23:59:03 +0000
ROA not after: Thu 27 Nov 2025 00:04:03 +0000
asID: 834
IP address blocks: 192.208.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:62:f7:ee:a7:fb:6e:1b:d6:ca:ce:b3:ba:14:b7:01:24:d0:55:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 27 23:59:03 2024 GMT
Not After : Nov 27 00:04:03 2025 GMT
Subject: CN=2EA0697868CA7D2FFF67C08A7957C0A580868F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:e2:ca:e0:cb:bc:5f:ed:6a:96:b3:fd:f6:
b1:85:78:d5:86:e5:e5:05:5d:a3:43:d0:c8:2d:64:
8b:b9:48:02:77:8a:77:1f:d9:67:cb:6c:87:2f:01:
42:ea:ab:84:92:22:77:e4:51:cc:5e:b9:65:ec:65:
1e:4a:ef:c8:e2:fe:a6:02:ff:c4:c2:41:f6:06:ad:
66:94:0b:bd:ec:c2:51:12:03:ca:9a:6a:88:d0:12:
75:76:d5:11:62:6a:8e:3b:7b:f3:b4:1f:c1:ea:e6:
d3:e2:d0:ea:c9:e6:07:44:26:75:c7:3e:99:14:4f:
aa:b8:0d:a9:2c:78:ea:66:5a:46:23:b0:58:eb:3e:
69:4c:c1:70:d7:3c:d9:d2:3a:c6:8d:cd:02:c1:54:
38:c4:d7:3a:3d:f3:7b:5d:ce:5f:59:20:3d:55:a5:
a2:36:07:e2:bc:43:26:ae:33:10:b4:cc:5d:66:02:
1c:f5:75:7b:43:b0:42:87:99:41:a0:63:a5:43:1b:
a7:c9:2a:da:ca:32:d9:1f:35:21:0b:00:7a:0a:66:
ed:1c:4a:c4:e5:13:0b:ff:df:e7:8a:83:f3:09:6c:
8c:ad:34:12:7b:79:65:e2:df:3a:83:be:b5:a1:a8:
44:3f:30:78:1f:b5:ad:38:05:31:81:55:57:94:0a:
db:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A0:69:78:68:CA:7D:2F:FF:67:C0:8A:79:57:C0:A5:80:86:8F:1A
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.9.0/24
Signature Algorithm: sha256WithRSAEncryption
af:db:34:38:13:c9:cb:b0:fe:34:04:b6:c3:9f:6c:07:4d:b7:
ea:68:bb:8c:26:bb:55:6e:93:fa:55:01:42:b1:a5:34:1e:29:
a4:ee:16:12:0b:69:8e:f0:53:67:25:82:a1:5e:3e:f6:78:64:
3b:65:07:83:25:87:04:b9:42:1c:d6:73:5c:ac:90:b0:fe:e8:
ea:c8:b4:df:a1:0c:8b:4a:8a:61:da:97:68:1a:ef:91:30:ec:
3d:92:22:c2:0c:09:9a:dc:21:7e:95:48:db:a2:74:7a:99:52:
05:86:97:5e:4c:37:7f:d8:a4:66:bf:44:51:d7:55:19:0b:a6:
a1:16:59:e2:49:1c:07:8b:cc:8d:8c:f4:5e:4f:2a:f6:c2:fc:
62:4d:24:6c:e0:78:45:9c:3e:95:86:7b:48:c9:ac:ec:7e:36:
b2:c4:8e:33:d3:73:ef:53:3d:00:28:55:b8:2f:3d:fe:cc:25:
c1:54:03:d0:12:55:af:b5:c4:d5:d2:18:12:c7:2f:35:be:7d:
f4:a4:93:60:09:c6:8b:5b:7d:9a:1c:04:15:37:4d:e0:9d:6c:
c0:c7:b0:a1:39:1f:07:45:fe:6b:d7:de:07:1b:47:61:04:19:
ab:a4:f6:1e:d2:3e:ca:46:58:5a:9d:b1:c3:70:a4:1b:a0:46:
00:cd:4b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:23:47 2025 by rpki-client