![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136372e302f32342d3234203d3e20383334.roa
File: 3139382e3137352e3136372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: tpbLkVARhkjTd1IQYMayJCpTmHCWxGuflzPkQjfusvw=
Subject key identifier: 09:91:E0:C8:7D:6B:C4:B7:F1:68:0A:FD:A8:2A:8B:EA:66:5E:59:DF
Certificate issuer: /CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
Certificate serial: 6407381977A370399ED3AF53EF4CCAF2B2301028
Authority key identifier: 1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136372e302f32342d3234203d3e20383334.roa
Signing time: Tue 29 Oct 2024 09:07:32 +0000
ROA not before: Tue 29 Oct 2024 09:02:32 +0000
ROA not after: Tue 28 Oct 2025 09:07:32 +0000
asID: 834
IP address blocks: 198.175.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Dec 2024 05:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:07:38:19:77:a3:70:39:9e:d3:af:53:ef:4c:ca:f2:b2:30:10:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
Validity
Not Before: Oct 29 09:02:32 2024 GMT
Not After : Oct 28 09:07:32 2025 GMT
Subject: CN=0991E0C87D6BC4B7F1680AFDA82A8BEA665E59DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:05:6c:7b:39:9b:e1:b6:1c:a3:e9:c7:ab:
25:fb:0c:b5:64:fd:98:95:87:6d:87:db:ff:2d:43:
df:7f:af:7f:ed:30:35:dc:47:8d:8e:03:13:03:62:
4a:e5:b1:41:20:ff:ee:f4:8a:aa:30:cb:34:e4:b3:
a6:47:13:42:29:c5:ff:88:d7:d4:a9:91:5e:96:c0:
7b:40:1f:02:1f:71:b2:f9:3d:59:d3:17:c1:6e:82:
6d:46:3f:f4:4e:a3:fc:b8:3d:e1:30:ac:28:8a:42:
39:d9:37:02:9c:92:8d:b0:c5:d4:88:b1:42:5b:c4:
81:76:75:bd:ed:73:f6:25:cf:fa:f6:11:fb:a6:b8:
18:fd:e7:7c:34:fd:4b:40:50:45:4f:e6:7f:85:87:
8d:37:b2:29:ed:66:65:71:f9:26:00:6d:e7:e1:8c:
47:ce:b9:e6:0c:1a:23:ae:46:b5:50:b6:ee:6d:82:
1d:f1:ad:9a:42:65:63:22:bf:bc:d1:e4:49:ae:91:
e8:70:2f:96:36:f1:a2:2d:b7:a6:f0:10:5d:89:c9:
5c:d0:23:a5:31:4c:82:5c:4f:9a:c8:2e:30:b6:b1:
12:f4:a3:8a:29:e5:0f:e9:1a:d6:9c:36:b4:4b:d6:
39:dc:d3:de:89:e7:64:87:5d:29:a6:78:87:92:4e:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:91:E0:C8:7D:6B:C4:B7:F1:68:0A:FD:A8:2A:8B:EA:66:5E:59:DF
X509v3 Authority Key Identifier:
keyid:1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.175.167.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ec:b4:18:ab:5c:81:bf:0c:11:ac:e8:ab:b9:53:15:ea:b7:
89:74:e1:79:90:67:93:a1:94:1f:5b:10:37:5b:46:37:73:ec:
5d:0a:a1:87:1f:7f:97:c5:bd:37:32:a6:17:c9:04:72:96:fb:
8a:cd:fa:1a:41:de:1c:9f:b8:3f:5e:2d:cf:d1:2e:f7:af:ab:
d9:38:b1:42:5a:a4:b5:0a:a2:b2:bc:c1:f3:9d:38:19:38:4c:
26:92:78:32:78:a0:86:52:bc:82:11:cd:de:a0:b5:c0:a0:95:
f6:01:fe:5d:ce:cd:07:16:88:91:a3:03:f8:27:a6:00:c4:6f:
70:76:38:f2:92:35:9d:3d:c5:f8:fe:09:c8:4e:11:8d:0d:26:
0b:23:30:8c:e2:f6:33:a1:bd:b9:ba:3c:fd:8f:6d:04:c1:7d:
12:b7:b8:20:e4:4f:c5:e2:11:b4:0c:e1:49:40:bb:4a:d8:16:
ad:a9:a4:81:a9:00:c6:ae:eb:84:db:5b:8a:40:92:5c:06:6b:
2b:18:6f:39:a8:9d:b1:f4:e1:19:fc:cc:93:24:92:05:98:ba:
81:82:26:27:0d:b3:10:ea:6d:13:42:30:36:61:d1:cf:ca:1a:
3c:b0:e9:4c:d6:89:9f:bd:32:46:f0:e2:b4:c6:03:2a:9c:4d:
44:fc:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:02 2025 by rpki-client