Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS12876.roa
File: AS12876.roa (raw, json)
Hash identifier: GKcJLS5MR4idT974QpeN+YcbJnVqFzvQ5fMmczZpD+4=
Subject key identifier: 42:8C:00:FA:F8:43:25:29:57:BF:DA:F1:B4:71:5B:73:B7:5F:E7:4A
Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial: 5E99E9A4683F9DE22309C5EF645C73096AEF9BF1
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS12876.roa
Signing time: Tue 03 Dec 2024 12:21:35 +0000
ROA not before: Tue 03 Dec 2024 12:16:35 +0000
ROA not after: Tue 02 Dec 2025 12:21:35 +0000
asID: 12876
IP address blocks: 204.93.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 14:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:99:e9:a4:68:3f:9d:e2:23:09:c5:ef:64:5c:73:09:6a:ef:9b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Validity
Not Before: Dec 3 12:16:35 2024 GMT
Not After : Dec 2 12:21:35 2025 GMT
Subject: CN=428C00FAF843252957BFDAF1B4715B73B75FE74A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:af:c9:af:80:a2:96:54:a5:94:15:1c:73:
c5:a6:e9:da:2f:3f:8b:97:85:94:f8:01:ac:c9:4b:
bb:e0:96:3e:3d:2b:94:70:82:ac:d1:9c:a9:a1:13:
e6:ff:06:89:1f:68:b0:d3:9d:20:35:e9:2c:33:9a:
74:7a:30:42:54:fc:a0:e6:89:a4:97:f5:c2:35:ef:
21:49:77:3f:a3:1d:e5:0f:2e:d5:e7:0a:f0:1c:75:
68:30:99:41:5f:5a:f7:60:59:fa:8c:1e:25:43:d5:
09:0c:44:ed:7b:f6:d9:c8:48:1c:1d:1d:4f:e8:df:
0e:8f:07:eb:d4:f7:ae:06:5a:a4:47:c0:c1:e3:44:
ff:e3:d0:be:e9:62:f1:e5:c2:79:6c:7d:71:5c:a5:
d0:66:34:5f:e1:9c:f9:1b:93:51:f3:a0:2f:cf:f8:
0c:74:b9:d2:a7:40:45:12:85:f5:2f:e5:5f:24:fa:
a8:6b:a7:55:08:5f:a2:a2:b9:3d:8b:34:54:3a:93:
03:ea:db:f9:f7:e9:e6:6a:ec:83:d3:67:a2:08:c2:
c1:4b:cb:be:f0:34:e8:25:18:31:b4:e8:98:e3:7b:
f5:95:58:08:39:5c:a7:53:b3:1a:5f:e3:80:fa:a1:
74:a0:d6:d4:49:74:51:a1:8f:80:72:41:7e:fe:14:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:00:FA:F8:43:25:29:57:BF:DA:F1:B4:71:5B:73:B7:5F:E7:4A
X509v3 Authority Key Identifier:
keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS12876.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.93.187.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a2:d4:4c:8f:f2:a2:d4:f6:26:f7:c2:98:6c:c6:5f:99:34:
8b:19:1f:44:18:04:1c:da:09:70:1e:70:77:53:10:76:16:24:
89:0b:77:09:37:69:4e:fb:d2:f2:d5:04:b5:75:e8:c1:11:40:
8e:ec:bb:57:d1:38:32:9d:41:e6:7c:f3:66:52:1e:bc:1f:5d:
52:7a:36:3c:3c:2b:59:e3:7c:cc:9a:1f:cf:be:88:83:64:f8:
c4:30:6b:3c:37:f1:15:32:ea:9d:a9:7d:bc:fd:95:2b:a6:82:
80:2e:71:55:79:df:3a:a2:34:09:4f:0a:af:63:fd:99:18:10:
9a:e8:05:cd:23:49:45:f8:1d:64:1c:72:c5:e0:e1:cb:93:1c:
2c:13:aa:fd:6a:36:ee:0f:bd:76:49:53:75:f7:1d:0f:89:86:
f3:33:71:da:17:b5:b8:9c:11:4f:d8:5f:b8:3d:e2:8d:bf:8a:
0e:65:d2:f3:50:56:f0:02:c8:10:60:fa:9d:13:ac:19:bd:b3:
06:99:f5:6d:a1:53:37:f8:6c:b3:96:89:01:25:27:ee:a4:69:
24:69:28:fd:7c:e4:31:82:de:6b:5e:cb:96:a8:99:e1:b1:aa:
0f:a7:d5:16:8c:08:7b:09:f8:ae:59:a3:df:1c:91:3e:44:1e:
94:62:8b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:57:19 2025 by rpki-client