Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS215287.roa
File: AS215287.roa (raw, json)
Hash identifier: 8FjkxDSsmsVueSOW/eNHJeYNIGUV8b0tEzZeXbR84t8=
Subject key identifier: 8B:0F:78:A6:1B:6B:8A:79:54:6D:0A:F6:DB:96:63:6D:3C:45:69:AB
Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial: 5312694F88A734D0A81C504E419E517FC986BA73
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS215287.roa
Signing time: Wed 27 Nov 2024 13:05:39 +0000
ROA not before: Wed 27 Nov 2024 13:00:39 +0000
ROA not after: Wed 26 Nov 2025 13:05:39 +0000
asID: 215287
IP address blocks: 66.225.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Dec 2024 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:12:69:4f:88:a7:34:d0:a8:1c:50:4e:41:9e:51:7f:c9:86:ba:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Validity
Not Before: Nov 27 13:00:39 2024 GMT
Not After : Nov 26 13:05:39 2025 GMT
Subject: CN=8B0F78A61B6B8A79546D0AF6DB96636D3C4569AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:b4:02:46:64:fa:58:a4:d3:bb:71:4a:d2:
a7:18:09:1a:68:66:9f:86:d0:4f:01:4f:a6:db:a9:
f1:6f:e0:86:37:d2:6b:bd:39:33:98:b0:62:c9:c1:
d7:91:28:2c:5b:5c:19:31:e9:5b:3b:e1:30:60:b4:
3d:90:d4:e3:58:b4:c7:67:9b:d4:ec:e7:a3:1b:b9:
15:23:19:9c:25:7f:a9:1f:87:d3:d0:64:06:84:f6:
b4:bb:2a:91:5c:c5:e2:8e:a8:b1:53:23:a1:32:b9:
fb:a4:cf:4b:6c:b9:89:ab:11:91:d4:7d:73:86:56:
9b:c3:19:45:c7:ad:92:0c:b6:c5:28:42:29:6d:92:
01:fe:c8:04:fc:9b:f7:70:25:a3:ca:bb:68:fd:6a:
65:08:82:7d:bf:17:18:40:f7:92:15:7c:1c:fb:5e:
8f:09:77:24:5d:98:aa:7c:37:36:0d:d5:52:02:30:
38:b3:96:5d:01:df:09:9b:4f:e1:ad:9c:1e:d1:f3:
26:a9:95:b8:9a:91:c0:84:d5:07:6c:da:c3:a4:cb:
4f:96:68:13:ef:3b:ee:e0:86:22:f8:82:16:4d:a9:
a0:6b:cb:dc:b3:c3:0b:b8:aa:82:ec:6a:6e:fa:49:
07:68:a3:94:91:9f:9c:7b:db:6e:36:dd:5c:87:27:
80:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0F:78:A6:1B:6B:8A:79:54:6D:0A:F6:DB:96:63:6D:3C:45:69:AB
X509v3 Authority Key Identifier:
keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS215287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.234.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:69:87:08:cf:a9:12:c8:3e:da:c8:d2:f1:1d:22:83:1c:ac:
42:4e:22:ad:ee:3d:04:97:30:24:78:a5:fc:2b:07:e6:65:9b:
dd:3b:a8:5c:bd:74:2e:e5:b7:b2:8b:e3:14:6f:19:c5:cf:e6:
f9:d5:70:56:51:b6:65:a2:de:bd:29:06:37:84:52:15:b2:24:
0f:ec:1c:9d:ea:b2:e7:9e:eb:e4:19:36:de:76:c5:21:0f:7e:
81:16:1b:b6:ff:0d:b3:bb:7a:48:6e:b6:1e:af:8e:74:64:e7:
1e:ca:31:4a:e4:84:4d:9e:a5:5f:01:76:0d:c4:13:8f:cc:0c:
b3:ce:71:45:9b:f7:8d:09:85:a9:df:a2:58:a7:a9:45:3d:71:
ce:70:0a:6c:b3:b9:89:cf:8c:88:17:b2:9a:6b:fb:79:96:28:
a0:94:34:a2:52:4c:a0:f9:70:61:d7:4e:3e:1f:52:6a:68:8c:
b0:5e:a0:47:bf:a1:b3:eb:fe:ae:7c:23:62:69:45:5a:43:c0:
25:c6:f8:5e:c4:85:4d:60:51:be:6d:1e:90:f3:7c:17:2b:6f:
d9:fc:0c:3d:e2:4b:f6:10:86:7d:cc:8d:2a:ca:ef:1d:6c:ec:
55:de:83:4b:fc:cf:17:1c:c8:3e:37:41:e8:28:0a:2b:7b:7e:
d2:51:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:06:01 2025 by rpki-client