Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32332d3234203d3e20383334.roa
File: 3139382e3137372e35382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: pIcHvMH6+ZZBWiyuSdxSMiVUNtWcAgoIhgv0GSSOvYA=
Subject key identifier: EB:EF:82:EB:55:CD:0F:99:E7:1E:81:71:1C:FE:82:9C:BC:1C:39:7F
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 41362AB9BB86F178186355B528F256D5018529D5
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32332d3234203d3e20383334.roa
Signing time: Fri 28 Feb 2025 16:48:11 +0000
ROA not before: Fri 28 Feb 2025 16:43:11 +0000
ROA not after: Fri 27 Feb 2026 16:48:11 +0000
asID: 834
IP address blocks: 198.177.58.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 00:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:36:2a:b9:bb:86:f1:78:18:63:55:b5:28:f2:56:d5:01:85:29:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Feb 28 16:43:11 2025 GMT
Not After : Feb 27 16:48:11 2026 GMT
Subject: CN=EBEF82EB55CD0F99E71E81711CFE829CBC1C397F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:a5:49:f6:2b:94:c6:60:72:2f:33:32:30:
85:12:18:4d:2d:14:db:07:c3:7b:15:eb:db:20:a4:
1e:f0:92:52:40:7b:8d:28:6a:f1:e4:a2:00:ad:d7:
73:4b:d4:58:6d:df:71:78:bf:cb:59:38:13:9d:8d:
cd:ce:fb:2c:7a:74:a0:a0:12:a6:ad:c2:7e:39:ea:
36:58:c5:bc:bf:e3:55:88:55:48:dc:b2:7a:29:a1:
19:52:19:5f:74:57:11:6f:7a:eb:b6:2d:c6:6e:18:
9e:6b:5e:90:8e:95:64:35:05:ea:7d:4a:51:16:0a:
71:4f:47:2e:0b:e1:47:41:26:39:54:35:56:68:06:
9e:f9:0e:37:25:4e:75:66:00:e4:bf:8e:a5:17:ec:
c3:9d:d2:ce:88:5b:53:c1:34:4c:f9:f6:be:62:b6:
b4:77:f0:dc:fd:79:4f:8f:ea:85:b8:d4:d4:55:ca:
9c:3a:95:37:da:9f:32:7e:2c:28:ca:29:f4:8f:bc:
e6:2d:16:32:d5:a9:43:31:ea:21:1f:8c:c7:6e:b9:
43:12:77:b3:e9:50:b3:0d:14:b3:e3:9e:1a:00:1b:
98:7e:be:0e:66:ac:81:18:90:97:7e:17:50:9f:26:
7e:82:26:be:dd:9d:9e:fd:45:98:3e:dd:a8:a0:7d:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EF:82:EB:55:CD:0F:99:E7:1E:81:71:1C:FE:82:9C:BC:1C:39:7F
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.177.58.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:c0:97:ea:f9:ad:2d:13:59:45:6c:b4:77:f5:67:c9:c8:36:
77:be:1f:49:62:42:ac:d1:50:a1:67:ac:d7:22:5f:7c:ab:d9:
c4:7e:6f:33:7e:b6:23:65:59:a4:2b:62:bf:2f:7c:bb:41:a8:
d3:48:1f:60:84:7e:ba:e8:46:6f:37:f5:11:0b:f9:07:79:a1:
1e:6a:07:86:f6:a5:c8:4a:86:6b:1e:75:9d:08:e3:e7:ac:64:
84:d2:80:ee:ab:8e:39:72:9f:84:56:e2:93:ab:0f:47:ec:8f:
66:de:cf:61:94:4f:81:dc:9e:9a:df:b7:9c:e1:b8:15:95:d5:
81:16:00:d1:1c:51:fa:e5:83:29:61:f2:e2:50:e8:59:df:e0:
b2:76:3c:ac:0b:a9:d0:1f:7e:2d:df:5e:de:b3:b2:ce:7f:88:
97:05:78:16:bb:60:0d:cf:dd:e4:8c:ed:c5:3d:d1:08:00:62:
2a:e4:3f:7b:7d:d7:58:0b:89:95:44:cb:4a:95:bf:b1:bf:6a:
71:06:17:5d:f3:ed:a6:b3:b2:fb:e4:d6:c0:ea:76:c2:ab:68:
63:cc:ec:55:cc:66:17:31:32:f4:0b:3d:37:f8:40:ba:26:60:
c3:c7:15:94:63:ec:f0:60:4c:9a:5e:f6:b8:bd:3b:e2:3d:58:
eb:0e:72:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:43:11 2025 by rpki-client