Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e20383334.roa
File: 3231322e3131352e3132372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: UYLmevLq3z7Cy9Lq7DryX1+n2AId6gXfTHR164XB4UU=
Subject key identifier: F5:B8:D2:A4:02:96:12:90:80:2E:CB:E3:6C:7F:40:05:86:C0:4D:82
Certificate issuer: /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial: 21D2A2B936484AB300BF2A640C1DE77ECFC666DB
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e20383334.roa
Signing time: Thu 19 Jun 2025 21:44:11 +0000
ROA not before: Thu 19 Jun 2025 21:39:11 +0000
ROA not after: Thu 18 Jun 2026 21:44:11 +0000
asID: 834
IP address blocks: 212.115.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jun 2025 18:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d2:a2:b9:36:48:4a:b3:00:bf:2a:64:0c:1d:e7:7e:cf:c6:66:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Validity
Not Before: Jun 19 21:39:11 2025 GMT
Not After : Jun 18 21:44:11 2026 GMT
Subject: CN=F5B8D2A402961290802ECBE36C7F400586C04D82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:32:2e:78:62:48:4e:3f:94:d4:94:62:03:
cd:09:ae:4a:39:8f:b5:31:fe:84:e8:52:c6:95:f6:
bd:e1:5d:7f:0c:6b:3f:81:45:87:28:cc:2b:27:40:
78:0f:05:cd:dc:18:df:19:af:5f:da:61:ca:35:e5:
44:7e:0c:c8:db:f1:c3:00:c8:5f:a8:8a:5f:eb:e3:
d5:51:02:59:00:3f:6e:4a:d0:63:85:be:d1:73:30:
a9:86:24:11:be:f0:72:93:2a:11:3d:f1:e4:b9:10:
63:30:cf:16:96:37:4e:af:cc:83:6f:62:b5:91:5c:
60:53:16:b0:45:44:9d:d8:d8:a2:da:0d:98:4b:8f:
a9:17:1f:ee:ae:f6:e2:92:72:ca:78:10:91:66:5f:
31:5e:a9:0a:07:ed:29:46:c2:7f:76:dc:de:21:79:
e7:1c:73:03:ff:69:48:54:82:85:53:2b:33:3a:32:
24:b8:e3:cf:30:ee:f7:87:f7:d2:4e:39:9a:20:b7:
bd:b7:0c:e1:9d:d4:7e:a4:82:41:fa:c6:6f:2d:3a:
df:99:b9:69:6a:09:b7:86:d1:cf:71:b3:55:f7:2b:
91:a1:b9:b8:f8:9a:cb:83:d0:99:97:82:21:9f:3c:
a2:b0:fe:0c:d9:f8:97:ef:46:ed:f9:e2:49:5e:04:
8a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B8:D2:A4:02:96:12:90:80:2E:CB:E3:6C:7F:40:05:86:C0:4D:82
X509v3 Authority Key Identifier:
keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ca:0b:13:e9:3d:7a:bc:29:1d:f5:28:70:05:35:a1:36:6e:
28:88:56:cd:c5:9a:b0:96:17:f4:1c:e1:4c:9a:90:9e:89:27:
ec:f5:ed:2b:01:64:83:65:16:81:5d:e3:aa:7f:f7:16:05:80:
f6:67:5e:27:06:c8:59:56:c1:f7:3f:e6:c1:77:f6:74:93:da:
4a:8e:2c:a0:a9:ad:63:63:cb:68:59:3c:83:b7:0b:aa:be:bc:
59:fb:22:90:52:76:d7:d5:7f:29:dc:d8:3b:f0:27:d3:b0:82:
e2:78:ff:fa:46:82:06:ed:19:6e:f8:e7:50:94:0f:23:d6:f6:
ae:b0:ef:cf:a6:62:ff:8a:40:d7:4c:76:3b:78:cb:97:49:14:
42:58:d5:e4:29:5b:59:05:dd:99:0d:ca:f1:16:9b:c5:b7:3b:
19:4a:ab:cb:05:e3:6d:cb:63:6c:ae:71:e3:ad:7a:89:f7:e6:
1d:23:3c:92:21:70:df:58:41:cf:fa:4a:00:e4:3e:2e:94:37:
8c:c5:7f:76:8e:8b:75:86:92:17:60:d9:18:3a:73:1d:f6:64:
78:1b:a1:1a:c4:8e:23:07:28:e5:cc:31:a3:ea:4e:d1:fe:a8:
51:14:cd:78:ce:62:15:5c:3c:b4:6f:a6:e4:47:1a:51:bf:f5:
41:75:be:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:24:41 2025 by rpki-client