Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39322e302f32342d3234203d3e203631333137.roa
File: 39312e3233382e39322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 6so+ewLZFlQISs71RvUxlU0laqzDO/V70+0d2kBPI+4=
Subject key identifier: 45:48:94:45:06:E3:15:2B:49:FB:96:DF:3F:F4:3C:E9:CF:00:84:B3
Certificate issuer: /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial: 2A5867C72FBBD307567B9D73567B096CF5E13FEB
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39322e302f32342d3234203d3e203631333137.roa
Signing time: Wed 23 Apr 2025 05:39:13 +0000
ROA not before: Wed 23 Apr 2025 05:34:13 +0000
ROA not after: Wed 22 Apr 2026 05:39:13 +0000
asID: 61317
IP address blocks: 91.238.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 11:22:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:58:67:c7:2f:bb:d3:07:56:7b:9d:73:56:7b:09:6c:f5:e1:3f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Validity
Not Before: Apr 23 05:34:13 2025 GMT
Not After : Apr 22 05:39:13 2026 GMT
Subject: CN=4548944506E3152B49FB96DF3FF43CE9CF0084B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:c5:7f:b2:97:51:7a:a8:39:01:ed:2c:68:
56:09:2a:80:e9:9c:bd:24:5e:9d:84:a5:a9:84:23:
05:d7:9b:88:41:e3:75:d4:84:45:9c:2e:98:98:fd:
32:0b:04:30:c8:8a:9b:1c:11:e9:f8:ae:86:cd:b1:
15:76:c2:31:e9:c8:8e:e6:30:00:89:73:2a:16:fd:
5b:3c:ed:b6:81:43:de:1d:e0:37:be:92:16:dd:59:
c8:d3:a3:c9:68:0f:b3:ec:98:5a:27:ce:e7:e4:81:
c8:0a:d6:9d:72:e9:c2:af:32:b4:a6:b4:b8:be:35:
7d:d0:f9:58:ff:9f:21:8e:87:60:5f:36:bb:44:77:
e2:49:40:cb:3b:b0:d4:5d:e9:8f:2c:3f:f0:11:a7:
3a:f6:4b:54:3c:92:cb:9b:15:5b:b4:83:0e:68:0b:
0c:4d:6b:72:81:8b:97:a4:2b:a5:e4:0f:75:9a:3c:
31:b0:2b:62:1b:cc:8c:17:80:ac:e0:db:49:9c:be:
38:ad:2e:88:a2:35:a8:7c:4c:87:9a:07:8f:72:da:
8e:56:ee:6b:cc:67:ed:ba:79:b9:0e:a4:ab:0f:fa:
ac:a8:7b:85:bd:a1:0f:a0:80:42:5a:45:aa:41:28:
75:c8:96:99:a0:a8:80:12:5d:64:d0:65:af:ad:f3:
af:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:48:94:45:06:E3:15:2B:49:FB:96:DF:3F:F4:3C:E9:CF:00:84:B3
X509v3 Authority Key Identifier:
keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.92.0/24
Signature Algorithm: sha256WithRSAEncryption
12:dc:f6:1d:e1:c0:f1:d7:13:14:26:3e:72:2d:17:64:fb:cb:
5f:c4:ac:93:55:c2:36:f2:da:e7:98:ba:de:58:3f:66:c7:4f:
02:56:ae:f1:e2:f7:cc:0c:76:ad:60:ee:4d:48:5b:81:8b:55:
67:1d:6c:f4:d1:f3:34:84:01:78:c6:70:b5:5c:68:e5:e8:2c:
54:f7:6e:fd:cc:26:53:02:cc:cc:f0:03:41:63:e9:68:bf:53:
7d:e4:f2:7a:44:a7:bb:3c:11:2b:69:c8:fd:1b:b9:1a:d5:04:
c2:23:c4:ab:e8:0a:a0:76:7b:13:65:ef:c3:d2:63:1f:dc:af:
97:88:51:1a:96:ba:ea:6e:61:c2:50:04:13:ed:e8:97:0d:d4:
29:67:1b:b0:a8:3e:6f:45:b0:95:a7:91:5e:03:c6:40:56:b0:
5b:ed:79:c5:5e:f4:e9:9d:87:04:96:d3:12:f3:e2:1d:c9:a4:
a4:4d:87:71:83:05:9c:50:5b:3a:d5:fc:f3:88:f3:d5:9c:ca:
1b:93:3f:88:88:dd:28:9b:7e:5e:c8:34:34:2e:27:1c:8f:31:
99:bb:50:97:55:21:6c:88:66:4a:e8:e5:57:51:cf:2e:31:2e:
42:5b:25:00:96:7b:d5:25:4b:ad:99:d0:13:ba:90:07:17:d1:
7d:75:4d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:36:43 2025 by rpki-client