Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e20383334.roa
File: 39352e3231342e3137362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 6DQXkbREuIwFFhRMn283crXs8irzypYWPIugfCbDMx4=
Subject key identifier: 4A:40:53:16:F5:9B:18:33:E9:2B:CC:7F:8E:22:92:E0:76:4C:67:93
Certificate issuer: /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial: 42425E9FF7D5E9E56F52DE0E3BC5297DE5F70DB3
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e20383334.roa
Signing time: Thu 08 May 2025 02:21:28 +0000
ROA not before: Thu 08 May 2025 02:16:28 +0000
ROA not after: Thu 07 May 2026 02:21:28 +0000
asID: 834
IP address blocks: 95.214.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 May 2025 08:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:42:5e:9f:f7:d5:e9:e5:6f:52:de:0e:3b:c5:29:7d:e5:f7:0d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Validity
Not Before: May 8 02:16:28 2025 GMT
Not After : May 7 02:21:28 2026 GMT
Subject: CN=4A405316F59B1833E92BCC7F8E2292E0764C6793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:8e:1f:02:b9:c4:9b:da:81:98:73:a3:18:
76:54:8e:ac:a5:e4:26:88:3e:b0:72:c3:56:55:d1:
3b:fc:a3:fa:f3:32:59:88:d8:1d:f7:7f:cf:10:98:
2f:c5:0c:a7:48:ae:38:87:9b:6c:86:d0:12:da:9e:
06:be:83:46:f8:3c:a0:2a:ff:59:82:05:ee:5c:1a:
fa:63:00:18:8a:5a:fc:e1:92:3e:1e:14:2e:2f:89:
a9:41:bc:97:3f:b7:11:49:8c:a8:0d:11:a1:a9:e0:
62:82:cb:51:1a:55:7a:11:90:45:13:bd:58:c3:0d:
f5:74:57:23:d8:98:7f:60:ae:49:b5:37:f6:66:58:
88:16:b5:5c:55:fc:ab:f4:53:dd:f2:dd:ea:ef:be:
7d:b7:ee:be:f0:22:9f:4e:a8:0d:85:fc:7e:ef:3a:
b5:e7:44:0d:1e:a4:00:39:fd:ef:2c:4f:4b:04:6f:
07:34:0f:89:ee:ac:55:be:8c:91:cc:c9:b8:e1:37:
51:7f:c1:2f:36:45:57:0a:e0:8e:2a:e0:f1:22:95:
d7:3c:5f:9f:70:6b:df:36:53:b1:21:0b:0f:21:24:
13:dd:29:88:0c:b4:04:77:6e:00:1f:03:a2:68:77:
81:e8:56:f5:4e:f1:b3:9d:33:2d:73:bb:96:11:44:
e6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:40:53:16:F5:9B:18:33:E9:2B:CC:7F:8E:22:92:E0:76:4C:67:93
X509v3 Authority Key Identifier:
keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.176.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ed:bc:df:a2:45:fa:44:b7:29:51:7c:51:95:61:5b:2e:26:
d4:69:fd:e0:59:55:e0:2b:0d:ae:95:26:c5:a3:c6:04:94:4a:
ac:fa:fb:d6:fe:ac:4c:a8:39:f1:15:39:b9:3d:4a:37:2f:79:
22:6a:a5:17:54:03:9a:98:90:d7:69:b2:5e:04:8a:41:a0:bf:
78:66:03:f8:3e:cf:40:da:7d:66:d8:f0:31:81:36:4e:ad:8b:
c1:f1:67:80:14:c6:2d:8b:51:02:7a:7d:20:45:28:96:5a:25:
de:0a:d9:f7:c9:1f:d8:a5:98:07:b0:e6:2f:a7:11:f9:07:18:
d6:fb:72:8c:a5:13:1a:a1:f1:f8:c0:59:2d:53:98:64:db:92:
65:36:71:63:17:5a:3f:72:16:e2:5c:e1:e1:17:ed:50:bf:9f:
33:5e:f5:47:72:f0:26:90:3c:a1:cf:b8:02:a0:04:8e:1d:87:
17:b8:e4:4e:b8:e5:23:b5:81:ae:44:dd:80:cf:84:57:eb:95:
38:0d:9e:33:e3:92:d5:2a:cb:b3:d7:ca:0d:9b:54:ac:84:fb:
89:3a:98:c5:e0:8e:2e:4a:0a:ea:17:98:6b:f9:70:27:63:c7:
f0:76:47:5b:24:6e:4d:cb:ea:2f:36:a0:56:a4:67:c7:25:6b:
fa:8e:cf:84
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUQkJen/fV6eVvUt4OO8UpfeX3DbMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTVlNTUzOGEyNjk0NzIxMmJiMDkwODI4YmNlODJkNTBl
NDRhZWM4MTc0NzkyZWVjZjAwHhcNMjUwNTA4MDIxNjI4WhcNMjYwNTA3MDIyMTI4
WjAzMTEwLwYDVQQDEyg0QTQwNTMxNkY1OUIxODMzRTkyQkNDN0Y4RTIyOTJFMDc2
NEM2NzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7eOHwK5xJva
gZhzoxh2VI6speQmiD6wcsNWVdE7/KP68zJZiNgd93/PEJgvxQynSK44h5tshtAS
2p4GvoNG+DygKv9ZggXuXBr6YwAYilr84ZI+HhQuL4mpQbyXP7cRSYyoDRGhqeBi
gstRGlV6EZBFE71Yww31dFcj2Jh/YK5JtTf2ZliIFrVcVfyr9FPd8t3q7759t+6+
8CKfTqgNhfx+7zq150QNHqQAOf3vLE9LBG8HNA+J7qxVvoyRzMm44TdRf8EvNkVX
CuCOKuDxIpXXPF+fcGvfNlOxIQsPISQT3SmIDLQEd24AHwOiaHeB6Fb1TvGznTMt
c7uWEUTmPwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEpAUxb1mxgz6SvMf44ikuB2
TGeTMB8GA1UdIwQYMBaAFD9f5uXrCT1TsaGWISzfIY0nJfEQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3YzU3MzMwNTFjLzAv
M0Y1RkU2RTVFQjA5M0Q1M0IxQTE5NjIxMkNERjIxOEQyNzI1RjExMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzQyNjUxMzFmLWYzZmUtNGJkMy05MzA5LThmMDQ4Y2MyM2I3ZS85NWU1
NTM4YTI2OTQ3MjEyYmIwOTA4MjhiY2U4MmQ1MGU0NGFlYzgxNzQ3OTJlZWNmMC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3
YzU3MzMwNTFjLzAvMzkzNTJlMzIzMTM0MmUzMTM3MzYyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABf1rAwDQYJKoZIhvcNAQELBQADggEB
AGHtvN+iRfpEtylRfFGVYVsuJtRp/eBZVeArDa6VJsWjxgSUSqz6+9b+rEyoOfEV
Obk9SjcveSJqpRdUA5qYkNdpsl4EikGgv3hmA/g+z0DafWbY8DGBNk6ti8HxZ4AU
xi2LUQJ6fSBFKJZaJd4K2ffJH9ilmAew5i+nEfkHGNb7coylExqh8fjAWS1TmGTb
kmU2cWMXWj9yFuJc4eEX7VC/nzNe9Udy8CaQPKHPuAKgBI4dhxe45E645SO1ga5E
3YDPhFfrlTgNnjPjktUqy7PXyg2bVKyE+4k6mMXgji5KCuoXmGv5cCdjx/B2R1sk
bk3L6i82oFakZ8cla/qOz4Q=
-----END CERTIFICATE-----
Generated at Mon May 12 01:06:03 2025 by rpki-client