Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/32332e3133332e382e302f32342d3234203d3e20393435.roa
File: 32332e3133332e382e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier: 8bSDHunJoJxSI9+rSsEMO85cz5oFYsPy66urZfeQSsA=
Subject key identifier: 0F:AF:29:C2:C3:32:CA:F2:3E:20:21:24:39:FD:0F:74:2E:EE:71:DE
Certificate issuer: /CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
Certificate serial: 21ACC59CD1F648A0F4C571C3B89AD7C7536038F9
Authority key identifier: 26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/32332e3133332e382e302f32342d3234203d3e20393435.roa
Signing time: Fri 28 Feb 2025 00:29:28 +0000
ROA not before: Fri 28 Feb 2025 00:24:28 +0000
ROA not after: Fri 27 Feb 2026 00:29:28 +0000
asID: 945
IP address blocks: 23.133.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 00:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ac:c5:9c:d1:f6:48:a0:f4:c5:71:c3:b8:9a:d7:c7:53:60:38:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
Validity
Not Before: Feb 28 00:24:28 2025 GMT
Not After : Feb 27 00:29:28 2026 GMT
Subject: CN=0FAF29C2C332CAF23E20212439FD0F742EEE71DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:72:a2:0c:24:05:bf:7b:29:af:e9:6a:c4:
8a:6d:b8:40:97:04:3a:7e:d9:78:e7:63:46:85:5b:
db:b8:ec:6b:f6:31:cd:6d:1a:04:85:f9:49:7a:79:
4d:1c:13:5d:6b:69:20:33:9c:17:6b:8f:48:f2:91:
3e:94:91:4c:b2:b5:3f:63:84:41:ef:4f:97:f6:a8:
67:34:66:27:ed:6b:97:1b:84:ff:32:43:86:6a:dc:
6b:6c:13:3b:fb:f3:b3:da:4b:a1:c0:ff:8c:51:e8:
17:4c:71:ed:8a:85:87:ba:5c:a2:d9:3f:bd:2c:a4:
f0:61:de:2c:bd:a7:a1:e0:2a:a0:df:bf:92:77:10:
e6:5b:e9:71:1d:47:ec:60:de:df:ce:07:ec:9a:16:
3b:9e:f9:3d:1a:94:b8:37:c4:9c:6f:8b:a0:f1:fd:
f0:d8:c7:fd:22:1b:db:65:17:5b:0d:30:b8:bd:95:
b1:d7:3a:7e:bb:ee:66:f9:f0:0b:dd:0c:77:ed:d6:
63:7c:1b:a8:9b:74:c2:7a:03:26:bc:66:3b:05:e5:
84:47:26:d6:b6:9a:a3:e7:2d:38:bb:7b:31:ee:44:
82:d0:6d:d7:27:80:f4:4e:c6:30:05:d9:33:b0:75:
62:d6:83:46:b4:de:e8:89:5c:1e:84:43:6c:2b:07:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AF:29:C2:C3:32:CA:F2:3E:20:21:24:39:FD:0F:74:2E:EE:71:DE
X509v3 Authority Key Identifier:
keyid:26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/32332e3133332e382e302f32342d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.133.8.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:da:3a:c5:65:45:e8:6a:f1:e6:4d:04:0f:e8:90:e1:61:d8:
24:ce:40:6a:1a:10:f9:5a:bf:2c:41:72:25:95:26:f6:f6:08:
8e:24:72:be:8e:98:93:ad:ad:5c:c8:5a:da:ab:35:2a:19:5c:
10:9a:9f:4b:bd:0b:6a:59:81:f8:99:b7:b1:71:aa:e3:4a:3b:
23:b8:13:3c:df:37:61:a4:b6:5c:8e:8c:ed:32:3b:f9:17:80:
17:d9:5d:7e:7d:a5:52:31:fa:1b:76:eb:47:f5:47:08:18:f0:
bc:a2:40:52:6f:5b:c0:57:60:dd:5f:76:70:27:cc:07:cd:10:
5f:46:18:83:d2:51:3d:00:7b:56:95:e9:80:e9:04:fa:7b:64:
fa:ad:40:ac:29:f7:42:d3:28:f3:0a:fb:02:38:16:8b:bf:02:
09:ab:1d:bb:80:12:ba:93:57:61:8b:04:5b:70:c5:8e:e7:90:
7f:37:59:4a:0e:84:24:b3:6f:f3:85:26:a6:44:80:0b:aa:9b:
88:de:27:a6:3a:d4:13:89:da:b0:8a:4c:bc:86:3e:cb:81:6d:
92:03:52:db:78:60:98:2e:40:0d:d7:d8:5e:27:be:31:40:fb:
9b:26:ee:8f:fc:f4:ae:8f:d0:7e:48:73:8f:10:bd:97:59:fe:
11:cb:a7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:08:48 2025 by rpki-client