Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e20383334.roa
File: 3231362e3234372e3130342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: A8mVtM7wT7kd0LinlGRjnwTLEx6qmWuwWqN0RIJE46s=
Subject key identifier: F9:FE:2F:24:5B:8B:49:5B:10:03:D5:EA:45:B7:6D:C0:5B:A6:C0:34
Certificate issuer: /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial: 0333739C8451A78AA39D88562E18D240B36A2D8F
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e20383334.roa
Signing time: Tue 26 Nov 2024 11:13:11 +0000
ROA not before: Tue 26 Nov 2024 11:08:11 +0000
ROA not after: Tue 25 Nov 2025 11:13:11 +0000
asID: 834
IP address blocks: 216.247.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Nov 2024 21:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:33:73:9c:84:51:a7:8a:a3:9d:88:56:2e:18:d2:40:b3:6a:2d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Validity
Not Before: Nov 26 11:08:11 2024 GMT
Not After : Nov 25 11:13:11 2025 GMT
Subject: CN=F9FE2F245B8B495B1003D5EA45B76DC05BA6C034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:83:32:66:c1:05:d6:98:fc:37:91:63:09:
67:7d:67:7f:83:54:85:7f:00:71:d5:08:a6:39:79:
4e:69:98:b1:29:54:fb:5f:ef:91:35:f0:a9:60:36:
ba:db:82:3a:73:4d:35:13:ea:a0:8c:2b:4b:b0:59:
40:fa:12:ec:22:5b:7e:97:2e:20:1f:c0:7a:db:ce:
fe:1a:31:5c:e9:2f:c6:32:b5:79:da:92:7e:eb:a8:
98:c7:b0:1d:20:83:54:5c:d1:5d:be:48:59:8e:3d:
01:a0:11:d4:8f:0f:c7:21:08:32:b1:ac:9d:b1:d6:
4b:4a:a3:ec:61:74:45:b7:d1:d3:ba:13:1b:39:2e:
9d:a1:9b:42:59:53:8b:72:f3:e4:9b:77:a3:fd:f3:
b2:ac:a0:bc:84:07:d2:23:54:07:7c:31:a9:6a:f7:
af:cd:8b:a5:ed:24:18:e6:f5:f1:38:de:b4:64:0b:
16:c5:ce:ba:6f:c4:bf:82:00:cf:bd:6f:d0:89:bd:
a9:40:f7:02:b9:b3:c9:50:5b:28:cc:a8:c2:13:27:
92:17:58:ad:d3:6c:78:e9:25:db:d9:9d:74:d3:c9:
97:db:38:33:31:83:58:6d:6b:cc:9d:48:65:cc:db:
2d:b5:6d:4a:ad:73:89:a4:20:fe:4f:35:ef:d8:a6:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FE:2F:24:5B:8B:49:5B:10:03:D5:EA:45:B7:6D:C0:5B:A6:C0:34
X509v3 Authority Key Identifier:
keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.247.104.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a3:bf:d1:e1:bd:41:0f:57:82:db:6d:1e:b0:34:e6:30:23:
0c:12:9b:85:7b:90:34:3c:ed:27:7d:ab:c8:b9:43:18:dc:cd:
08:6b:d8:5d:65:88:35:bf:b0:09:e2:f3:36:d9:64:f8:9d:fc:
ed:45:5f:cb:6e:9a:70:6b:80:79:01:5a:ce:e0:03:2b:e8:8b:
f0:23:c8:72:d9:b5:cd:17:d2:13:e3:65:4e:d6:4e:02:0b:42:
91:39:6e:9c:08:2e:96:c5:1d:f7:d5:a5:00:6e:75:e5:68:7d:
b6:93:51:70:87:41:bd:1f:3f:46:38:12:7f:eb:83:bf:01:a6:
f1:0a:71:a3:e7:68:51:d6:e6:58:d6:ed:8a:b0:12:56:fe:df:
34:6b:ba:1d:a9:8e:5b:33:67:60:78:fe:dd:64:a6:2c:7e:82:
76:33:82:86:09:03:3a:f5:b8:c2:89:54:14:c8:64:d6:31:e1:
dd:80:21:f1:68:60:e7:fd:ab:18:8f:d6:ba:9a:5a:ce:7c:22:
a8:c8:9c:88:02:61:48:7d:ce:92:ea:18:b7:f3:39:00:26:a5:
55:6f:dc:b1:37:c9:30:62:9a:72:38:fe:49:ea:e3:5b:50:9f:
5c:f9:3a:4d:47:95:fa:b0:8c:4f:bb:86:5f:2b:cd:4a:98:32:
29:b8:52:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:09:50 2025 by rpki-client