Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e20383334.roa
File: 36342e3235332e39302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ppPMYMvxNeaAyzQfvhODgRylMDZantW5Cd5ft00J4Ws=
Subject key identifier: 46:65:DF:56:67:69:73:29:8F:0E:62:2B:88:D6:09:6D:6A:BC:B6:FB
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 3877FEDADD182DBCBE835164DC359F3D6704FC3F
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e20383334.roa
Signing time: Fri 03 Jan 2025 00:04:02 +0000
ROA not before: Thu 02 Jan 2025 23:59:02 +0000
ROA not after: Fri 02 Jan 2026 00:04:02 +0000
asID: 834
IP address blocks: 64.253.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 18:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:77:fe:da:dd:18:2d:bc:be:83:51:64:dc:35:9f:3d:67:04:fc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Jan 2 23:59:02 2025 GMT
Not After : Jan 2 00:04:02 2026 GMT
Subject: CN=4665DF56676973298F0E622B88D6096D6ABCB6FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:94:61:26:43:3b:39:e1:0a:a6:6a:58:a7:
a6:1c:a6:d1:a9:31:44:05:60:d6:49:0c:a7:8c:e1:
16:5f:49:78:1b:d6:25:2a:a7:41:38:43:72:39:9e:
50:74:cd:18:b9:cb:b3:b1:9e:03:38:ea:f9:c4:a9:
39:d5:04:fd:34:84:81:81:da:2a:fa:4b:74:6b:9b:
7e:e0:ed:39:ee:ae:47:79:a2:4a:b0:8e:7d:7b:2f:
5d:d7:20:53:c9:32:66:ae:d7:28:0b:49:d9:ef:89:
91:d9:01:16:e4:3a:9a:2e:16:2d:46:a2:d9:81:81:
d0:4b:d4:db:84:2f:98:dc:c8:a4:47:71:49:8b:cb:
d6:83:95:67:2c:f4:21:28:ff:c8:1e:db:6b:b4:12:
d4:72:81:9b:88:09:2a:49:dd:bc:2a:cf:d0:97:56:
5e:79:fc:82:6b:bf:b2:fa:cc:76:ca:2a:3a:b6:8d:
53:68:70:0d:6e:b9:f7:5b:01:40:32:6c:db:28:6c:
f9:81:17:c7:1b:29:e4:b3:0f:80:a5:c0:d1:97:ab:
bf:1b:0a:a5:e0:ba:81:4e:84:66:10:ab:3e:46:2d:
72:34:f0:8c:42:3e:b5:8a:ab:79:cc:a9:0a:8a:69:
52:9e:5d:00:f2:83:15:e0:27:4a:fa:04:ed:39:17:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:65:DF:56:67:69:73:29:8F:0E:62:2B:88:D6:09:6D:6A:BC:B6:FB
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.253.90.0/24
Signature Algorithm: sha256WithRSAEncryption
03:36:8b:44:1e:8b:45:aa:8c:ed:de:d5:fe:c2:bb:13:15:b8:
a8:64:17:71:c1:1e:5c:1e:24:02:15:53:d5:05:b6:3b:63:00:
d3:02:ef:41:20:5c:69:c6:5a:6f:b2:f1:ae:2e:c1:2e:97:dd:
e4:17:f1:5c:71:e0:b5:24:1b:97:00:3a:b6:da:4d:f5:f7:27:
b7:ef:f3:ec:c1:48:2c:18:a7:31:02:16:82:39:27:84:c6:3c:
78:3b:09:84:5a:c2:cc:15:d8:81:cc:82:e2:83:bb:0b:d4:b9:
72:9c:1e:b1:4a:74:db:a1:59:0d:f0:a2:12:95:07:38:44:6a:
1e:d0:0e:3d:45:1e:85:99:51:4d:7e:2d:5a:1a:d7:73:b4:a0:
d6:67:54:eb:87:e0:29:c8:52:20:ec:84:af:50:07:49:af:69:
0e:e2:c4:de:71:bb:dd:2c:9f:d3:1c:6a:56:de:40:6e:da:86:
1e:a1:50:d5:df:9a:f5:4a:aa:52:7a:e6:d6:f1:09:f9:3a:b1:
19:42:6a:f6:0f:5b:4c:46:db:43:3b:46:96:14:8a:78:25:ae:
26:54:d3:9f:08:b4:fd:c7:5c:30:07:8f:04:cf:a5:00:cc:5e:
97:d8:4a:e5:3d:ea:b7:70:d1:2e:4c:cf:7d:5e:9d:32:13:c3:
f8:88:2e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:45:17 2025 by rpki-client