Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e20323135323837.roa
File: 36392e3136362e3232352e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: dF1Q2VKSNKTlUnN7Td6FftJ7fuZbmFj362ZW4b3sSGc=
Subject key identifier: 8F:48:BE:0E:C4:FB:39:32:0C:98:BD:AE:FB:99:73:49:D2:45:A7:96
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 0ED47E2B6C979EE9C06C8A39110153ADBE06971B
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e20323135323837.roa
Signing time: Wed 18 Dec 2024 11:48:08 +0000
ROA not before: Wed 18 Dec 2024 11:43:08 +0000
ROA not after: Wed 17 Dec 2025 11:48:08 +0000
asID: 215287
IP address blocks: 69.166.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d4:7e:2b:6c:97:9e:e9:c0:6c:8a:39:11:01:53:ad:be:06:97:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Dec 18 11:43:08 2024 GMT
Not After : Dec 17 11:48:08 2025 GMT
Subject: CN=8F48BE0EC4FB39320C98BDAEFB997349D245A796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:3c:1b:75:16:58:96:07:fa:25:45:10:62:
bb:48:5a:c2:70:8b:82:e6:7c:9c:79:86:97:58:23:
c9:e5:6f:f4:1a:b2:36:da:3f:bb:3c:3e:4e:56:12:
03:1c:22:41:60:ce:01:50:98:c0:a0:e5:82:bf:d9:
76:b0:27:8e:a7:8f:c2:0a:9e:3e:ce:7c:27:eb:fb:
5c:93:28:c7:68:8b:12:3e:68:74:ca:b6:4c:97:de:
0d:32:4f:d7:7d:ea:99:3f:f2:57:f5:8a:b3:fa:dd:
a7:64:33:c8:ce:7e:3f:b0:c4:47:ef:16:e4:04:ff:
06:f1:bd:1f:16:53:e5:80:59:76:41:26:22:a7:c7:
e6:d8:12:45:21:26:a4:a4:92:b5:ba:8e:25:d0:16:
21:2d:9e:de:39:e1:88:d7:84:25:92:78:74:6b:71:
d4:b7:fd:b2:12:2f:35:c2:63:d5:1a:96:ff:c4:7c:
9c:19:d0:f8:7b:ca:f2:af:39:9b:78:08:34:d1:f0:
6d:27:40:6b:fc:1d:f1:50:3f:b0:bf:c2:5a:40:56:
99:58:d1:5a:96:a0:e3:ca:a2:a3:72:ee:64:2a:1d:
4b:01:b5:95:d5:e1:e1:f1:de:97:e5:2f:fe:33:5b:
62:95:1f:25:67:be:2a:81:70:48:a5:2e:4d:99:bd:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:48:BE:0E:C4:FB:39:32:0C:98:BD:AE:FB:99:73:49:D2:45:A7:96
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.166.225.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9a:d2:91:65:36:77:c1:2b:04:2d:05:55:fc:59:b9:38:c0:
fe:66:48:a7:a8:85:a7:7a:8b:89:c7:65:40:be:59:11:09:4d:
87:4e:72:1e:c0:b0:13:de:78:20:3b:88:da:22:39:79:24:14:
0a:8d:e7:1d:c0:ed:5b:c2:1c:78:4e:08:01:a6:14:f9:0a:d3:
08:8f:26:16:91:19:c5:83:5d:aa:4f:43:f1:2b:c4:44:fc:97:
19:96:79:d8:a5:30:0a:a4:62:de:cc:ed:eb:c6:e7:b1:fd:09:
92:bc:ab:c7:ac:25:26:23:2b:df:5e:25:4c:cc:28:6f:eb:ba:
b9:7a:a3:8c:19:ea:db:a3:c5:96:7a:6b:96:54:b9:a3:a6:85:
ea:49:6f:3d:f9:2c:7b:2e:2e:02:14:8c:25:ef:0b:85:48:08:
98:13:f6:d7:af:57:d8:19:a7:24:dc:d1:39:27:27:62:a0:3f:
68:77:81:70:03:16:b3:79:d5:5b:65:23:8e:bc:09:9d:30:9d:
f5:4f:f9:d6:49:77:04:6a:44:c9:0a:c1:00:be:dd:80:be:28:
58:99:10:ae:d6:ab:62:31:b8:eb:ad:c7:44:ff:ba:2e:cc:b4:
95:58:13:b3:83:87:31:dd:d6:7e:4d:a8:ce:6a:56:98:c3:c4:
63:f7:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:50:25 2025 by rpki-client