Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233312e302f32342d3234203d3e20333938343635.roa
File: 36392e3136362e3233312e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier: ra94Fvs0MAF0pgXTVOmrFnGNv4GOoVlfUPBGyusHr3M=
Subject key identifier: B6:40:80:BE:29:68:35:EA:0A:EE:05:EE:FD:32:6F:8B:17:6E:EF:00
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 3756D55A50024E9CDFD0B66549714989E679F9C7
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233312e302f32342d3234203d3e20333938343635.roa
Signing time: Wed 18 Dec 2024 10:52:19 +0000
ROA not before: Wed 18 Dec 2024 10:47:19 +0000
ROA not after: Wed 17 Dec 2025 10:52:19 +0000
asID: 398465
IP address blocks: 69.166.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Jan 2025 10:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:56:d5:5a:50:02:4e:9c:df:d0:b6:65:49:71:49:89:e6:79:f9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Dec 18 10:47:19 2024 GMT
Not After : Dec 17 10:52:19 2025 GMT
Subject: CN=B64080BE296835EA0AEE05EEFD326F8B176EEF00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:76:a9:3f:66:11:9a:b2:68:04:58:e5:3c:
fe:8a:dc:28:8e:df:29:6d:15:9b:e4:bc:ab:97:9d:
fc:2b:db:71:bc:5e:9b:61:c8:90:22:ba:d7:df:06:
64:f3:d6:ec:6f:9f:bb:aa:3c:2e:5c:10:f9:63:77:
7c:30:ba:00:48:86:5b:14:d6:b3:ab:db:30:6b:42:
57:d3:57:2d:8b:ec:ce:ef:af:33:78:a9:28:b9:d1:
cc:3a:cf:a3:16:84:ae:5b:d9:86:24:86:55:03:cd:
f0:8f:39:bc:4d:01:32:ec:3b:fc:75:b0:5e:6b:93:
2a:a1:9d:24:e3:92:89:d8:83:77:ac:39:b5:c4:62:
6d:a0:69:26:46:4d:64:1c:95:8f:03:52:fb:b6:ed:
2e:4b:00:9c:5b:94:34:0d:2b:60:59:57:ea:e9:a5:
4d:61:78:7a:32:01:7c:46:37:30:e6:b7:a9:14:59:
21:05:52:4d:e5:17:62:47:34:f5:36:24:6d:ce:e6:
ef:69:2f:6e:15:98:b8:59:ef:ae:d2:59:d2:20:4b:
7f:87:f2:94:b1:20:e6:d5:65:10:aa:8e:d4:3b:e1:
23:22:66:03:cb:98:07:42:bf:23:a9:38:68:47:49:
f0:b3:69:54:89:a8:7c:51:9f:cb:8b:4a:6e:eb:b2:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:40:80:BE:29:68:35:EA:0A:EE:05:EE:FD:32:6F:8B:17:6E:EF:00
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233312e302f32342d3234203d3e20333938343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.166.231.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b5:3f:7a:63:df:e5:89:76:ef:a4:f7:06:4d:93:38:70:55:
06:7a:6e:11:87:5c:d6:a5:d8:d1:b4:35:19:bf:8d:36:0a:56:
37:cd:88:48:20:6b:76:a3:3b:7b:c7:85:d5:9b:1d:da:41:fc:
65:09:12:60:b3:42:c9:86:b4:0b:2a:ef:f4:5d:6b:6d:0a:4c:
59:7c:99:d7:5f:9e:e8:eb:fd:34:0b:ea:01:d8:3a:19:ac:d2:
60:5a:29:fd:9e:dd:72:df:5d:91:38:95:23:ff:5c:3f:ae:43:
ca:be:a8:85:22:79:5d:5c:5c:6d:53:d8:a1:d1:e8:0e:64:f5:
19:b8:67:c3:51:c6:cb:6e:fe:95:a2:a2:d1:fb:06:23:54:1c:
78:54:18:65:1d:e9:66:07:40:7c:a3:fa:e1:ba:6d:b6:89:e9:
ff:4d:15:65:82:4e:18:68:67:e1:5a:d2:bd:cf:b2:4c:75:19:
6f:75:ac:06:1d:8c:db:97:6c:5d:59:c9:83:bd:87:ca:13:b2:
8b:64:af:de:c5:a0:68:ab:47:af:61:3f:04:b9:62:b8:cd:ca:
8c:82:53:ed:a3:d0:06:23:fe:ec:d7:18:f9:75:a9:6f:9d:58:
ed:94:e1:af:b1:4d:42:1b:87:b6:75:21:74:ee:1c:9a:2d:f4:
3c:d0:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:57:18 2025 by rpki-client