Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e20383334.roa
File: 36392e3136362e3233362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 92mmvaan6hM302DVrmdy8lcILe5TdpaECd3TX0UF6V8=
Subject key identifier: F2:11:A6:4A:81:BD:F7:35:6E:6A:06:D4:5E:FF:82:68:21:AF:A4:D5
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 2FE23654205DA16524000B0213056033343B3EAA
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e20383334.roa
Signing time: Wed 22 Jan 2025 00:01:08 +0000
ROA not before: Tue 21 Jan 2025 23:56:08 +0000
ROA not after: Wed 21 Jan 2026 00:01:08 +0000
asID: 834
IP address blocks: 69.166.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 22:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:e2:36:54:20:5d:a1:65:24:00:0b:02:13:05:60:33:34:3b:3e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Jan 21 23:56:08 2025 GMT
Not After : Jan 21 00:01:08 2026 GMT
Subject: CN=F211A64A81BDF7356E6A06D45EFF826821AFA4D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:b6:30:4d:5e:85:7c:a1:47:4e:81:1c:4e:
02:07:37:de:ee:35:7c:b3:d0:57:9f:13:c6:0d:60:
f3:9f:04:ea:48:ed:82:44:4e:e6:d3:91:42:2a:dc:
34:ea:2f:94:66:48:6a:2c:86:ed:63:1a:32:d6:5d:
7c:b7:39:04:43:04:19:60:92:77:4c:8e:02:48:59:
a0:b5:32:85:e6:53:86:e6:49:ca:13:e8:c1:41:60:
ee:31:00:ed:35:5b:1d:0c:2b:a2:63:db:63:8a:14:
8d:12:47:ac:32:85:43:2a:11:1c:3b:93:2d:e0:73:
70:9f:e8:94:59:1b:01:4b:dd:ea:ce:63:99:37:cc:
d8:c0:86:05:42:8d:66:40:a0:19:7b:83:e0:c0:17:
b7:fc:15:fa:76:ec:90:c5:75:ce:a5:7f:c1:27:86:
02:4b:1d:b1:c7:e7:8f:26:a7:40:46:10:c3:11:fb:
13:f5:5d:ca:7c:c5:a6:5f:6a:39:c7:5a:e9:2b:df:
96:7e:48:0d:1d:a2:a7:71:61:39:25:72:79:4e:ab:
9f:19:a5:be:80:4a:ad:47:bb:46:29:25:c0:2e:03:
64:de:a1:7a:ef:98:68:9b:77:cc:40:f7:a5:86:fd:
c3:3c:6c:86:1e:d3:f8:92:96:88:35:1a:35:ca:1b:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:11:A6:4A:81:BD:F7:35:6E:6A:06:D4:5E:FF:82:68:21:AF:A4:D5
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.166.236.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d5:52:3a:52:6d:2e:c2:af:6d:55:e8:54:d7:39:17:c0:fc:
08:ac:f8:28:56:8c:62:94:00:9c:02:6f:49:6f:a6:d5:ea:6f:
36:47:72:02:76:bb:5b:b8:2a:a8:a7:1b:52:31:39:99:23:4e:
96:79:99:f0:a0:9d:d1:0e:49:7c:bc:83:81:25:c7:7e:71:35:
95:09:ca:45:a5:ea:50:ac:d7:f4:cf:e7:79:a0:64:40:dd:3c:
59:3a:0a:12:3e:2e:97:2d:9f:5d:85:14:c0:06:34:c3:55:d0:
3a:10:e5:40:eb:e6:5c:b3:2e:c7:25:f7:e0:61:40:0c:d6:be:
9d:3e:13:82:6c:be:05:ae:1e:d4:98:e3:d6:f2:41:a8:fb:3a:
78:2c:96:7b:0a:4e:73:07:86:86:d5:c5:6c:89:6e:65:e2:46:
2c:af:18:69:b3:8e:75:e6:fb:03:97:e8:72:87:2e:1d:1e:2d:
bd:7e:3c:53:d7:73:66:b9:b3:ad:f5:88:e7:85:7d:b9:4e:f6:
43:55:b9:d9:b5:14:6a:fa:f7:17:ff:78:7c:04:dd:d8:20:bd:
52:bf:d6:f8:8d:d1:0a:28:e8:9c:81:24:fd:fc:b8:3c:95:11:
10:22:2b:d6:b9:1e:bb:e2:5a:89:ba:40:e7:4c:b3:c4:6f:3d:
76:0a:1c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:54:39 2025 by rpki-client