Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131372e302f32342d3234203d3e20383334.roa
File: 3139322e3130392e3131372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: g07ksP3s9tSLZfA52jq/L8cmPtfuR7o9jdaS1SXveb4=
Subject key identifier: 13:F3:02:10:80:B8:E2:07:31:17:9B:4B:D2:24:86:C9:C8:83:57:E9
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 170E3FF703579A5D08EBFD1B780FCB81B7C03E07
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131372e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 May 2024 08:09:22 +0000
ROA not before: Tue 21 May 2024 08:04:22 +0000
ROA not after: Tue 20 May 2025 08:09:22 +0000
asID: 834
IP address blocks: 192.109.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 08:14:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:0e:3f:f7:03:57:9a:5d:08:eb:fd:1b:78:0f:cb:81:b7:c0:3e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: May 21 08:04:22 2024 GMT
Not After : May 20 08:09:22 2025 GMT
Subject: CN=13F3021080B8E20731179B4BD22486C9C88357E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:a9:2c:b6:8b:2c:f5:73:c9:8a:d9:fe:4a:
49:fb:b2:e3:0e:56:03:3e:f4:1f:33:ed:4f:69:0c:
55:41:92:a8:bc:86:3f:a9:b3:15:fc:43:a1:c1:d2:
ad:a2:9d:d8:34:1a:6c:65:96:2e:59:c6:6d:d9:d6:
02:8f:ab:f3:05:0d:c7:97:a1:b4:45:2f:06:29:cb:
c5:3f:5c:f3:f4:f3:65:bd:4b:63:92:6e:15:44:84:
a3:32:09:83:53:95:27:02:7d:34:a2:be:86:bf:5b:
35:d5:12:9a:76:02:9e:b4:89:0d:c7:bf:b9:19:ca:
5c:96:5c:05:ef:c0:56:4b:8c:7b:59:d3:ac:82:7a:
e2:ef:bb:50:d0:f1:9f:ac:9a:82:0f:1d:fe:2f:f7:
d0:80:dd:77:bc:a6:55:d9:a6:5f:a3:16:ee:00:9f:
e7:ec:72:38:90:f4:df:01:76:b1:9c:18:e9:ba:ce:
a0:eb:bd:b0:17:e4:0c:a7:00:50:df:e2:7c:42:0a:
cf:6a:c0:f7:60:3f:03:34:aa:3a:ce:19:90:58:04:
9f:79:ea:f5:c8:45:41:a9:fc:62:36:40:c2:e2:ff:
89:68:54:a4:89:3a:1c:b7:f0:a5:11:ba:e9:ef:0d:
5f:db:2a:77:a5:fc:e5:41:77:04:e1:8b:d4:90:98:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F3:02:10:80:B8:E2:07:31:17:9B:4B:D2:24:86:C9:C8:83:57:E9
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.117.0/24
Signature Algorithm: sha256WithRSAEncryption
66:71:b2:e1:03:20:e2:29:b7:93:22:52:15:7e:b0:ce:43:bc:
38:3e:ac:75:69:f6:56:b2:1c:7e:bc:bf:bb:10:5b:b2:e7:0a:
2f:8c:f4:f8:fe:da:03:4d:49:c4:fe:4a:29:94:44:00:76:44:
f7:eb:97:fb:c5:8b:3e:f0:99:91:93:1e:bf:e3:69:3f:6a:85:
9a:d2:ed:37:a3:c9:f9:86:6b:62:ab:df:0d:2f:41:66:2b:8d:
dc:e3:4f:c2:36:6c:09:94:fc:79:19:35:aa:f1:93:d0:02:d1:
31:58:36:9e:e0:72:0c:08:26:21:a8:0f:ac:74:86:5b:cc:2b:
2e:f7:0c:1b:ef:9d:42:b2:8d:22:48:7f:74:da:58:5b:83:38:
42:2f:28:94:bd:09:d4:41:1c:69:19:aa:3a:b9:7c:00:d9:44:
30:f5:f2:94:3a:8e:c4:08:6e:48:9a:01:00:32:15:f0:55:02:
88:75:c7:4b:16:ed:1f:63:19:19:4e:f0:ec:fc:b8:86:e6:62:
45:d7:bd:4a:1e:20:b6:3f:4a:ad:e7:7c:d3:25:32:9b:8d:85:
34:b7:3a:8b:89:62:07:d4:34:cc:39:d0:a1:d8:03:3c:36:1b:
30:af:b5:03:2e:a5:40:11:d3:ac:f0:02:77:4b:70:b8:0c:7c:
dc:3f:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:53:32 2025 by rpki-client