Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e20383334.roa
File: 3139352e37382e35352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: wFyfRFkJnK/b9NyOpo3KAKNAOAozdGDHfByW2U3VKCY=
Subject key identifier: BA:95:AC:E9:00:A2:15:84:5C:E5:6F:AD:A6:F5:8B:FD:57:C9:FA:64
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 04C372F02EC9CB6E9FB3DBCC6E05B89191050A6C
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e20383334.roa
Signing time: Fri 13 Dec 2024 00:02:42 +0000
ROA not before: Thu 12 Dec 2024 23:57:42 +0000
ROA not after: Fri 12 Dec 2025 00:02:42 +0000
asID: 834
IP address blocks: 195.78.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Dec 2024 14:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c3:72:f0:2e:c9:cb:6e:9f:b3:db:cc:6e:05:b8:91:91:05:0a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Dec 12 23:57:42 2024 GMT
Not After : Dec 12 00:02:42 2025 GMT
Subject: CN=BA95ACE900A215845CE56FADA6F58BFD57C9FA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:75:34:58:89:f0:92:17:2b:85:d4:09:0d:
2a:9b:07:66:19:a5:e2:93:5b:ad:d6:fc:93:89:a9:
9d:ff:45:9c:22:4c:ee:6c:02:82:4e:23:f7:4e:93:
70:83:62:c2:ef:4b:42:23:4b:c7:4f:e5:37:17:b8:
a9:0a:2e:16:d5:3c:66:b8:71:f1:55:5e:54:34:36:
ae:d4:9a:19:ea:55:d4:a0:51:60:cf:18:e2:09:44:
b2:49:15:1e:86:6b:b3:31:49:32:1a:56:65:48:fd:
d0:a3:89:a0:d5:78:54:b4:7f:f9:9e:ac:10:5f:7a:
14:06:40:67:84:36:64:81:7f:3c:2b:5f:72:f9:81:
98:a7:2f:55:c5:42:8d:22:7f:84:ac:20:31:79:9c:
af:87:bb:9f:82:17:ad:51:27:0c:82:d3:ca:04:ac:
71:2c:3b:74:f6:8a:e9:6c:fc:f7:5b:45:81:50:ae:
a0:22:af:cd:25:26:56:e9:fd:40:c6:65:84:48:9b:
c5:2e:8c:ae:e7:1e:31:2f:38:cf:45:d6:d3:c5:a6:
56:21:2c:31:09:ed:5b:34:56:f8:51:d1:c7:32:f9:
32:08:28:5b:95:f3:94:37:45:42:ac:58:0a:ce:a3:
a1:ab:ef:51:9f:05:e7:a5:1e:1e:32:b0:31:f8:1c:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:95:AC:E9:00:A2:15:84:5C:E5:6F:AD:A6:F5:8B:FD:57:C9:FA:64
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.55.0/24
Signature Algorithm: sha256WithRSAEncryption
60:35:6d:c7:c6:e8:60:37:6d:d5:38:bd:06:cd:51:78:47:c1:
b6:cd:0c:5e:6d:ce:19:e3:1f:1c:2a:68:cb:06:29:2d:12:2e:
be:b3:1b:bb:d4:60:b6:d6:f8:da:bc:f6:c4:9e:80:c6:d8:92:
2e:e3:c4:ee:9c:fc:e0:92:25:c7:1d:54:16:37:a5:9f:a8:b8:
c4:b4:92:1a:90:ce:82:f2:74:2c:ea:63:de:6c:17:ae:99:e5:
98:c3:6c:d4:3b:7b:b3:7d:0a:c7:0a:9b:42:25:5f:d8:99:86:
a2:bc:3e:d8:5b:c7:31:e6:a7:8e:6c:29:9c:16:c3:2f:ef:81:
81:c1:cb:bc:93:3f:2e:97:56:90:e1:4e:68:12:f5:3a:9f:00:
8e:d1:d9:6f:d9:11:d5:c7:44:36:b7:99:3b:29:31:72:ab:b1:
44:89:d1:d9:c0:e4:60:3c:19:ec:f7:fe:ac:16:49:c5:2e:b6:
24:e1:d5:e0:95:14:39:ac:0d:44:db:ee:3c:97:ab:c3:5d:23:
98:19:e0:bc:8b:d0:b3:20:1a:0b:f3:39:0a:19:47:bd:aa:e8:
93:23:b8:22:fc:9e:b2:67:88:4d:37:b8:d4:2a:a6:cd:f8:90:
06:45:96:f8:ce:81:d7:af:b0:83:bd:10:4f:8f:01:30:31:04:
2e:72:20:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:49:08 2025 by rpki-client