Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20343031373130.roa
File: 3230392e38372e3137322e302f32342d3234203d3e20343031373130.roa (raw, json)
Hash identifier: HY0LlHmQ4koqFhgXX2YEVU+HJenQ11Gy64moAAF9CIE=
Subject key identifier: 61:BC:99:73:8F:A2:97:CA:60:2C:A3:E8:86:20:C6:E3:B3:A3:3F:FA
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 46207B22B498FA98684833BBC89654571795D41E
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20343031373130.roa
Signing time: Thu 15 May 2025 17:02:40 +0000
ROA not before: Thu 15 May 2025 16:57:40 +0000
ROA not after: Thu 14 May 2026 17:02:40 +0000
asID: 401710
IP address blocks: 209.87.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 May 2025 16:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:20:7b:22:b4:98:fa:98:68:48:33:bb:c8:96:54:57:17:95:d4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: May 15 16:57:40 2025 GMT
Not After : May 14 17:02:40 2026 GMT
Subject: CN=61BC99738FA297CA602CA3E88620C6E3B3A33FFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:91:48:21:32:47:e4:9c:33:80:fc:28:f0:
99:64:12:9e:b5:f2:3e:5b:73:89:16:6c:1a:e0:d9:
dd:13:53:1b:19:5e:8e:1f:cb:58:3b:c8:f9:85:9c:
8d:9e:55:ac:17:79:bc:91:7a:e5:88:8b:c1:0d:cd:
13:45:d1:cf:ef:ad:a5:47:f8:4d:75:b0:95:5d:dd:
71:31:fe:64:1e:3c:f9:9a:10:4f:93:0b:a9:20:3a:
20:d1:e0:07:81:df:be:eb:c4:a5:c5:57:4a:0d:ef:
f8:11:3a:96:ff:9b:6f:04:bb:d0:8a:ad:6e:9e:e9:
ab:61:c4:46:81:1f:35:d5:8b:67:b0:f0:34:9d:39:
f6:3e:90:ab:6a:87:0e:c4:d5:1e:06:29:9b:86:be:
55:bb:aa:d5:f6:57:09:3d:42:55:cd:57:7e:e2:70:
5b:d4:97:2a:8d:ae:8b:88:09:d5:bf:22:b5:5f:e6:
04:14:f7:a8:3b:d6:3c:a1:2c:02:89:b0:d2:ea:df:
03:11:b3:a7:bc:f9:11:8f:b1:db:7f:c5:ed:8a:d2:
5d:64:4f:57:ae:58:1e:70:75:8d:d5:d1:2f:3e:3f:
4c:2c:d2:46:28:ae:b4:f0:fb:30:e9:67:d8:7a:93:
66:f7:d9:5e:d3:b9:5f:fa:f9:73:2b:a2:42:2b:1d:
42:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BC:99:73:8F:A2:97:CA:60:2C:A3:E8:86:20:C6:E3:B3:A3:3F:FA
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20343031373130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c5:fb:72:51:ba:c7:db:54:20:e8:cb:7e:12:be:d1:97:ed:
ac:ef:6f:a1:75:f4:13:5b:e0:26:72:1a:4a:a4:8c:79:9d:a7:
77:f0:b6:67:6a:6d:76:18:fa:58:bf:34:f0:07:7a:85:0c:91:
5a:7c:ac:29:b4:64:3d:3a:98:65:8a:99:aa:b1:30:da:52:4e:
79:dc:f7:e5:77:ea:c9:90:c7:32:22:a5:a9:1b:e8:52:50:3b:
ed:bc:19:b9:7d:fc:cd:66:3d:2d:d6:37:eb:9c:00:0a:34:e8:
58:00:93:bd:15:47:b7:cb:51:e9:cd:e5:1b:aa:9b:f2:d2:5d:
e3:30:9f:e2:9c:42:d4:2f:e3:a3:8d:b4:4f:7a:c5:e3:1c:6d:
15:31:59:d1:fb:93:14:9b:2f:be:e8:84:d8:5e:19:13:23:21:
68:69:57:c4:80:85:3e:03:1a:bc:06:8a:69:75:a4:b5:5b:58:
90:33:1e:f9:78:93:34:04:29:27:3e:c4:be:29:74:df:8d:00:
5e:51:69:8d:6c:44:ce:34:8d:c5:2f:62:3a:93:af:be:fd:1e:
c8:e7:66:3c:03:ad:79:31:db:97:57:bb:f6:1d:5d:65:4f:ec:
57:aa:fe:00:d0:ec:aa:8a:0f:c5:f8:95:32:25:61:51:06:9b:
9c:74:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:19 2025 by rpki-client