Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203231383539.roa
File: 3137332e3234372e3232352e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: TGPvjs6p/4m6A+zhislbi2WL+F+4umjZjXOysbT7K1A=
Subject key identifier: B1:DC:2E:06:BC:7B:31:E4:E6:35:1D:4C:CF:22:CB:3B:C2:3E:CD:B1
Certificate issuer: /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial: 3C575E7BBC321FBA79769B1547F09C8840E27C7A
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203231383539.roa
Signing time: Sat 18 Jan 2025 20:38:55 +0000
ROA not before: Sat 18 Jan 2025 20:33:55 +0000
ROA not after: Sat 17 Jan 2026 20:38:55 +0000
asID: 21859
IP address blocks: 173.247.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 05:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:57:5e:7b:bc:32:1f:ba:79:76:9b:15:47:f0:9c:88:40:e2:7c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Validity
Not Before: Jan 18 20:33:55 2025 GMT
Not After : Jan 17 20:38:55 2026 GMT
Subject: CN=B1DC2E06BC7B31E4E6351D4CCF22CB3BC23ECDB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5d:d9:5f:36:71:cc:99:6f:14:95:f5:d3:05:
0c:60:f4:09:d6:b9:b5:83:6b:44:eb:40:b2:13:5f:
5f:54:8a:f1:8f:8c:31:b2:89:26:ba:62:6f:90:90:
6f:e6:4a:70:3b:dc:5b:83:f8:7f:b9:34:89:24:03:
a2:78:1e:d1:d4:e2:1e:90:c6:53:24:dc:d1:52:a9:
f1:d0:c0:02:71:5f:81:4f:4c:3e:04:2d:20:47:04:
f3:0e:64:19:f6:52:86:92:f2:14:ea:c8:97:8d:22:
ea:8b:e5:7a:6a:0c:a4:db:c4:39:cd:f0:58:69:19:
fb:b1:1a:9f:dc:07:a6:b8:9a:9c:70:3d:99:77:8b:
77:77:ab:c4:36:cb:1a:4e:4c:90:7a:18:6b:b3:df:
be:85:a3:ce:ce:33:dd:bb:a5:d7:0e:d8:59:d4:4d:
be:32:fc:05:13:73:7b:94:0e:be:dc:54:c1:7e:bf:
49:13:d4:c5:18:d4:09:d2:9f:e9:85:b8:ce:c0:06:
77:ec:2e:53:ac:f3:45:99:65:26:9a:69:b8:db:d8:
7c:18:de:a5:05:37:cf:84:ae:16:6c:58:1b:74:a4:
4f:72:9a:84:c4:86:40:a7:b0:fd:36:d7:9a:24:d5:
8a:47:f6:0e:14:d4:84:5e:2f:f6:ad:98:3f:57:80:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DC:2E:06:BC:7B:31:E4:E6:35:1D:4C:CF:22:CB:3B:C2:3E:CD:B1
X509v3 Authority Key Identifier:
keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.247.225.0/24
Signature Algorithm: sha256WithRSAEncryption
41:72:c3:be:07:c6:fe:3b:d1:35:42:67:4e:ad:df:30:3d:74:
07:53:5a:a9:c3:2d:dc:f7:84:23:5f:12:69:ee:71:04:3d:43:
f8:6a:73:db:b7:dc:33:d9:27:4c:50:bc:9a:67:29:e0:aa:a0:
7b:88:ef:a2:26:0b:74:93:e1:0f:ad:2a:11:40:00:06:07:4b:
c7:b3:39:33:8d:68:f3:c4:89:8d:b2:6d:00:c3:65:d0:f6:90:
b0:60:99:68:7d:a9:cc:79:2a:c4:92:61:f7:dc:90:f3:d7:82:
af:b3:7f:c2:5b:6f:80:9b:a7:89:6d:3e:2f:ca:59:1c:0b:89:
84:44:e1:36:b9:be:13:37:1b:36:47:73:7c:ea:de:60:f5:c7:
fc:37:b5:68:3c:ab:e2:d1:c3:20:f0:b1:80:7f:80:17:df:e9:
f0:c6:b0:6b:f8:3b:51:9c:46:84:7d:3e:a1:ce:07:1e:bc:e6:
5e:fd:96:20:58:76:11:85:5d:f2:dd:78:1d:e8:8e:76:a7:4c:
a7:a1:ed:93:bd:ce:1f:97:70:5e:27:79:b0:e0:92:8e:01:ca:
3f:41:e3:b5:d2:7b:4f:2d:86:ba:84:57:1c:20:82:db:25:bb:
f0:bd:30:89:db:18:67:a3:70:0a:1a:a9:76:a6:3d:0a:06:63:
7a:5f:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:13:27 2025 by rpki-client