Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36302e302f32322d3234203d3e20383334.roa
File: 3139382e3137372e36302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: hCsy3mQeuqn33ru9FoPOmDH/4Zn7aeAhlPgbZ6pLI1Y=
Subject key identifier: 23:B1:73:82:52:82:91:AE:A7:9A:71:78:18:CD:79:BC:1D:F5:91:56
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 2E3B3B0DB84E68979853E4AEFFBBD16F015F2BA1
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36302e302f32322d3234203d3e20383334.roa
Signing time: Fri 28 Feb 2025 16:48:11 +0000
ROA not before: Fri 28 Feb 2025 16:43:11 +0000
ROA not after: Fri 27 Feb 2026 16:48:11 +0000
asID: 834
IP address blocks: 198.177.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 08:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:3b:3b:0d:b8:4e:68:97:98:53:e4:ae:ff:bb:d1:6f:01:5f:2b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Feb 28 16:43:11 2025 GMT
Not After : Feb 27 16:48:11 2026 GMT
Subject: CN=23B17382528291AEA79A717818CD79BC1DF59156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:5e:87:5c:c2:88:c8:e5:e0:ba:33:f4:86:
68:f3:7d:d1:f9:91:53:f7:f0:1b:4a:d3:72:ba:08:
f9:7d:de:b9:46:e3:bb:6e:58:6a:15:00:de:f8:56:
73:35:e0:0e:be:1b:4b:62:9e:ba:a2:bd:02:2d:6c:
e5:ec:62:31:db:39:16:c7:6a:25:e5:37:c2:f0:13:
0d:33:0d:6f:eb:46:29:7e:1f:55:9b:3a:1d:ce:67:
fa:7c:25:0d:cb:ac:1b:1c:f6:28:ae:cd:84:e4:9d:
e2:90:6e:91:14:1d:8e:b1:25:1c:8e:59:ba:2f:8e:
a0:2b:7d:6a:2c:ae:4a:92:b8:7f:5c:60:8e:98:0d:
44:9b:c4:fc:0e:c3:a3:c6:5d:0d:8f:2b:bc:59:9e:
31:c1:b3:86:84:33:c5:3c:d9:d0:c2:aa:6a:55:97:
fe:6a:db:44:dd:72:1c:4d:46:89:90:9c:3c:ec:ca:
74:f6:a0:6f:05:5a:be:5e:3e:43:5b:94:5e:1f:e5:
41:3e:1f:9e:b8:8d:75:c4:05:ac:3e:65:0d:ed:be:
a2:55:1c:9f:d1:05:84:a7:f7:4e:77:cc:2a:07:ec:
6a:75:7d:0a:a1:d2:55:19:ff:92:37:bb:01:97:2d:
10:d1:64:5f:97:bd:9a:ab:dc:18:5a:2e:81:6e:ec:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B1:73:82:52:82:91:AE:A7:9A:71:78:18:CD:79:BC:1D:F5:91:56
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.177.60.0/22
Signature Algorithm: sha256WithRSAEncryption
32:4e:e3:16:cf:6d:be:de:88:86:5a:b0:95:31:b1:16:fe:a7:
6e:e9:e7:ed:8d:c5:fa:a5:c8:04:d7:c0:d3:d9:d2:05:ba:04:
af:b3:dc:49:e7:a8:97:30:10:96:cf:82:29:dd:fc:17:55:4d:
35:2f:14:df:28:55:90:c8:44:4f:c2:7f:3c:77:5f:62:c7:f7:
31:2d:5c:6a:f9:51:3d:c5:da:74:b8:47:77:b4:8e:48:d1:69:
fc:7a:bc:32:0e:80:e3:ff:79:2f:e6:71:cf:0d:53:3c:9a:32:
8d:e2:00:6f:70:a8:f2:ec:23:f8:21:95:e3:51:40:e9:f0:51:
17:33:5d:01:1e:1b:77:4d:a6:e5:fb:3f:1e:44:10:43:3e:df:
d0:20:d4:5e:a2:79:51:b8:e4:f3:ae:ae:2e:5d:ec:80:a8:be:
a7:e5:cf:b5:1f:16:ff:97:e2:c1:63:9f:70:d4:0a:2b:9d:6d:
bb:50:a9:db:df:8e:4d:b1:9a:33:e7:bf:ba:14:66:9b:f2:89:
4b:dd:65:04:63:a2:c0:f8:1f:f6:d8:46:24:7a:e3:c5:dc:c8:
05:b6:ce:fe:49:e4:bd:25:76:51:b7:01:cb:d3:32:f6:79:05:
ee:59:4d:d3:5f:61:13:cf:16:5a:f6:d9:1a:71:33:50:10:93:
18:a9:bb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:58:56 2025 by rpki-client