Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e20383334.roa
File: 39352e3231342e3137362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: lHQMWFi/5WSjlVX8NL5hnE4Iv+yGl6yTuXPl0yUtjgk=
Subject key identifier: F2:CE:15:7D:90:D2:C0:BE:C9:A5:47:3F:23:B1:12:60:70:81:81:3A
Certificate issuer: /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial: 033E1E2AB5FE88AAF9DB3B780326EC678D4E9F9D
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e20383334.roa
Signing time: Tue 10 Jun 2025 00:03:20 +0000
ROA not before: Mon 09 Jun 2025 23:58:20 +0000
ROA not after: Tue 09 Jun 2026 00:03:20 +0000
asID: 834
IP address blocks: 95.214.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Jun 2025 19:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:3e:1e:2a:b5:fe:88:aa:f9:db:3b:78:03:26:ec:67:8d:4e:9f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Validity
Not Before: Jun 9 23:58:20 2025 GMT
Not After : Jun 9 00:03:20 2026 GMT
Subject: CN=F2CE157D90D2C0BEC9A5473F23B112607081813A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:1c:6d:78:ad:ac:ce:e6:a0:dd:9c:c3:2b:
92:41:78:c6:86:97:d1:30:86:31:c3:01:ef:e0:3a:
ee:4e:f9:66:75:32:7c:28:c3:97:bb:93:96:4a:7b:
d2:70:a3:d0:7b:dd:09:3c:e4:76:0c:d9:79:a2:f1:
a9:9d:d4:c6:71:e7:98:5a:19:1e:dd:5a:33:2d:f4:
83:9c:48:c7:90:1e:99:57:f5:3f:a9:80:b4:82:d6:
ac:c6:b2:92:e2:d6:be:27:4c:1b:2f:8a:f7:76:69:
69:ad:95:43:94:5d:1d:4a:36:24:d1:70:e6:16:6f:
3d:b0:5a:c7:cd:43:ab:35:8e:99:de:cb:6d:09:7e:
67:26:d9:8d:46:84:07:95:06:71:d8:f1:68:24:96:
b2:3d:4d:f8:5e:bb:3c:aa:c0:de:48:b8:b8:bf:67:
8a:17:ae:12:64:14:93:af:41:c6:9c:2b:6f:00:2f:
c7:4a:23:7a:fb:a4:82:c8:28:80:72:dd:dd:b1:4e:
e9:0c:47:f7:a5:5d:b2:5f:13:62:99:3d:57:ac:6e:
7e:17:93:ae:5f:04:13:2c:3e:f2:df:23:02:ae:ad:
d1:36:41:86:19:55:8f:3f:a5:98:80:10:c5:f7:db:
54:30:32:6a:92:cc:2f:45:40:f4:58:a3:6e:8e:71:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CE:15:7D:90:D2:C0:BE:C9:A5:47:3F:23:B1:12:60:70:81:81:3A
X509v3 Authority Key Identifier:
keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.176.0/24
Signature Algorithm: sha256WithRSAEncryption
56:60:5e:c8:ea:28:00:ed:43:1d:ce:60:bd:d0:d7:04:1b:c2:
32:44:53:4c:8c:c7:2a:d1:71:bc:49:72:b4:28:8f:b9:3c:ca:
49:29:8e:9e:de:5b:0f:7f:04:0b:e8:35:e6:af:9c:71:fa:d6:
50:05:b1:06:ff:95:cb:52:76:db:27:b0:f1:03:f3:84:8e:6b:
2f:51:8f:74:f1:0a:12:a9:7c:6e:85:21:f8:05:e8:40:7b:88:
dc:1a:d8:35:6f:b0:98:32:dd:50:2c:16:99:1f:84:a6:cc:69:
54:78:79:86:17:23:6f:3b:5c:7d:67:c7:c5:8a:39:9e:07:b2:
58:51:ba:0b:d0:1d:da:9b:ce:ec:75:ac:bd:c6:58:9b:e6:c9:
bc:8f:22:12:4a:80:d7:78:1d:94:4c:75:ea:7d:6c:b7:40:21:
63:b3:19:3c:3e:a0:7c:0a:1b:21:d5:10:fa:3d:64:c5:42:bb:
bc:b9:c9:a8:ac:19:13:5f:8c:d9:e1:cf:b5:a1:8b:1c:37:e7:
ae:92:4b:9a:6b:bf:9e:4c:be:0d:30:63:81:1e:ca:c3:ac:f5:
9d:45:e6:bd:b7:48:f6:fa:f5:0f:fd:00:5e:88:1e:17:30:5e:
78:8a:b5:ba:ad:60:39:59:68:0a:c7:27:51:8f:41:bc:88:a4:
d5:d4:d8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:53:05 2025 by rpki-client