Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e20383334.roa
File: 34352e3133352e3136312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: GQrThXzQExmqNmGmnYBUiNGyd/C72o9W3jUPorPONjg=
Subject key identifier: 93:4B:05:CF:43:A1:CD:4B:26:46:73:64:7E:8B:D7:29:B3:36:EF:2E
Certificate issuer: /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial: 22D1CAB6B3B97A7EAB88068F92C3BD8A9B8E30AA
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e20383334.roa
Signing time: Sat 15 Mar 2025 00:01:50 +0000
ROA not before: Fri 14 Mar 2025 23:56:50 +0000
ROA not after: Sat 14 Mar 2026 00:01:50 +0000
asID: 834
IP address blocks: 45.135.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 00:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d1:ca:b6:b3:b9:7a:7e:ab:88:06:8f:92:c3:bd:8a:9b:8e:30:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Validity
Not Before: Mar 14 23:56:50 2025 GMT
Not After : Mar 14 00:01:50 2026 GMT
Subject: CN=934B05CF43A1CD4B264673647E8BD729B336EF2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:17:75:ec:bb:34:13:76:6f:dc:4a:ab:fb:03:
6d:f1:38:16:a3:8a:74:cf:39:72:01:e6:00:98:eb:
e4:75:e1:cc:e7:74:51:d7:dd:04:34:02:7d:28:75:
a3:d6:4c:4b:f1:b9:3b:a2:01:c1:41:36:21:1e:22:
f7:12:05:b9:54:88:c8:b4:c1:94:e5:05:a2:75:ff:
be:09:14:9a:39:cf:14:4d:ba:b0:1e:22:11:b8:1f:
a2:11:60:08:96:e8:f9:b8:4e:bd:e3:4b:20:b6:14:
c4:7d:a4:86:0f:35:16:3b:f3:ff:cf:9f:3b:28:9d:
9c:65:61:bc:a0:a9:eb:6b:d7:ef:5f:7c:3b:34:a0:
e8:de:64:05:f4:83:a0:3b:21:f2:2d:ec:43:47:ed:
dd:ed:e5:dd:9b:90:8a:d4:dc:c9:69:2a:0f:dd:b0:
4b:71:45:51:12:29:48:cb:57:bd:24:1b:fb:8e:1a:
ed:d8:ca:25:74:f5:ec:85:c4:77:7d:a5:4b:35:7f:
20:a4:f9:1b:e3:f8:23:c6:99:a8:b8:b3:7e:4e:86:
60:4e:7b:20:89:96:4f:c9:ed:5d:29:ef:fe:4d:3f:
af:99:7a:3b:6f:25:cf:30:8f:e6:71:78:44:89:61:
40:c7:8e:df:0f:4e:32:2a:96:e5:37:57:15:67:c0:
be:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4B:05:CF:43:A1:CD:4B:26:46:73:64:7E:8B:D7:29:B3:36:EF:2E
X509v3 Authority Key Identifier:
keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.161.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:cb:07:15:80:f0:69:56:f7:f4:bd:b1:d7:2c:db:65:0e:53:
df:27:0a:e3:96:a0:f2:af:9d:83:a1:20:fa:62:75:29:af:a3:
60:be:33:2b:91:e8:0a:3a:1e:c1:36:ff:a0:55:8d:b6:a5:19:
7b:3d:82:9c:4a:86:b9:40:97:f2:7c:58:97:65:c2:d1:56:dd:
a7:e7:6b:33:4e:99:97:2d:d5:56:ce:e6:0e:aa:42:3b:0c:63:
87:98:31:6e:af:80:75:99:42:3b:7a:0c:29:dc:0a:50:7c:49:
dc:91:24:22:ce:b1:e5:b3:ea:79:96:8f:ea:41:89:bb:b7:2c:
95:3c:c7:04:7d:bd:99:a7:d5:02:78:4b:5c:c1:ed:0a:00:b4:
e6:24:3a:7b:4e:78:b7:ab:8b:85:0a:3c:62:c6:25:d9:a9:57:
c8:1c:62:cb:92:a9:2c:0a:06:84:28:f0:67:a2:e8:69:ec:84:
77:22:9d:d3:9b:1b:34:87:ea:11:71:00:a7:d3:2b:7a:34:96:
e8:b9:50:ff:21:ba:bd:47:26:65:9b:ba:fe:2d:9e:b2:05:92:
73:9f:98:fa:2d:40:22:de:99:f5:1a:b5:66:49:cd:08:46:69:
45:e0:b2:9c:58:0d:74:17:38:44:61:80:bf:2b:de:5a:ba:3b:
5b:f5:ec:17
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUItHKtrO5en6riAaPksO9ipuOMKowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjUwMzE0MjM1NjUwWhcNMjYwMzE0MDAwMTUw
WjAzMTEwLwYDVQQDEyg5MzRCMDVDRjQzQTFDRDRCMjY0NjczNjQ3RThCRDcyOUIz
MzZFRjJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRd17Ls0E3Zv
3Eqr+wNt8TgWo4p0zzlyAeYAmOvkdeHM53RR190ENAJ9KHWj1kxL8bk7ogHBQTYh
HiL3EgW5VIjItMGU5QWidf++CRSaOc8UTbqwHiIRuB+iEWAIluj5uE6940sgthTE
faSGDzUWO/P/z587KJ2cZWG8oKnra9fvX3w7NKDo3mQF9IOgOyHyLexDR+3d7eXd
m5CK1NzJaSoP3bBLcUVREilIy1e9JBv7jhrt2MoldPXshcR3faVLNX8gpPkb4/gj
xpmouLN+ToZgTnsgiZZPye1dKe/+TT+vmXo7byXPMI/mcXhEiWFAx47fD04yKpbl
N1cVZ8C+ZwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJNLBc9Doc1LJkZzZH6L1ymz
Nu8uMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBm
MTc1NDE2NjdmLzEvMzQzNTJlMzEzMzM1MmUzMTM2MzEyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAth6EwDQYJKoZIhvcNAQELBQADggEB
AG3LBxWA8GlW9/S9sdcs22UOU98nCuOWoPKvnYOhIPpidSmvo2C+MyuR6Ao6HsE2
/6BVjbalGXs9gpxKhrlAl/J8WJdlwtFW3afnazNOmZct1VbO5g6qQjsMY4eYMW6v
gHWZQjt6DCncClB8SdyRJCLOseWz6nmWj+pBibu3LJU8xwR9vZmn1QJ4S1zB7QoA
tOYkOntOeLeri4UKPGLGJdmpV8gcYsuSqSwKBoQo8Gei6GnshHcindObGzSH6hFx
AKfTK3o0lui5UP8hur1HJmWbuv4tnrIFknOfmPotQCLemfUatWZJzQhGaUXgspxY
DXQXOERhgL8r3lq6O1v17Bc=
-----END CERTIFICATE-----
Generated at Thu May 8 20:36:53 2025 by rpki-client