Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e20383334.roa
File: 3130332e3230382e38342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ipWDK++VqVCRhonZJWmv3gG8X3Vmz+Hdr0Ao0AOI600=
Subject key identifier: 38:82:CD:87:FA:0F:85:68:18:76:9E:36:40:8F:12:91:B1:2A:35:2A
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 56579D2874798BBC0C76ABD3C5C6338BDBBD6554
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e20383334.roa
Signing time: Wed 30 Apr 2025 06:16:00 +0000
ROA not before: Wed 30 Apr 2025 06:11:00 +0000
ROA not after: Wed 29 Apr 2026 06:16:00 +0000
asID: 834
IP address blocks: 103.208.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 May 2025 23:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:57:9d:28:74:79:8b:bc:0c:76:ab:d3:c5:c6:33:8b:db:bd:65:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000, serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Validity
Not Before: Apr 30 06:11:00 2025 GMT
Not After : Apr 29 06:16:00 2026 GMT
Subject: CN=3882CD87FA0F856818769E36408F1291B12A352A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7c:cf:f1:de:4a:8a:78:b1:7f:75:e8:80:f8:
63:d0:04:d6:96:d9:4f:6f:a0:46:9e:1c:cd:d7:3b:
46:97:f1:7b:2d:1f:00:53:88:7d:82:03:04:96:3e:
c6:ba:c7:d2:de:14:f1:ac:3e:c3:b2:79:a0:6c:27:
e8:93:cc:0f:f1:c7:76:26:49:fd:dc:5a:89:27:e8:
8c:17:68:c1:a1:79:ab:dc:ef:f9:e2:22:31:5d:eb:
b2:63:52:7f:4b:c8:2e:67:19:67:74:89:3b:e4:30:
48:81:ed:51:9d:f3:a9:e6:a2:e4:c0:7c:c9:b7:d4:
e9:8b:3c:de:08:cb:50:a8:a3:41:3f:c8:10:64:e9:
5d:c8:51:68:5e:50:61:7f:87:a1:b6:1d:52:26:a1:
3e:36:ef:cb:54:26:3e:a1:d7:93:97:70:25:46:69:
6c:1b:93:d0:ce:b7:ef:d9:83:59:e3:7e:30:f9:29:
f9:37:41:a6:de:59:06:7e:cc:0b:ef:60:91:df:00:
2b:60:85:fa:f7:09:2e:d0:56:ea:33:c9:cd:de:29:
08:2a:9c:71:e1:32:cc:05:86:f8:d6:01:49:98:3a:
a7:68:85:11:0e:73:23:d4:da:11:d1:e4:2c:23:69:
6e:c7:2b:1a:f7:8b:7b:94:77:d9:87:83:87:b0:b1:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:82:CD:87:FA:0F:85:68:18:76:9E:36:40:8F:12:91:B1:2A:35:2A
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.208.84.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:b3:5f:1b:00:b7:ea:79:a1:ad:55:65:0f:e8:e4:9d:8a:2f:
ac:19:8a:e3:e8:f7:22:2c:49:c2:ec:7c:57:b3:be:b0:18:df:
ea:2e:2a:2d:b4:da:8c:f1:40:6d:c9:1f:92:16:d2:2b:95:16:
fb:8d:29:b3:26:ca:17:ef:64:ff:d8:bc:90:9a:e5:06:1c:57:
69:4d:6c:7b:32:c7:76:63:73:98:8c:c3:98:85:82:4f:72:42:
a1:ff:7c:c3:07:c5:fa:39:3f:d7:3d:8d:92:93:a2:c4:27:e5:
be:a1:a0:58:1c:44:6a:26:2f:17:bc:64:f1:0a:a4:62:30:3b:
1f:1e:f6:2f:bf:fd:99:3e:7b:85:46:6f:d9:a4:08:28:57:f4:
5d:e1:0c:8f:6e:59:6c:b4:7b:2e:4a:27:e4:97:7c:08:fa:9b:
0b:6f:ed:10:c1:4d:e0:9a:6e:2b:7a:49:21:e0:a6:35:d9:76:
d1:6d:f1:6b:65:9a:b5:14:4c:34:9c:82:1e:c8:cb:18:1f:fd:
ea:f8:fe:64:ae:96:cb:2c:15:06:08:f8:ff:46:6e:e7:29:91:
77:d9:19:d4:91:2c:1b:90:48:5e:26:55:15:81:be:0f:bc:af:
57:a2:2d:58:6c:46:50:af:04:81:f2:84:da:f0:c2:8e:16:da:
4f:60:95:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:17:06 2025 by rpki-client