Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e20383334.roa
File: 3230392e38372e3136302e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: EIWleA4orqyuFHf/8yqo3xs4h2DO+j/eAYKu2Ahfodk=
Subject key identifier: A7:EB:B6:51:82:55:4A:39:3C:FB:90:FC:5F:00:B8:B0:16:4B:A8:C1
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 7F3991F5FB9C4535A1A0B887602D1BA455CA3BAE
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e20383334.roa
Signing time: Mon 28 Apr 2025 00:01:48 +0000
ROA not before: Sun 27 Apr 2025 23:56:48 +0000
ROA not after: Mon 27 Apr 2026 00:01:48 +0000
asID: 834
IP address blocks: 209.87.160.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 09:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:39:91:f5:fb:9c:45:35:a1:a0:b8:87:60:2d:1b:a4:55:ca:3b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: Apr 27 23:56:48 2025 GMT
Not After : Apr 27 00:01:48 2026 GMT
Subject: CN=A7EBB65182554A393CFB90FC5F00B8B0164BA8C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0d:9d:2b:9b:7a:d4:17:85:7c:08:71:2b:e6:
a5:7c:3b:2a:5e:cf:6b:ae:e2:6e:21:92:af:07:a3:
8f:e6:0e:7f:56:01:2a:97:60:9b:09:14:1a:5e:49:
9e:8e:6b:58:1e:21:b4:96:eb:d1:3f:f0:b0:87:eb:
8a:08:65:af:34:8c:e8:41:1e:35:d4:46:d2:d3:08:
12:6d:4d:c2:0c:ee:14:ee:26:c9:a9:33:46:f7:d6:
86:51:44:8e:de:a1:23:83:dc:9b:44:6c:d6:0b:78:
81:b0:a7:20:63:6a:a1:86:85:11:82:80:cb:f6:cd:
4e:7d:72:e0:ca:bd:db:94:b4:49:0c:3c:58:6a:63:
0c:69:be:ad:3f:87:61:e6:04:58:da:01:76:c2:c4:
9b:c3:a4:f3:22:cc:a5:97:92:61:a1:0b:c7:e2:ef:
92:ea:9f:d9:34:77:39:09:87:51:60:b7:ab:50:37:
d9:d3:6c:89:a6:62:2b:b6:66:7f:f8:7d:cd:5b:3c:
a8:0e:37:d6:bf:3f:11:d8:aa:0e:c8:d2:48:68:98:
34:fc:bc:c5:89:ad:89:fc:d3:bc:d6:0e:8a:98:27:
7e:34:1d:2d:3d:9d:44:7a:8e:9e:4c:c5:48:f4:33:
52:44:50:b3:2b:df:68:af:1a:56:33:d7:43:e0:fa:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EB:B6:51:82:55:4A:39:3C:FB:90:FC:5F:00:B8:B0:16:4B:A8:C1
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.160.0/21
Signature Algorithm: sha256WithRSAEncryption
93:4e:bf:b3:d4:76:9c:72:26:93:0b:be:b8:48:ba:c7:e9:77:
e9:80:c5:79:b6:7b:46:e0:21:d6:bc:6b:46:72:8a:8f:95:e7:
1c:45:a2:ed:f4:3b:7c:86:3d:b3:ce:d7:26:bf:26:e3:7a:fb:
f4:1c:14:33:6b:ee:d7:d9:f1:a7:6e:79:13:ce:c6:c2:5c:fe:
f1:a8:ad:49:8a:f2:08:b6:67:dd:96:65:d8:83:c8:f1:00:82:
31:a4:cf:c4:79:92:b8:62:7b:f8:5d:55:5a:e2:2c:ea:05:45:
f1:8b:0d:72:09:b6:ac:29:1d:90:52:fe:89:66:33:90:72:93:
f5:6d:39:84:a2:34:b2:d8:62:d1:44:cb:24:0a:9f:74:2d:f4:
aa:d5:0c:72:eb:31:5e:f2:85:c5:cd:d2:70:d3:c4:d0:90:bb:
19:61:5e:77:d1:38:2a:8c:57:85:30:46:fd:0f:10:b7:23:81:
56:0b:a7:f2:d5:5b:73:a6:cf:35:38:85:4a:c8:1a:42:46:8e:
94:1d:e5:95:0c:5a:22:d8:11:54:95:45:cd:6d:ec:c2:d4:09:
f9:2c:cc:96:c1:02:56:fc:21:b4:29:23:90:a6:83:13:f6:59:
6c:e7:44:73:ff:93:d2:ab:0f:de:79:73:8a:22:be:d7:f8:6e:
15:21:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:48:12 2025 by rpki-client