Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203633303235.roa
File: 39352e3231342e3137362e302f32342d3234203d3e203633303235.roa (raw, json)
Hash identifier: MoA5mg8wSFmKXAPC7nERqtSiOCG8HbiGud0Ft4eAO5c=
Subject key identifier: 7A:23:E3:C7:A5:74:2E:C1:E4:C6:12:89:BD:4C:78:E9:61:60:82:98
Certificate issuer: /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial: 2DD22DFD4E254DBB85A4030873CA1B02C66389D1
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203633303235.roa
Signing time: Wed 23 Apr 2025 05:39:10 +0000
ROA not before: Wed 23 Apr 2025 05:34:10 +0000
ROA not after: Wed 22 Apr 2026 05:39:10 +0000
asID: 63025
IP address blocks: 95.214.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 02:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d2:2d:fd:4e:25:4d:bb:85:a4:03:08:73:ca:1b:02:c6:63:89:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Validity
Not Before: Apr 23 05:34:10 2025 GMT
Not After : Apr 22 05:39:10 2026 GMT
Subject: CN=7A23E3C7A5742EC1E4C61289BD4C78E961608298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:be:6f:1b:ab:7d:7c:5a:f0:e6:ef:36:14:
35:6f:f0:e3:c8:ae:43:88:bc:a3:2c:e7:e5:bf:da:
f6:ee:64:52:a0:71:b4:b7:0d:19:e1:60:3b:64:9b:
c9:fb:ba:1f:7b:27:ec:85:2f:c6:42:bc:84:99:2f:
9a:e5:0f:16:2d:5d:1a:1c:4b:b5:66:ce:56:11:4d:
e8:c4:ba:6c:cf:cc:21:03:51:bf:3e:32:f5:5a:da:
1f:b1:3f:65:0a:8e:ab:c7:02:d6:80:71:f2:73:3e:
e4:87:61:dd:99:63:09:0d:fd:eb:95:03:d1:5c:e0:
66:40:f3:04:18:1c:28:f3:2f:a8:32:37:96:0a:c7:
80:bb:10:cf:ed:ee:00:49:c0:a4:31:20:6a:be:2e:
c8:cf:5d:bc:c4:2f:ea:36:db:f5:87:cb:02:38:4b:
c8:d8:3f:1a:e4:ad:54:ab:58:7f:c7:57:58:73:f0:
0e:51:84:05:31:93:9b:61:a4:70:a1:a7:68:65:02:
de:b1:40:3b:6c:95:84:07:4e:b4:4b:d8:3e:ec:8e:
35:ce:0f:21:40:4a:56:eb:31:10:91:06:41:b7:de:
9d:dc:e8:80:bc:d4:3a:9b:9f:de:8c:22:ce:c0:41:
5c:c2:7e:d8:1e:d4:46:db:de:2b:88:b5:8a:66:8d:
25:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:23:E3:C7:A5:74:2E:C1:E4:C6:12:89:BD:4C:78:E9:61:60:82:98
X509v3 Authority Key Identifier:
keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203633303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.176.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:1a:5c:84:83:1d:b6:5a:60:b4:d0:eb:3e:e1:f1:0d:8b:fe:
87:28:36:30:06:1e:38:36:3f:2d:7f:19:7d:c1:15:f1:72:33:
8c:0e:44:7f:f3:ba:25:3b:b4:aa:48:3a:44:c5:48:9f:85:e4:
a3:2d:74:6e:06:b3:07:b4:a1:8d:a2:ff:b7:da:56:87:b3:47:
bd:e6:8a:28:db:8d:28:85:5b:33:b1:62:1f:ed:6d:07:79:4a:
c6:e2:f4:8a:8b:d2:1f:98:e2:4d:5a:d3:ab:ac:c8:69:3e:f3:
59:c6:fc:7b:c0:db:b6:34:5f:3f:c3:e5:6c:ff:d5:60:a7:67:
2a:45:d2:96:07:be:54:27:96:e8:92:9e:66:be:72:d7:c6:42:
06:30:2a:a9:a1:31:7c:6e:e4:59:7f:35:82:de:07:1b:90:92:
8e:e3:c8:52:4b:f8:78:7b:89:d5:da:6a:30:28:43:d4:58:96:
c4:6c:10:a0:61:d8:87:33:68:22:94:24:35:b6:c8:41:ce:09:
77:6a:4f:48:c4:d6:ed:46:d2:f2:fb:86:6e:17:a5:a6:d9:0d:
98:4f:c0:4c:63:10:28:96:7e:93:2f:6a:72:5f:a1:3c:5c:48:
f1:e1:ea:a3:40:46:3e:42:2f:ee:83:93:f0:ee:1e:e0:44:33:
5a:7c:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:30:22 2025 by rpki-client