Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d416a55-e0ae-3771-b5b1-7dfba0e73ad4.roa
File: 0d416a55-e0ae-3771-b5b1-7dfba0e73ad4.roa (raw, json)
Hash identifier: eXr4Pu2jMn7W5iL8yuEuTnS02nEbIPcbAyUsZ5NzMoI=
Subject key identifier: CF:DE:AC:D9:41:CA:71:83:5E:B2:2E:F0:A7:3A:B7:AA:43:58:4F:A4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57752D19772A633B55EBE00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d416a55-e0ae-3771-b5b1-7dfba0e73ad4.roa
Signing time: Tue 04 Feb 2025 13:41:33 +0000
ROA not before: Tue 04 Feb 2025 13:41:33 +0000
ROA not after: Mon 05 May 2025 12:41:33 +0000
asID: 30036
IP address blocks: 173.28.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 18:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:77:52:d1:97:72:a6:33:b5:5e:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:41:33 2025 GMT
Not After : May 5 12:41:33 2025 GMT
Subject: CN=ee449caf-eda5-4e93-83eb-d4f0266b15d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d3:43:f1:30:93:c3:a4:d0:b5:be:56:ee:85:
44:f0:16:be:50:fb:6e:0a:44:ce:e3:95:2e:c8:3a:
98:57:08:5f:4f:e2:b6:a9:6f:ce:d5:52:5f:1b:0f:
d8:e9:49:d3:ce:08:e0:5c:82:a4:e1:20:1d:0f:e3:
95:25:f2:e0:38:49:c3:76:ee:ab:b3:45:e4:24:41:
41:48:1d:ac:18:19:5a:f7:99:e6:1b:8e:2b:23:c9:
d8:e4:db:b2:f0:d7:cc:39:48:42:15:da:b8:17:36:
32:9e:83:18:95:42:3b:54:e4:cc:59:47:a2:06:c8:
4d:3d:59:a7:46:1d:7e:0b:19:ca:cc:32:c8:84:43:
3c:b3:4b:e0:b8:cd:d0:86:f7:80:ca:8d:46:45:6c:
61:8d:0a:65:61:7a:2c:14:1e:ed:cf:66:81:60:a0:
e2:2d:1c:c1:ac:56:9b:50:1d:f0:06:62:e2:6a:cb:
a2:5b:fc:10:5c:1f:c2:f8:c4:0e:39:97:d9:9a:3b:
96:cf:17:20:c4:7f:64:ab:85:5f:5c:48:0d:15:2a:
37:43:11:99:1f:e5:9b:19:3c:45:7c:84:6c:fd:13:
54:76:aa:ce:62:2d:03:fe:67:b4:b1:3b:4d:f8:7b:
d4:51:0d:88:92:a3:bc:60:52:c1:2c:b8:52:74:a7:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DE:AC:D9:41:CA:71:83:5E:B2:2E:F0:A7:3A:B7:AA:43:58:4F:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d416a55-e0ae-3771-b5b1-7dfba0e73ad4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:0c:34:a1:44:45:f3:8e:02:5d:2c:99:3a:28:af:3a:8b:e2:
32:3a:8f:f6:4c:ff:58:03:65:11:ff:2a:62:8e:f1:ce:06:5e:
4c:21:90:56:11:81:0a:b8:d8:95:4e:9b:1c:55:db:4d:0b:94:
22:c6:0f:db:06:47:0f:ee:13:c9:d7:ad:e1:64:e3:94:31:18:
32:d6:72:72:f7:4d:cf:50:d0:9c:75:df:1e:9e:55:50:2f:34:
c8:91:3b:fc:6b:ce:e8:2e:ac:3d:98:dc:02:d0:76:1c:7f:12:
40:81:cd:c6:e5:95:29:de:10:e1:48:ce:60:49:c6:bc:d6:08:
89:1f:d7:65:f7:62:fd:83:8c:31:74:72:04:df:c9:2a:c5:1a:
0f:12:5a:d8:df:9b:05:d7:45:a1:c5:9d:41:10:cd:a2:c5:de:
2c:a2:84:15:05:e7:f1:c9:69:8b:47:5c:fc:77:5c:de:f7:3a:
3f:a4:01:b0:dc:dc:ca:2b:4d:28:0e:74:a5:d5:ea:02:b3:87:
75:ff:89:65:5b:e0:8e:69:b5:a1:0f:0c:6e:08:7e:9f:b4:00:
0d:bf:28:8a:1d:10:30:4e:52:77:4c:4b:99:f5:e0:12:b4:1a:
17:11:1a:36:fe:f9:13:27:eb:dd:29:e2:5b:fd:9b:da:1e:9f:
ec:3c:87:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:45:41 2025 by rpki-client