Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ba1d263-34c5-36d6-9476-89695d4071db.roa
File: 4ba1d263-34c5-36d6-9476-89695d4071db.roa (raw, json)
Hash identifier: xkIVwwMUyY7agOZhwnlzWsHpTJxIJxQDPHg+POnUB6c=
Subject key identifier: 5A:C2:DB:38:80:13:D8:E6:9B:36:AB:F3:B8:81:27:2E:2C:45:98:AA
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C2610B4AEB2F7409C7DDC900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ba1d263-34c5-36d6-9476-89695d4071db.roa
Signing time: Mon 03 Feb 2025 11:09:14 +0000
ROA not before: Mon 03 Feb 2025 11:09:14 +0000
ROA not after: Sun 04 May 2025 10:09:14 +0000
asID: 30036
IP address blocks: 173.17.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Mar 2025 11:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:61:0b:4a:eb:2f:74:09:c7:dd:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:09:14 2025 GMT
Not After : May 4 10:09:14 2025 GMT
Subject: CN=0f025861-a262-4830-bb4a-41aa871b9cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:25:1b:aa:3a:b5:ea:f7:4c:1d:68:3a:21:
5a:03:88:38:06:3c:09:5c:ff:4c:53:72:b9:8d:df:
0f:11:21:c0:23:58:38:69:c7:0b:30:98:ba:a3:4c:
5e:de:18:c1:8e:06:f5:c6:6a:38:a2:b1:20:7a:b6:
58:77:d0:90:8c:6e:ed:19:37:15:91:34:23:01:f0:
86:3d:6c:a5:f5:79:46:e1:c4:2f:e2:a2:b6:0c:a5:
9e:8f:7b:42:42:a0:dc:33:4d:53:af:8a:8f:8d:4b:
59:f7:f8:e2:c6:9c:86:27:7f:25:b8:b5:6b:b9:7d:
b5:a5:4b:e0:9f:3a:e1:c0:03:aa:52:13:30:3b:fc:
c0:38:fb:32:be:e9:0c:29:9c:f4:ce:82:a0:59:87:
39:c9:54:4f:ec:84:cc:1b:a8:a2:af:eb:16:a7:1c:
d9:73:8d:96:8c:3a:47:e6:92:5e:84:45:2b:88:4b:
19:98:36:36:23:7e:a8:6c:9f:e8:18:b1:6b:50:51:
d3:8b:c0:c7:1a:e2:1b:d7:9b:ba:98:e1:76:3d:91:
a7:2f:93:cb:9a:71:85:99:78:b4:51:2f:bd:92:4e:
3d:90:5c:c4:cf:e6:1e:8c:f9:fa:0b:25:bf:60:75:
8c:34:9c:95:7d:e1:a4:62:46:c1:00:fb:aa:02:4c:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:DB:38:80:13:D8:E6:9B:36:AB:F3:B8:81:27:2E:2C:45:98:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ba1d263-34c5-36d6-9476-89695d4071db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:d4:fb:8e:ae:16:7a:f7:83:97:3b:ad:50:0d:2a:3b:3f:df:
23:4b:3d:13:41:28:ac:0b:46:00:53:22:44:27:0b:51:30:62:
28:2e:5b:99:d6:89:5c:24:85:78:32:89:ce:3c:00:c2:8a:ce:
ce:7c:89:e1:64:4e:6e:ae:f3:4f:23:a1:bb:a5:0e:19:5c:51:
26:3f:45:da:e5:64:7e:70:e4:88:b4:de:d8:89:b7:a4:b3:b8:
e9:81:d3:29:52:d6:cc:5c:53:fb:4e:bc:b4:e2:31:c6:a5:81:
01:f5:47:84:92:6a:75:aa:08:32:b7:5d:39:0e:60:fa:63:42:
9b:d5:1f:39:39:b2:84:ab:73:40:f9:f3:37:0f:72:88:ca:bd:
aa:5c:ff:04:a8:77:f8:63:d1:bb:76:30:22:ec:12:07:7b:29:
03:fa:55:fc:d4:14:2d:2f:f5:88:01:ac:85:bb:ef:56:80:ff:
a7:75:ea:45:e8:d4:46:d3:d7:fa:b3:43:cb:0b:36:ff:34:1a:
2c:58:22:37:01:32:79:64:49:de:7f:ed:48:6a:10:2c:af:08:
f0:c9:5c:d4:ee:65:b9:6c:1b:a7:80:cc:83:28:d9:85:8d:44:
b1:4e:7e:74:86:7c:45:31:99:9f:e8:fe:a2:b4:fa:6f:e0:15:
a0:5e:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:09:32 2025 by rpki-client