Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c87bd493-211b-3c58-9f64-c9ec2941ac64.roa
File: c87bd493-211b-3c58-9f64-c9ec2941ac64.roa (raw, json)
Hash identifier: 5+73g/IXZcuD0SgtfIXTHnXJ6rW0ZlSbmBqC0nzcmDI=
Subject key identifier: A1:73:C5:1D:A3:CA:C7:4F:8E:B2:73:C8:EA:0D:A5:4B:46:60:DC:0A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C261DE34312BE349F55AD100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c87bd493-211b-3c58-9f64-c9ec2941ac64.roa
Signing time: Mon 03 Feb 2025 11:10:54 +0000
ROA not before: Mon 03 Feb 2025 11:10:54 +0000
ROA not after: Sun 04 May 2025 10:10:54 +0000
asID: 30036
IP address blocks: 173.24.198.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 04 Mar 2025 15:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:61:de:34:31:2b:e3:49:f5:5a:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:10:54 2025 GMT
Not After : May 4 10:10:54 2025 GMT
Subject: CN=6b302c3a-2c38-489b-97fa-8ca2fe8ac4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:79:51:14:5e:a5:03:80:c9:11:d7:f9:e2:
45:ed:07:45:cb:94:f2:b7:65:25:4f:77:b0:3b:fa:
8d:6c:39:37:eb:4a:86:32:7b:8a:fc:4d:b4:ef:2d:
8b:ad:04:87:ec:9e:8b:5d:f7:a2:b7:d2:78:20:74:
27:e8:97:87:da:97:16:d2:fe:ec:88:db:d8:e4:db:
53:12:78:79:66:f2:7d:be:e3:11:6a:a7:21:e9:f3:
22:67:47:0e:1c:b7:07:a3:48:6a:9b:8c:6c:4d:d1:
56:cb:93:bd:c8:f9:95:9e:5c:c7:5b:e7:ae:b6:6a:
01:49:d3:05:c7:8f:72:26:7d:ab:e6:9e:90:5c:9f:
04:50:69:8f:1a:24:15:a6:b1:41:26:cc:b3:28:3a:
81:e7:71:18:64:94:6a:99:67:c4:6f:67:f7:dc:03:
12:f5:85:0a:d3:f7:c7:62:ed:90:e0:d1:55:fc:a6:
a2:ee:5c:c3:99:35:af:68:fe:3c:86:14:81:7b:fa:
5a:44:28:cb:94:74:f7:13:ad:4c:d3:af:86:12:52:
f9:83:b8:65:92:37:5d:e1:bc:5a:cb:f7:56:54:4d:
a4:ca:e5:cf:73:80:9e:2e:6c:27:46:3f:29:95:75:
b1:5b:3e:13:4a:07:a1:3d:90:1d:73:fb:35:96:72:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:73:C5:1D:A3:CA:C7:4F:8E:B2:73:C8:EA:0D:A5:4B:46:60:DC:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c87bd493-211b-3c58-9f64-c9ec2941ac64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:e9:31:de:cb:5b:25:ca:9d:fb:ce:0b:92:75:fc:b8:df:cd:
29:3d:f0:a5:fe:2b:b1:cf:33:8d:5d:41:9f:13:a6:2d:13:64:
75:74:74:69:2c:bd:da:96:6c:05:b0:32:4f:3e:ca:e1:89:8e:
69:d6:97:3b:25:41:04:d5:07:ac:4f:8f:0b:6b:51:59:64:d0:
d8:50:e1:90:a8:4f:6c:ce:5f:17:00:0b:f3:61:01:98:ef:65:
f7:99:27:f0:cd:95:c1:af:fb:7f:c9:70:dd:bf:5a:92:83:50:
7c:bc:9c:51:cd:02:da:9b:39:72:77:32:9f:2d:8a:7f:f1:0d:
05:ad:4b:b3:90:af:0f:aa:ef:1f:90:73:b6:3c:be:7c:d7:5e:
f6:d2:78:25:27:60:a2:1e:f0:29:01:67:e9:ee:71:32:9d:5b:
a5:35:b6:c5:4f:10:3d:85:83:fa:ac:cd:a4:05:33:c6:d5:3f:
24:b7:31:d1:33:b9:76:c4:50:5d:96:aa:90:1e:8c:1e:68:76:
52:41:1a:4e:17:f1:02:0d:b4:9b:f6:36:8e:a1:7b:b6:5c:77:
eb:28:6b:cd:c5:e2:62:c4:e9:25:8e:b3:bf:e7:ef:ab:97:d6:
62:77:1d:0e:de:9f:3b:5d:54:ef:1e:b3:16:52:eb:d8:08:7c:
cf:ee:73:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:04 2025 by rpki-client