Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d68b5539-026c-3d86-9f63-1a1feb2a3cd0.roa
File: d68b5539-026c-3d86-9f63-1a1feb2a3cd0.roa (raw, json)
Hash identifier: 1ozF9du4lgRA60P3w5dNjCZgSZO9roKOxednACpLnWA=
Subject key identifier: 8C:10:32:AE:EE:92:60:1B:5A:7E:EF:CE:D1:89:0A:AA:2F:40:23:96
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5341F5E30850B9124A19D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d68b5539-026c-3d86-9f63-1a1feb2a3cd0.roa
Signing time: Tue 04 Feb 2025 11:26:09 +0000
ROA not before: Tue 04 Feb 2025 11:26:09 +0000
ROA not after: Mon 05 May 2025 10:26:09 +0000
asID: 30036
IP address blocks: 173.30.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 11:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:34:1f:5e:30:85:0b:91:24:a1:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:26:09 2025 GMT
Not After : May 5 10:26:09 2025 GMT
Subject: CN=8f654ab2-8b8f-47be-bcb5-0322cdb3929d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:14:6c:87:d7:4b:32:08:19:66:e3:8a:5d:
2f:d7:3c:d5:e3:6c:b7:36:1d:23:58:8a:f1:ce:1f:
1a:5b:35:5b:d4:92:4a:73:da:08:11:4e:5e:bf:3b:
d5:85:d2:04:a8:99:99:4f:ff:7a:06:d1:af:fb:cf:
2a:bc:3a:70:60:69:8b:6f:c5:fa:22:f5:5d:3c:f5:
d7:3e:ca:0d:8c:a5:e8:21:08:b9:e5:52:25:b4:b3:
f8:54:f7:15:9c:1e:69:fd:46:0b:bd:88:65:48:3b:
01:48:70:e5:70:c7:94:dc:06:69:2e:5b:5b:9b:7c:
38:c4:2f:8c:5c:71:11:24:8a:be:f5:3f:ae:c7:ad:
5d:8e:d8:88:ca:75:02:35:ae:74:07:34:65:c3:0a:
e5:0e:34:b6:c1:a8:07:03:68:6f:1f:a7:1c:4e:fa:
be:e6:64:88:ca:98:dc:68:c1:70:0c:cc:62:f3:52:
69:44:ec:89:7c:fa:4b:c6:1b:f4:51:cf:47:c3:ba:
74:ce:1f:73:7e:e5:9f:14:7e:97:ba:80:55:fb:dc:
79:16:47:8c:58:18:e7:de:25:84:78:6a:ed:13:91:
dd:c3:af:f9:e0:04:54:be:c3:07:d8:76:ac:ad:06:
2e:bd:55:0b:02:37:a3:5f:a3:9b:04:77:ff:ab:93:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:10:32:AE:EE:92:60:1B:5A:7E:EF:CE:D1:89:0A:AA:2F:40:23:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d68b5539-026c-3d86-9f63-1a1feb2a3cd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.30.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:e9:b1:bf:ed:75:28:d0:74:e6:d1:50:24:25:d3:81:4f:ce:
c5:02:c9:38:ec:9c:02:60:cb:4d:79:5b:fd:f0:8f:65:90:f7:
5b:90:d0:8c:c2:cb:0c:28:15:9e:fd:ec:bb:46:11:3d:0c:71:
3c:b5:ef:99:96:9b:08:61:80:59:d5:99:5c:c0:b6:36:f3:94:
84:9a:7c:3a:c2:da:ad:04:5d:0b:4e:fd:85:73:c0:64:cd:cc:
7b:b3:22:0f:f6:de:93:7e:aa:2c:54:de:af:d0:1f:f6:dc:9d:
31:75:f6:10:c9:59:2d:e7:77:9a:2d:62:3c:0c:93:ce:1d:d0:
56:2d:b0:1e:af:03:e8:3e:3d:13:8e:41:7d:88:3e:5a:59:78:
9b:51:17:c9:67:4b:d9:1f:60:5b:93:f0:58:4f:fa:ce:7f:e4:
02:df:7c:0e:9e:53:ad:93:a7:cf:56:e5:29:a9:c5:77:9a:a2:
d4:35:b0:42:b9:c0:f8:ff:20:65:2d:f0:78:ba:02:90:5f:f6:
50:0a:0e:2f:35:67:b3:9c:bf:71:9a:5a:0d:ba:f2:aa:83:41:
d4:ff:39:c4:31:fa:88:c1:82:07:6d:ae:4e:b8:f9:37:c5:7c:
81:3b:32:98:7a:84:65:b0:e9:e3:92:0f:06:ae:2f:ad:1f:9e:
39:12:18:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:31:50 2025 by rpki-client