Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd2164db-5da1-394f-af76-a6f7789a8d09.roa
File: dd2164db-5da1-394f-af76-a6f7789a8d09.roa (raw, json)
Hash identifier: BBbO+0QyWgFv6TyNElETK7BdaSEQt3GRrOGTlSXQxgM=
Subject key identifier: 2D:1D:CD:7B:99:60:83:21:F8:C5:56:BC:17:5C:9F:5F:14:96:E1:9B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C53364E6604C5D037F122B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd2164db-5da1-394f-af76-a6f7789a8d09.roa
Signing time: Tue 04 Feb 2025 11:24:41 +0000
ROA not before: Tue 04 Feb 2025 11:24:41 +0000
ROA not after: Mon 05 May 2025 10:24:41 +0000
asID: 30036
IP address blocks: 173.16.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 12:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:33:64:e6:60:4c:5d:03:7f:12:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 11:24:41 2025 GMT
Not After : May 5 10:24:41 2025 GMT
Subject: CN=8baf832e-f719-440d-a503-c8833f0d6faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0c:a4:2a:3b:d3:6c:af:6f:b3:bd:fe:c9:b8:
4b:eb:6c:e0:81:19:fb:6d:a4:f3:f7:90:63:9b:ee:
35:83:92:c0:b6:32:74:ef:fd:2a:7c:b2:5f:e2:d3:
1c:9a:bb:19:b6:05:19:fa:45:35:0d:82:eb:e4:a1:
da:17:e4:66:00:81:d9:40:52:a5:0d:e9:1e:cd:7c:
96:c2:67:40:69:1e:3b:de:99:31:23:26:44:b8:2a:
fb:56:91:32:69:bb:80:87:ee:2d:2c:0a:c3:9b:20:
9b:21:6c:5f:16:ed:a8:8a:a8:95:4c:c4:c2:de:23:
14:e2:35:29:e5:e0:82:9c:f1:12:14:85:47:62:82:
09:69:a4:5b:8c:ce:3a:1d:11:86:51:92:89:74:95:
4f:74:99:42:fc:12:fb:1d:b7:ba:2e:4c:58:eb:8c:
48:78:88:b6:85:a3:37:38:dc:0e:b2:26:1d:ba:cd:
06:48:54:62:8c:e0:dc:60:f7:88:0e:53:c8:47:9e:
b1:42:35:82:aa:5f:9b:f6:41:21:7c:f9:b4:da:3f:
d9:97:28:0b:3c:ba:52:9c:e8:d9:05:24:c3:22:df:
76:47:34:53:d2:cc:b0:92:8e:b9:93:5d:47:65:ee:
57:bd:31:d4:d2:14:f3:51:cf:56:8c:2a:14:d7:ff:
0d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1D:CD:7B:99:60:83:21:F8:C5:56:BC:17:5C:9F:5F:14:96:E1:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd2164db-5da1-394f-af76-a6f7789a8d09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:32:fb:ac:fc:60:67:ed:7e:8f:45:39:c5:f1:ce:91:d9:92:
ee:ba:9e:ce:79:92:b4:7d:76:b8:44:b0:77:7e:30:7b:e0:47:
e3:09:ab:04:bc:a1:c1:4c:e8:c4:7e:7f:33:9f:85:43:b7:ae:
81:89:14:09:35:c9:0a:ff:4c:3c:18:52:70:e8:81:37:25:bb:
40:5e:3d:ef:ac:dc:5f:df:76:f3:a8:a6:e7:d7:36:3e:59:73:
15:d8:6a:1f:db:46:33:47:94:13:81:a2:96:15:cc:99:39:cd:
48:86:e9:e8:a4:51:4a:79:aa:fa:d8:c3:43:1d:50:25:93:4c:
20:0c:13:73:d4:4a:53:50:91:7d:b3:3a:0e:9d:08:e1:f2:05:
9e:0c:49:c7:e8:c1:62:31:27:d1:47:66:2f:55:4e:87:d0:62:
a5:87:32:8c:ea:7c:3e:4b:54:6b:e9:62:7d:a1:55:8d:87:27:
15:cf:4f:61:9b:17:7c:21:68:52:a8:fd:46:ee:24:72:56:3e:
b5:22:87:3d:07:a9:02:b0:d6:51:4d:70:2d:ae:de:78:4e:50:
26:d4:83:1e:46:34:ed:ff:bb:a1:fc:dc:fb:44:65:aa:8a:0c:
eb:72:b3:ee:cd:04:19:bf:b8:c3:9e:e0:dd:f9:2d:92:f0:7d:
67:82:9a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 03:51:06 2025 by rpki-client