Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de0388b3-4bac-33d3-81ec-d64ad3284f6f.roa
File: de0388b3-4bac-33d3-81ec-d64ad3284f6f.roa (raw, json)
Hash identifier: VmDHG46W9R/Eb7mXtihAZ7gjj1DNRxOjuGN4NQVsJkU=
Subject key identifier: 3F:8B:02:5C:87:4A:50:DE:BC:3F:EF:62:46:27:5D:E4:EA:75:5B:D0
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F7975D302563E68C254B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de0388b3-4bac-33d3-81ec-d64ad3284f6f.roa
Signing time: Wed 05 Feb 2025 11:11:37 +0000
ROA not before: Wed 05 Feb 2025 11:11:37 +0000
ROA not after: Tue 06 May 2025 10:11:37 +0000
asID: 30036
IP address blocks: 173.28.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 11:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f7:97:5d:30:25:63:e6:8c:25:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:11:37 2025 GMT
Not After : May 6 10:11:37 2025 GMT
Subject: CN=7fb5f488-a25f-4482-9691-98d5a92197cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:ea:04:de:6b:58:ff:92:f6:54:5b:dd:91:
70:9b:14:ac:00:74:c7:dc:88:89:ef:5f:e2:17:89:
3e:8a:48:5b:aa:11:82:c4:bf:e9:ba:e4:88:52:af:
ff:c3:37:a2:2a:e8:0b:a8:1d:c3:42:62:82:ea:2e:
26:c8:ba:c6:b8:24:76:7c:6d:da:3f:71:5b:87:f4:
81:4a:c1:f7:db:f0:0a:8c:b2:ea:55:89:32:42:c3:
58:c1:79:dd:f5:92:f6:57:5d:cc:b6:f2:49:af:bd:
a2:f8:28:59:bf:ce:da:c4:61:43:2b:ad:aa:01:c3:
56:4f:89:68:11:93:e4:9a:9e:34:0f:b7:f9:a0:73:
b3:8b:22:5c:ee:db:c5:3f:04:34:c5:91:1e:28:9c:
12:50:ec:25:da:46:81:f7:a4:11:7e:e2:05:00:26:
84:a4:b7:9c:9c:38:8f:42:51:d6:1f:3c:76:c0:29:
21:57:64:96:66:45:30:c2:81:5f:13:1b:d1:65:e4:
24:c1:d4:06:d7:89:58:2d:32:21:f5:6b:e2:40:aa:
2e:3c:47:ea:e4:d8:f8:fb:40:df:de:00:eb:c6:4f:
44:94:21:b0:6a:e8:6a:df:69:06:e8:f6:b8:5d:f9:
00:21:75:f8:cd:25:f6:1a:51:3d:45:f2:86:f8:a2:
0a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8B:02:5C:87:4A:50:DE:BC:3F:EF:62:46:27:5D:E4:EA:75:5B:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de0388b3-4bac-33d3-81ec-d64ad3284f6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:4e:f2:81:d5:1f:2e:5f:85:6a:43:1d:3d:08:e6:d2:0a:a5:
c5:96:1a:ec:eb:90:0a:33:9e:4a:6e:30:58:21:0b:f9:f4:72:
28:ec:10:cc:66:69:87:c4:ab:dd:66:44:58:5f:e7:78:23:21:
14:32:df:83:f3:06:ba:b0:11:e7:e6:62:df:76:8f:1e:d6:72:
45:71:8e:4b:57:30:6f:6d:af:d8:97:03:02:41:c1:1d:48:bf:
e8:59:54:a3:4f:7c:f7:8e:86:ff:22:ca:d9:99:83:8c:09:57:
0c:9c:4f:69:58:7f:72:36:43:3e:c7:65:cb:c0:23:3e:29:81:
e4:39:39:ac:c1:f5:6f:49:5f:16:8a:fc:a9:dc:1d:c3:e0:7e:
d0:81:50:18:89:a5:11:39:10:26:3c:a7:e9:e4:2b:60:85:d8:
12:72:7c:f4:8a:46:1b:cd:2b:94:f9:17:fb:27:e1:56:b5:9a:
6d:0e:fb:95:61:7f:94:5c:96:06:77:3d:b6:dd:ca:91:ae:4c:
d7:89:fa:e0:24:3c:41:90:98:32:86:9e:3c:81:f5:d3:c0:b0:
b5:50:69:5d:4d:9e:a9:e8:0d:65:65:35:c1:db:49:98:17:1a:
4e:7c:fb:9c:63:ec:3d:6b:1f:75:8c:ea:bb:7a:f1:bd:c6:2b:
af:0d:66:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:58:40 2025 by rpki-client