Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/91d84431-071f-34b5-801d-48a783ee9f9f.roa
File: 91d84431-071f-34b5-801d-48a783ee9f9f.roa (raw, json)
Hash identifier: 7kFmuoeMxF7PlbGBtNUa9WwexGVPRNUT6uM8U0gQ3KE=
Subject key identifier: 65:81:DC:33:67:47:10:AB:E4:72:4B:E4:8C:92:53:D0:EF:CC:D4:5F
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F43285849017A0C486CE41386A4CD4580
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/91d84431-071f-34b5-801d-48a783ee9f9f.roa
Signing time: Wed 26 Feb 2025 01:35:33 +0000
ROA not before: Wed 26 Feb 2025 01:35:33 +0000
ROA not after: Tue 27 May 2025 00:35:33 +0000
asID: 8987
IP address blocks: 170.85.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 17:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:01:7a:0c:48:6c:e4:13:86:a4:cd:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Feb 26 01:35:33 2025 GMT
Not After : May 27 00:35:33 2025 GMT
Subject: CN=5eb1459b-0622-4475-8672-2e2c42ea5227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:7f:e9:48:a9:3a:7e:f8:9e:05:06:11:12:
f6:ef:9c:20:18:e4:cb:12:44:85:f1:fb:a2:10:7e:
91:9e:29:aa:35:f6:0b:1b:98:24:b5:64:74:d3:dd:
fc:33:9f:1e:d4:fc:8c:83:1c:f7:27:e9:1a:df:ac:
7a:b1:2e:ee:87:bc:06:93:8a:a2:fb:45:f2:9b:56:
28:f8:37:5d:5d:05:c7:21:e0:c4:08:75:0f:5e:b7:
0d:3d:a2:c1:2e:68:ff:4d:d7:06:85:cf:86:eb:db:
c9:26:4b:f5:83:57:a3:b8:f2:7c:42:64:14:f1:31:
ae:75:1c:96:76:de:2b:5d:df:4c:9b:17:b9:cb:6f:
85:27:e6:ce:35:e0:48:8b:c4:3a:d7:4e:71:9a:2c:
80:1c:1b:d8:f8:5c:27:05:99:42:a4:0c:a0:5d:5a:
d6:7c:0c:e1:dd:06:67:78:4a:8e:ff:db:e8:fa:1b:
ba:bb:c0:17:8a:36:c0:3e:89:84:ba:f1:b7:64:44:
2b:15:70:fe:b2:b5:55:5b:5e:d3:ea:8b:77:7c:88:
ac:33:53:e7:24:6b:d4:7f:33:d9:53:8f:61:50:10:
26:33:4d:28:db:6f:93:9a:c8:eb:76:1d:4c:d3:5f:
92:b7:c1:d2:27:ac:8b:fb:3d:72:f9:ce:9a:74:3f:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:81:DC:33:67:47:10:AB:E4:72:4B:E4:8C:92:53:D0:EF:CC:D4:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/91d84431-071f-34b5-801d-48a783ee9f9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:ea:17:b2:3c:c4:51:2e:3f:cd:90:ce:06:32:0c:62:2f:af:
43:9f:d4:a1:c1:c9:4f:89:82:b4:3b:84:48:ac:5f:1a:3c:40:
bd:20:87:ab:50:9d:62:ad:f3:79:0d:e7:18:df:83:75:f6:ab:
fd:73:13:ea:5c:1f:e6:7d:18:f1:c3:fc:2e:5b:f5:35:70:61:
3c:30:e4:b7:ac:31:8d:eb:cf:77:f8:ec:ee:05:d5:ca:53:7b:
39:dc:15:f6:f9:b2:c6:5e:d7:85:6b:fd:08:a2:aa:f8:b7:0c:
44:04:db:f2:54:a5:3a:54:f4:25:54:51:7d:29:8e:bd:41:d2:
fc:d0:d4:61:ed:91:4c:12:1d:2e:69:b2:16:3f:05:65:b7:ed:
26:1c:55:fb:22:53:60:a9:8a:4f:1d:93:0a:38:a3:7c:44:c3:
e8:0b:00:4b:80:56:c7:d3:54:f0:ae:67:18:a7:c0:2f:4c:92:
09:c6:a7:5c:67:4b:7f:36:ce:4a:f5:bb:e2:67:99:6f:16:6c:
9c:9f:80:ac:34:e9:29:e4:67:db:36:26:13:6b:92:78:7e:1d:
15:8d:7e:71:bb:dc:9f:a7:eb:4c:7c:68:ab:3f:46:23:c2:fb:
58:73:fe:30:25:b0:e6:36:52:e2:7b:66:cb:28:59:4d:8a:dc:
64:cc:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:48:12 2025 by rpki-client