Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/2b8293b4-6f04-3436-b0f2-07c56dc8fcea.roa
File: 2b8293b4-6f04-3436-b0f2-07c56dc8fcea.roa (raw, json)
Hash identifier: dC/SEQo2ZOFfby+Gq822zrHEyaWJeW87PcbdOu5edqA=
Subject key identifier: 19:56:CB:0D:97:99:28:64:7A:20:64:DA:65:86:6B:98:94:F1:CB:8C
Certificate issuer: /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial: 010D0C9F4328584851A5762DB630DDED8446A100
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/2b8293b4-6f04-3436-b0f2-07c56dc8fcea.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 3257
IP address blocks: 104.171.208.0/20 maxlen: 20
2602:fd43::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 06 Mar 2025 20:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:76:2d:b6:30:dd:ed:84:46:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=f8cf60bc-0460-4324-ac32-c5128752f006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:37:e2:e8:f5:fc:d6:76:6b:ec:68:9b:c1:
8e:cb:40:4f:41:69:6e:a4:98:74:2c:95:cc:10:10:
4f:46:ba:62:79:d7:41:69:c6:93:f0:57:5c:88:5d:
13:17:74:06:b0:9d:66:9e:25:2b:fd:1a:70:41:87:
56:67:8a:b0:84:8a:1d:70:57:b0:51:d4:72:f1:c8:
6b:59:fd:83:58:c8:5b:0c:14:9b:4f:af:18:cf:f4:
c1:bd:ff:2a:32:28:ee:77:34:45:77:41:27:ca:71:
4c:8c:12:f7:8c:48:b7:37:98:25:eb:50:e5:d3:9e:
01:8e:a4:79:72:58:a4:05:20:30:ea:21:33:ca:ca:
52:7b:1a:03:9f:3f:f3:86:59:bb:54:ad:b7:93:d9:
99:cd:f4:95:5e:f8:ec:87:ae:bf:b0:3c:1b:ad:95:
fb:c4:ab:a6:ed:70:03:fc:49:c4:07:a5:00:62:4c:
f4:a7:e3:60:04:dd:13:1c:3f:f8:07:5a:7a:07:3d:
68:7f:ef:61:10:d1:d8:f7:1f:04:4b:1e:ca:28:80:
f5:14:46:d7:35:f2:59:14:70:40:d1:a4:ea:25:8f:
a0:58:66:df:1e:b7:d0:22:b5:6a:46:83:8a:0b:32:
cb:73:97:4c:cd:88:74:08:6c:7d:61:d4:45:9b:04:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:56:CB:0D:97:99:28:64:7A:20:64:DA:65:86:6B:98:94:F1:CB:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/2b8293b4-6f04-3436-b0f2-07c56dc8fcea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
X509v3 Authority Key Identifier:
keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.171.208.0/20
IPv6:
2602:fd43::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:d4:10:80:f2:1e:45:ef:94:a6:79:ca:e5:0f:fd:5a:06:9f:
24:fc:f9:e8:e9:52:a9:bf:72:06:30:43:74:77:43:59:e5:b3:
12:59:6d:c5:9f:8c:ce:81:18:85:af:8c:10:90:ee:8d:e0:b3:
b9:63:0a:6c:0a:6c:55:8f:2f:4e:58:0d:57:b7:58:d9:29:99:
f9:38:91:27:11:c3:79:50:ee:28:87:e6:9a:4a:73:9b:15:15:
06:bb:58:ab:7f:5a:81:3b:94:76:ea:d3:5f:e7:b0:0b:ba:98:
84:14:31:d9:88:2e:50:92:b3:c5:7b:19:1b:80:0f:e4:45:b4:
49:3a:6c:95:72:0e:a0:a6:25:81:a1:82:9d:ef:1f:e0:3d:81:
06:c3:a5:ea:fd:21:25:0a:d6:0a:f5:30:33:73:df:ab:32:36:
20:8e:e6:a6:7a:c7:f8:c7:04:cd:b2:85:45:8e:f5:98:d4:8c:
73:55:46:7a:9e:8e:6d:e8:ad:7d:96:10:bd:69:40:0c:de:8e:
01:37:a0:8b:ba:5b:51:0d:49:b2:b0:bf:1d:0d:2b:ef:a9:02:
81:b9:2b:29:65:6c:ce:ec:d4:8d:9d:09:9d:e9:88:9d:6e:d3:
53:d0:f2:77:9a:54:ac:43:d3:db:34:2b:0f:f2:7b:67:5e:21:
80:2c:1f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:24:11 2025 by rpki-client