Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/518e1cf8-8eb0-36ae-8baa-2b9e7e7d3c68.roa
File: 518e1cf8-8eb0-36ae-8baa-2b9e7e7d3c68.roa (raw, json)
Hash identifier: w8rgsnER1qsI9nQ/Uf5Z1oqm/c7IKcAbItbFz3QHXn8=
Subject key identifier: D1:1A:B7:7C:27:B9:4C:57:12:20:B1:FD:D0:3F:DE:CF:33:1F:A6:99
Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial: 010D0C9F432858424E6097DD451827FF2A7F3800
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/518e1cf8-8eb0-36ae-8baa-2b9e7e7d3c68.roa
Signing time: Wed 21 Jun 2023 12:00:00 +0000
ROA not before: Wed 21 Jun 2023 12:00:00 +0000
ROA not after: Sat 09 Aug 2025 04:00:00 +0000
asID: 30682
IP address blocks: 159.182.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 15:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:4e:60:97:dd:45:18:27:ff:2a:7f:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Validity
Not Before: Jun 21 12:00:00 2023 GMT
Not After : Aug 9 04:00:00 2025 GMT
Subject: CN=66035189-634b-43ab-86ec-dc6289af7a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:86:18:0b:86:3f:2e:3b:e0:a0:1f:14:aa:
5a:7c:ce:59:b8:6b:55:92:be:78:4e:e0:58:a6:2b:
02:04:0a:49:98:53:fa:d7:cd:bc:0d:bd:4b:ac:40:
ae:9a:4e:22:08:a8:70:b2:20:b9:49:f5:23:97:32:
88:69:37:87:f6:01:79:8a:fe:98:e0:c0:84:a5:4c:
1c:79:b2:1d:e8:6b:e2:27:c4:a5:f2:67:93:ef:f5:
af:e3:26:84:63:98:21:96:2f:5f:fd:45:0b:e1:3f:
8b:f3:47:1a:0d:70:79:86:4e:7a:36:ef:a6:aa:50:
92:6d:82:75:d5:54:30:fb:98:b2:dd:72:3a:36:47:
04:61:3b:da:af:dd:8e:3c:2f:68:1c:b5:e8:22:c9:
a2:24:98:d7:96:09:77:b2:95:e0:2c:07:36:45:73:
52:da:b4:28:20:47:0e:a3:7f:1a:af:63:c4:2d:85:
37:0e:07:ee:bb:56:39:a5:f1:f3:44:db:0d:63:e9:
55:fa:f6:ea:44:7d:e0:06:b7:57:37:5f:b0:d8:d8:
04:0b:1e:a1:cb:45:3c:d4:a4:86:99:81:32:86:a3:
76:1e:90:36:00:5d:8c:d7:f4:b4:94:48:5b:e0:e7:
0b:76:ab:7d:de:ee:ed:f1:da:ec:6a:83:ee:f2:96:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1A:B7:7C:27:B9:4C:57:12:20:B1:FD:D0:3F:DE:CF:33:1F:A6:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/518e1cf8-8eb0-36ae-8baa-2b9e7e7d3c68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
X509v3 Authority Key Identifier:
keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
sbgp-ipAddrBlock: critical
IPv4:
159.182.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:97:c1:80:76:ff:7f:2f:6c:ac:41:e5:c2:55:d8:cd:35:0a:
cb:5e:76:23:e8:8b:c1:91:dc:6f:0e:cd:55:cc:ca:ad:64:b0:
e7:4c:e8:6d:07:89:12:53:40:50:99:5b:1a:90:7a:9e:5d:2b:
f7:ee:c1:d2:59:8b:2d:d0:76:b7:3a:51:f8:49:6d:0d:bc:1a:
f1:98:26:0a:67:af:27:f3:6b:10:1b:1b:74:36:4f:96:00:aa:
64:4a:ad:16:72:cf:fb:03:e4:a0:e4:27:71:12:f6:d3:57:09:
c7:18:b1:61:c7:1f:8c:67:3d:41:77:1d:05:08:03:62:f7:98:
bb:51:d3:36:05:e8:35:5b:c1:9e:4c:52:04:1b:f2:41:bd:84:
d7:12:b0:df:e9:0c:b0:3c:fa:8d:54:5f:09:0e:10:c4:68:d9:
30:d3:20:e9:8a:83:25:d9:89:6f:66:54:2f:d4:32:55:69:b7:
fc:f0:3a:1e:40:3d:3f:f4:0a:c4:82:b0:64:d3:d5:ff:55:0f:
48:61:68:0d:14:3c:01:a8:92:86:13:89:ee:81:69:be:46:b0:
17:0b:ca:4e:52:0e:3f:67:67:9d:4f:7c:64:fa:0a:63:85:61:
a8:a5:da:34:4f:5f:d4:20:cc:28:8a:9b:3b:ba:20:14:73:b7:
45:ce:d4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:16 2025 by rpki-client