Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0cf0881c-0990-3563-a4aa-0d8c9660c610.roa
File: 0cf0881c-0990-3563-a4aa-0d8c9660c610.roa (raw, json)
Hash identifier: bcSiDIjm4tO2xe4tcxEzY91RPI5hSQ3TYtx1HC8O/Xo=
Subject key identifier: 36:F6:E4:4D:24:86:1F:90:67:2A:7C:A5:31:29:22:A5:39:5C:C7:15
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584890FBF4A5194D86D8BE1BF780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0cf0881c-0990-3563-a4aa-0d8c9660c610.roa
Signing time: Thu 16 Jan 2025 18:30:57 +0000
ROA not before: Thu 16 Jan 2025 18:30:57 +0000
ROA not after: Wed 16 Apr 2025 17:30:57 +0000
asID: 11798
IP address blocks: 50.114.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:fb:f4:a5:19:4d:86:d8:be:1b:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 16 18:30:57 2025 GMT
Not After : Apr 16 17:30:57 2025 GMT
Subject: CN=08f5faae-0cad-4c34-843d-cf68c8af26bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9e:77:52:31:70:69:35:bb:58:b9:84:c6:5f:
22:f2:10:9a:74:4b:ec:e2:af:35:04:8c:8b:05:ce:
c5:21:e4:2c:cd:df:d1:1f:47:1a:e4:c3:49:1a:5d:
40:49:e0:41:8c:e1:08:27:28:36:4b:26:0b:ca:88:
c4:6f:4f:a9:9d:ca:c7:68:f5:f2:4a:bd:97:bd:80:
b0:ec:82:87:3c:d6:9f:ae:59:00:96:84:42:7f:e2:
51:45:ad:89:44:2c:00:5a:46:45:ba:b1:74:6b:88:
92:a3:4a:76:d6:06:66:10:65:66:09:d3:67:c6:b9:
24:97:2c:c9:b9:79:d6:b8:cb:0c:ac:bb:45:8f:0a:
1b:14:a2:8f:e0:8b:a1:dc:0d:ec:29:cd:99:af:78:
45:d8:99:ea:69:e3:b6:e5:30:63:bf:5f:6a:66:94:
90:57:6b:4b:48:0d:8d:af:df:ba:f9:71:89:b3:64:
29:88:bd:c7:aa:ce:01:f4:98:5d:be:55:a5:d4:44:
6c:89:de:ed:d2:6c:92:56:c7:a9:94:1b:1c:3c:97:
54:c3:9c:40:3b:32:aa:e1:e3:0d:5d:71:d2:df:04:
fe:5f:89:a6:79:5a:c3:41:ab:bc:8f:27:9e:a2:4f:
f9:64:8c:7d:b3:82:71:dd:65:b9:0a:45:13:7b:3d:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F6:E4:4D:24:86:1F:90:67:2A:7C:A5:31:29:22:A5:39:5C:C7:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0cf0881c-0990-3563-a4aa-0d8c9660c610.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:03:78:82:03:cf:c0:09:6d:40:0e:0c:7a:92:62:dc:cb:be:
c0:9a:d0:e3:fe:7d:6c:83:90:9a:8c:0c:51:86:e2:22:c8:7f:
72:34:10:2e:cd:60:f6:ac:89:3f:dd:f6:8e:82:64:c0:d6:77:
6b:fd:75:6d:f7:1c:d1:e0:ce:a3:aa:9f:47:8a:fe:5c:fc:77:
d6:1d:79:71:1e:db:5b:3f:b8:e7:82:76:b8:94:f5:fe:fb:25:
57:07:e6:0f:5f:1b:b1:92:6c:95:9e:59:90:c0:f8:c0:5a:84:
8d:26:b5:9b:d5:b6:1a:de:d4:6c:59:a2:ff:82:b7:3e:6d:83:
84:da:59:10:df:78:71:0c:3c:84:ef:7b:67:87:73:65:9e:2e:
e6:0a:84:81:b4:b9:93:78:a7:e5:61:e1:10:b6:8e:b3:9f:ca:
d5:44:ed:5b:3f:06:2d:dd:2c:d4:d1:cd:cf:d0:4c:fc:3e:a1:
b0:20:71:69:da:58:ee:09:93:f5:53:45:b9:30:51:dd:9e:94:
e1:fa:83:e3:70:e0:34:94:e0:ae:78:a9:27:d6:05:2a:0f:87:
1e:2c:2d:62:e6:c1:5c:90:9b:e0:fd:e2:13:e1:61:eb:e2:a4:
f9:67:df:97:42:23:a8:d6:2d:16:64:ac:59:16:ac:c5:e4:d2:
22:3d:4f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 19 16:54:57 2025 by rpki-client