Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23c525e9-8c6d-3524-a6ad-9d17722745ed.roa
File: 23c525e9-8c6d-3524-a6ad-9d17722745ed.roa (raw, json)
Hash identifier: O93JcZIFXEHiKbuSbgSb7JejqKcseFJ8KYSiGp/8wAI=
Subject key identifier: 9F:69:D3:F8:DE:77:55:F6:26:F4:54:A8:BE:D1:87:E5:E3:66:70:5F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584909E6A223742A5D6C57792E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23c525e9-8c6d-3524-a6ad-9d17722745ed.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 60721
IP address blocks: 50.114.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 05:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a2:23:74:2a:5d:6c:57:79:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=1eaa3f07-8117-4c16-b115-a108dd3ef4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:16:68:b7:fe:0a:2c:67:67:ed:71:fa:cc:b6:
b5:9c:85:95:e6:b6:6c:44:ca:72:e7:70:6d:7b:a8:
b2:f1:e7:2b:a2:90:00:9e:4b:1b:26:0e:e3:bf:12:
f3:fa:43:d0:9d:d7:ee:4f:0f:c8:89:d7:9b:d2:1b:
1d:65:95:93:a6:29:bc:9f:ff:a5:7a:50:18:f7:46:
80:77:bd:c3:68:fb:6e:14:7c:1b:c4:cc:94:93:63:
a8:0d:2b:2b:62:ea:0e:0e:bc:d7:bb:38:8d:fb:71:
e2:07:ef:c4:9a:57:a6:eb:c7:be:05:05:45:63:c5:
91:38:6b:ee:65:b9:10:dc:39:aa:45:c7:f4:9c:b4:
2e:0e:bf:99:74:b3:72:af:cf:db:48:ac:43:2f:60:
13:51:36:11:de:fc:57:e8:f9:a2:9d:9e:8c:a5:b4:
ea:ac:6d:d9:ba:8d:73:12:15:88:18:32:a0:5a:3d:
49:09:af:e7:63:49:3a:9e:55:09:2e:b2:91:97:65:
e0:af:90:4d:95:4f:28:70:78:f7:22:12:d9:6d:16:
0a:7a:71:d9:cb:0d:3d:3e:eb:1d:96:af:f3:1f:c9:
c4:82:16:c7:a2:e6:9f:2e:d1:d4:87:3e:29:bc:04:
d9:9c:b8:f4:9c:14:99:6c:5a:29:a2:8d:e8:a3:8c:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:69:D3:F8:DE:77:55:F6:26:F4:54:A8:BE:D1:87:E5:E3:66:70:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23c525e9-8c6d-3524-a6ad-9d17722745ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:5d:3b:66:71:05:5b:a0:84:79:bd:31:43:93:aa:f6:a4:99:
a5:50:ae:fc:2e:a6:a4:88:f7:f6:42:bc:0c:06:cd:75:b0:61:
27:42:82:35:4c:be:64:79:49:85:c4:1f:3d:04:bd:d6:0f:62:
69:da:28:ff:9b:3f:96:34:24:bd:d3:2e:3a:b8:64:4e:59:fd:
ba:45:90:d8:82:9b:dc:7d:60:7b:32:56:cf:7d:76:86:08:b2:
5d:e8:28:6f:2b:0b:f1:34:b4:18:5d:08:c1:c9:64:20:e9:b6:
cb:10:9f:0a:53:f6:d9:f0:e0:06:68:b6:33:20:27:81:22:7d:
e8:a4:69:1b:4e:fa:f1:35:d2:34:f4:bd:e5:82:13:2f:dc:ad:
da:82:6f:0e:83:ef:59:46:0e:59:31:f9:55:06:c0:bd:ca:cd:
67:e3:59:23:46:d6:db:e3:02:f1:8c:d2:be:00:3c:aa:b5:2f:
92:42:4a:d1:6c:a3:ae:21:e1:36:fc:2e:b1:ce:30:a5:68:1e:
09:08:ce:60:c4:a7:06:42:bc:05:b5:35:ba:4e:6b:52:dd:35:
a8:1e:c7:c2:01:6b:12:66:5e:ad:b5:94:1c:82:39:59:1b:74:
94:b1:3a:ff:37:41:f4:01:27:e3:13:fb:18:a0:31:d7:f3:16:
3d:1f:b3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:32:23 2025 by rpki-client