Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/b9ecb5bc-d938-3bbd-9d76-5865911c01b9.roa
File: b9ecb5bc-d938-3bbd-9d76-5865911c01b9.roa (raw, json)
Hash identifier: oWkD+eo8oXTJzdD98ZEpaTtDrYFbYQxyn7+BS/8Dd58=
Subject key identifier: AE:69:91:C1:FD:F0:34:EC:6F:FB:45:66:E6:A7:9A:FF:87:57:D8:9A
Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial: 010D0C9F43285848A2D9B27B355F49AA1A233840
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/b9ecb5bc-d938-3bbd-9d76-5865911c01b9.roa
Signing time: Thu 23 Jan 2025 04:06:28 +0000
ROA not before: Thu 23 Jan 2025 04:06:28 +0000
ROA not after: Wed 23 Apr 2025 03:06:28 +0000
asID: 400597
IP address blocks: 217.149.96.0/22 maxlen: 24
2602:fb1b:60::/46 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 Jan 2025 16:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:d9:b2:7b:35:5f:49:aa:1a:23:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Validity
Not Before: Jan 23 04:06:28 2025 GMT
Not After : Apr 23 03:06:28 2025 GMT
Subject: CN=a0b8ebb8-e7fa-4477-a651-c2f8446f3db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:e7:30:4c:a4:17:f2:36:d1:3a:b1:b9:c5:
2a:5a:4d:24:c8:f7:5d:25:89:0c:78:e4:ef:54:45:
fb:8d:cb:35:e6:4b:73:bb:8b:2a:9d:cf:cc:11:4f:
bb:f5:ef:d7:e6:2f:d5:b5:09:5e:22:e7:a7:df:a3:
bb:23:48:89:c4:b3:b7:e5:69:aa:72:98:c0:50:71:
81:eb:f7:65:48:a2:7b:b2:06:32:32:7b:d9:dc:58:
80:23:ff:4c:6e:74:f7:20:0a:8b:03:a9:7f:b6:44:
ef:76:7e:a1:f9:9d:80:23:47:d0:a7:e0:69:48:90:
7d:1d:e6:88:38:ec:21:85:0b:65:fc:38:75:14:db:
c8:e4:e0:ee:95:b6:96:5d:dd:3a:55:2d:f5:fe:81:
23:d4:c3:fc:c4:4e:0d:df:4c:63:af:81:6b:dd:c8:
55:a9:a5:2b:0b:45:77:92:f1:97:a6:e6:22:2e:93:
9a:bd:40:a8:f6:df:0a:4b:48:db:d8:2a:79:f4:5b:
db:14:9f:df:cd:b9:3f:83:37:d8:6e:13:80:2a:85:
42:62:b7:e7:3a:2b:48:7f:31:dc:96:35:be:d9:96:
ca:20:f1:7f:22:cc:26:c1:81:5e:c4:06:75:65:88:
ee:ad:30:67:b7:f9:53:19:4c:c2:85:b2:de:a4:5b:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:69:91:C1:FD:F0:34:EC:6F:FB:45:66:E6:A7:9A:FF:87:57:D8:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/b9ecb5bc-d938-3bbd-9d76-5865911c01b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
X509v3 Authority Key Identifier:
keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
sbgp-ipAddrBlock: critical
IPv4:
217.149.96.0/22
IPv6:
2602:fb1b:60::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:fe:cc:9d:a0:25:4d:66:6a:78:70:fa:4c:1d:41:57:27:c5:
92:93:0d:63:5b:2c:b6:4e:bc:8d:84:ff:8b:67:5f:ab:41:13:
9a:e1:53:9a:be:69:f3:d8:0a:8d:a3:c4:e0:0f:25:00:47:01:
fd:d4:22:9e:23:ea:e8:57:d5:54:b8:d4:9f:5f:db:10:17:8b:
3b:bb:d6:9a:4c:d0:4c:51:a3:82:43:c1:3f:81:32:e3:b4:4a:
cf:1a:4f:ed:b0:de:6b:c8:d8:9b:95:fa:27:aa:e2:ce:7b:d1:
e2:6b:c3:b7:bf:f1:bc:b5:a0:74:e7:c5:8e:06:f7:43:c6:d6:
11:21:23:11:9e:15:89:89:65:2c:3e:4f:0c:c5:82:c8:51:d4:
e9:2f:44:ee:79:dc:91:5f:3d:95:92:f4:ec:08:4d:ef:de:4a:
f8:e0:3a:3e:e3:b3:5d:37:95:52:db:97:38:fe:a3:ea:ce:15:
db:33:41:75:2e:da:02:57:50:25:f3:0d:3f:03:1b:8d:23:e6:
84:fc:25:45:98:63:cf:25:76:30:78:c2:c8:5e:01:34:b8:c9:
e6:ae:68:12:86:46:63:63:0f:f0:86:f1:52:49:5a:88:09:a1:
0b:5b:92:cb:fe:4e:bc:d1:74:88:fc:10:5d:8c:1b:b9:8b:c8:
66:14:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:11 2025 by rpki-client