Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/f4c62107-8d3d-3712-b13b-6c8866ac449a.roa
File: f4c62107-8d3d-3712-b13b-6c8866ac449a.roa (raw, json)
Hash identifier: bUspIDXiwN1+3N3vA2yfragqvbuL8PjaATwA+goCkWQ=
Subject key identifier: 82:5F:3F:11:D2:D0:1C:CF:29:3E:62:AC:32:2F:C1:D2:EC:EC:51:75
Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial: 010D0C9F432858489CD15BEB7E9B66A0AA452F00
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/f4c62107-8d3d-3712-b13b-6c8866ac449a.roa
Signing time: Tue 21 Jan 2025 00:14:49 +0000
ROA not before: Tue 21 Jan 2025 00:14:49 +0000
ROA not after: Sun 20 Apr 2025 23:14:49 +0000
asID: 30058
IP address blocks: 217.149.96.0/22 maxlen: 22
2602:fb1b:60::/46 maxlen: 46
Validation: Failed, certificate revoked on Thu 23 Jan 2025 04:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9c:d1:5b:eb:7e:9b:66:a0:aa:45:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Validity
Not Before: Jan 21 00:14:49 2025 GMT
Not After : Apr 20 23:14:49 2025 GMT
Subject: CN=c23c8afa-d512-4ab8-8301-c63e8e330af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:9c:c9:20:b9:ff:99:ba:75:ba:e5:59:2a:
08:1e:ba:a0:e5:b5:c0:42:aa:34:ae:5f:8f:a0:65:
8d:be:6b:e7:6e:19:ca:81:6c:f7:72:4c:37:1d:19:
93:9e:04:72:49:af:90:f1:60:f2:b5:b8:8f:83:30:
53:56:26:d3:d1:fa:0a:c7:70:40:dd:37:3f:ad:57:
db:57:5b:fd:01:fd:94:81:6a:9a:98:24:0c:76:42:
23:f5:bf:72:2a:c6:93:4c:3c:ab:e3:f4:54:c2:64:
a9:84:c2:c9:cc:bd:dc:29:b0:d1:60:dd:49:50:3d:
4c:89:14:21:ed:76:ca:62:96:fb:3f:a5:f5:0d:96:
88:a7:73:3d:67:6a:f3:29:b0:0d:4f:3f:df:ce:42:
27:7c:92:70:38:26:46:1d:ed:34:df:a2:33:d7:9a:
ba:04:83:8e:1e:46:b4:f9:2c:ff:c9:f2:a4:a4:2b:
8f:01:d1:29:26:bf:b7:3c:c7:03:db:41:5f:12:31:
59:4f:d3:b1:a2:94:f8:f3:2e:13:d1:cc:17:4d:7b:
80:c5:26:33:84:f9:da:23:39:e2:9b:4a:9e:ca:e0:
33:b1:b3:cc:e7:76:e1:54:73:ea:cb:39:31:e6:7b:
f9:92:14:b7:dc:04:a7:00:97:78:99:8d:e7:91:12:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5F:3F:11:D2:D0:1C:CF:29:3E:62:AC:32:2F:C1:D2:EC:EC:51:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/f4c62107-8d3d-3712-b13b-6c8866ac449a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
X509v3 Authority Key Identifier:
keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
sbgp-ipAddrBlock: critical
IPv4:
217.149.96.0/22
IPv6:
2602:fb1b:60::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:b5:e6:37:79:d0:d1:bb:a1:d5:60:2a:33:4b:66:19:ea:03:
95:fa:1a:c0:77:33:56:3b:27:6c:d9:82:f7:44:01:18:8e:a5:
34:1c:1f:08:99:7a:49:1b:05:2a:3c:6f:20:c7:ba:cd:c1:22:
92:f5:e6:e2:a6:0d:ca:4b:28:70:46:bc:ea:83:9f:a6:12:19:
2d:8b:db:16:5b:97:3c:1f:33:e7:ef:4c:a4:c6:97:67:24:10:
7a:0a:1e:d8:ff:45:bc:7d:d8:1d:23:2f:1e:56:d0:0b:1d:5c:
ba:b2:5a:38:78:9b:b6:9c:6e:ba:9f:47:60:31:65:a5:92:c1:
99:a9:74:db:23:fc:ab:19:59:6d:32:07:cf:3e:fb:30:97:02:
c8:02:4c:ec:84:52:0b:74:17:e8:e8:83:64:ff:30:6b:e0:77:
51:ff:68:7b:dd:4f:83:80:2f:1c:48:98:8f:13:63:e4:4a:08:
cc:ff:dd:21:d9:a3:84:2e:0e:56:90:8d:b8:31:8f:3a:95:b0:
66:6f:a0:db:92:b6:51:33:7b:47:c2:5b:8f:54:f5:6d:96:53:
2f:9d:d0:62:8f:05:1f:b3:d5:0c:03:23:31:c2:48:2e:75:64:
2e:1a:49:3f:49:96:19:09:79:9f:0a:b7:61:fc:76:3c:e8:e8:
3a:87:da:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:51 2025 by rpki-client