Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/d41f4c0c-0fa3-35fe-91df-32759afdf914.roa
File: d41f4c0c-0fa3-35fe-91df-32759afdf914.roa (raw, json)
Hash identifier: OLcM6fE4vqILFRFlyvVv01+N2tc/AlUmA0s8uRCOSEk=
Subject key identifier: 20:F8:09:4C:15:96:84:8F:A8:39:8F:74:4D:64:50:D8:AC:7A:EB:4C
Certificate issuer: /CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
Certificate serial: 010D0C9F43285848E16BE12ECEC26B7199C52980
Authority key identifier: FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/d41f4c0c-0fa3-35fe-91df-32759afdf914.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 36483
IP address blocks: 23.83.208.0/20 maxlen: 20
23.83.208.0/21 maxlen: 21
23.83.216.0/22 maxlen: 22
23.83.220.0/23 maxlen: 23
23.83.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Feb 2025 19:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:e1:2e:ce:c2:6b:71:99:c5:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=7ae84775-ae8a-4daa-bf70-4a4d23ae5bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:a9:e0:4f:6c:ed:ef:49:3b:61:47:34:d6:
58:60:8d:a3:64:c2:86:f3:95:10:6a:6e:64:93:e9:
48:f7:1b:e0:9e:90:89:f3:74:4f:7a:5b:89:30:06:
6a:96:0a:e0:b6:6f:92:4c:54:82:2c:43:11:62:a5:
1e:47:d5:fc:6d:75:c8:3e:1d:0b:25:55:25:2e:9f:
fc:11:5a:c3:60:6b:67:1d:c0:b5:22:76:5d:40:b5:
64:61:c1:77:e2:8f:e5:93:86:df:3a:c0:80:d2:c1:
a4:c1:a5:82:e1:db:50:18:18:af:b3:f9:8e:ed:e4:
2c:85:54:dd:fd:de:65:e3:1e:59:35:64:b9:10:22:
ca:aa:d6:76:85:b4:c1:9f:83:c1:f5:b2:15:b2:59:
ef:b7:81:f9:b8:60:a1:c5:c9:cb:0e:77:24:88:d1:
59:1c:2b:7e:44:72:3d:b7:3b:b6:06:a1:3d:01:70:
6a:41:f7:7a:53:2e:5f:b8:4c:99:dc:77:7a:11:58:
a3:4d:49:55:dc:05:ec:a9:32:56:65:c0:ba:d2:a7:
88:08:bf:dd:cb:f8:d9:31:33:a2:86:95:9b:2d:bb:
5d:38:3d:c0:0d:47:25:2b:e9:fc:f8:fc:c5:b0:dd:
59:1f:a1:bc:ea:f8:1f:4a:41:8b:04:ca:aa:52:74:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F8:09:4C:15:96:84:8F:A8:39:8F:74:4D:64:50:D8:AC:7A:EB:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/d41f4c0c-0fa3-35fe-91df-32759afdf914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl
X509v3 Authority Key Identifier:
keyid:FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
sbgp-ipAddrBlock: critical
IPv4:
23.83.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:90:18:17:f1:30:6f:fa:59:ee:a7:5c:fe:22:c7:53:57:8c:
26:1f:7d:51:0d:c0:cb:69:bb:be:45:0f:d0:69:bc:89:f4:b3:
1e:c8:6c:3b:d8:c3:70:3d:c5:b3:14:b2:e9:f5:a8:be:f0:73:
1b:05:35:21:1b:eb:02:b8:da:84:9a:ad:26:cd:c7:90:bb:ae:
f5:77:cc:24:1b:bf:dd:31:7a:17:23:00:58:24:dc:64:1b:3c:
aa:cc:da:a9:7a:55:e7:84:8b:32:e2:81:21:7e:d4:21:68:00:
40:79:79:fc:bc:7d:eb:20:78:45:9d:ba:c2:d8:09:ec:c1:7f:
aa:58:12:40:b6:06:03:07:9b:92:e6:9e:c8:3e:dc:24:dc:49:
60:8a:de:be:46:0a:af:b7:a4:de:7a:37:58:bd:76:4a:44:e1:
79:7c:2a:7b:de:f7:5a:0e:a3:c1:15:ef:dd:f1:03:00:29:31:
f5:ed:c3:f8:2e:7b:e4:ea:f2:a9:a7:7a:a3:7f:47:39:86:79:
67:42:c1:d8:91:68:17:28:8b:2d:40:54:a2:53:7a:ca:9c:b7:
d1:81:87:1b:f8:20:f7:64:73:1b:f7:27:dc:91:42:3c:0f:69:
2f:b1:38:97:d4:03:8a:40:34:a4:8e:f5:f2:c2:1f:90:f8:10:
e9:b8:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:00:59 2025 by rpki-client