Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/83748a93-6000-31e8-bafc-53c88c748715.roa
File: 83748a93-6000-31e8-bafc-53c88c748715.roa (raw, json)
Hash identifier: qOtL9dZW8K181Bw2IApz/aHhzjwOQykSwX5ip3eJtLE=
Subject key identifier: 35:16:21:A6:D6:00:05:C2:F5:BB:FB:CB:46:B6:82:FE:CA:F2:D3:57
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F4328584940393F473CD1EF39F11B5800
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/83748a93-6000-31e8-bafc-53c88c748715.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 41378
IP address blocks: 161.129.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 02:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:3f:47:3c:d1:ef:39:f1:1b:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=09cf1084-16e3-4e83-b918-bbc1916a755a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2b:7b:64:c5:43:48:17:a7:2d:e7:c4:30:b9:
d4:d2:88:ae:3a:b5:4c:4b:fd:ea:c8:6e:fd:e0:90:
ff:07:d3:17:e6:96:12:1b:c1:6f:d2:99:b8:df:5b:
18:43:a9:9e:24:c6:48:32:11:12:fe:c9:c9:f7:f4:
01:11:1f:dc:28:f1:01:ef:4e:70:a1:63:5f:c1:1a:
91:50:8c:3d:dc:1b:35:e6:31:b2:55:0e:4b:67:fb:
e5:18:f9:a5:63:a3:42:28:49:14:8b:79:95:8c:8c:
15:b8:45:2f:db:3d:c7:b1:0e:bb:4d:7a:0d:a7:77:
20:1e:80:46:83:6c:ab:e4:63:20:16:b8:45:5b:64:
88:44:dc:f2:24:8d:6b:af:e4:ca:1e:5a:7e:de:54:
e5:7b:6f:9a:3e:e4:a2:0b:46:d3:b7:d8:ca:c7:e4:
b5:e9:f7:39:f4:0f:02:72:01:79:a3:2a:cd:63:5b:
13:09:9d:dd:c4:f3:58:5f:5e:d4:58:98:b3:a6:64:
01:be:c0:4f:3a:09:72:43:ce:08:55:23:af:56:31:
2f:09:e8:99:27:7c:2f:df:10:35:3c:66:fb:c6:f5:
9d:d6:50:3d:95:56:d1:c8:ed:7f:bb:c3:ad:84:eb:
1b:4c:22:56:83:b7:77:c3:f4:e3:29:5c:00:b6:84:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:21:A6:D6:00:05:C2:F5:BB:FB:CB:46:B6:82:FE:CA:F2:D3:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/83748a93-6000-31e8-bafc-53c88c748715.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:61:d7:04:9b:e9:69:90:96:ad:73:7e:f5:00:f4:a6:3f:41:
7d:7e:da:9e:1e:75:9e:dc:0d:e2:99:54:23:ca:ba:1e:f8:84:
ff:e2:e6:6c:a6:be:db:09:89:3e:31:60:f1:21:38:36:46:e7:
90:0f:7e:f3:f6:7b:08:23:56:2e:cd:bc:22:5f:33:94:25:19:
3f:76:97:c3:91:1b:8c:4f:36:8b:20:5f:db:70:87:eb:b7:57:
a6:9e:d5:7b:4a:19:d5:d0:40:5c:4a:5b:b4:6b:f5:ed:8d:65:
27:0a:cc:95:81:26:77:d2:7b:34:c8:bd:49:fa:5a:5a:54:65:
83:b2:ee:28:34:05:1d:62:d8:27:1f:42:69:57:c0:2d:33:38:
11:df:db:3b:69:fe:21:7b:ff:19:05:6c:3b:da:a4:06:d1:65:
4a:b0:d3:75:d6:47:e6:b2:43:d3:12:7c:53:52:b3:8a:01:d0:
7d:4e:98:a3:98:54:9d:90:7d:db:cb:67:54:78:a9:7f:76:df:
91:50:e2:a1:d5:49:a8:14:04:d7:c8:0c:5f:2f:9c:19:95:1f:
b4:8a:86:2a:6c:28:d1:b8:ca:44:71:92:26:29:3e:09:2a:a8:
47:e1:a8:22:2a:18:e5:e2:fa:25:05:b4:e3:f0:2a:03:05:c6:
66:48:98:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:02:14 2025 by rpki-client