Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3fd93ce-8833-3108-b9d4-1801771ac123.roa
File: c3fd93ce-8833-3108-b9d4-1801771ac123.roa (raw, json)
Hash identifier: lcvUVVIAGaz0jKyYm4vJTcwLC7UG66sZk5gp8AJnYQs=
Subject key identifier: 70:B6:FF:93:98:02:3E:46:C9:97:74:FF:53:2D:94:CD:66:16:1E:0D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C673D5E82A06972B6840
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3fd93ce-8833-3108-b9d4-1801771ac123.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.23.192.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 14 Mar 2025 08:51:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c6:73:d5:e8:2a:06:97:2b:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=bf108aa0-894e-4ed3-8045-9616a598b3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:66:f1:8e:de:b6:c3:be:31:be:27:ae:4e:
99:26:35:26:5a:9d:5b:fa:66:85:3f:05:aa:e7:3c:
25:a0:13:31:2f:dd:8c:22:e8:a9:78:82:76:7c:ef:
d6:32:48:27:e7:9b:b5:28:90:1c:db:09:2e:fb:0e:
66:98:ff:e9:cb:20:5d:96:d7:1d:2e:36:5e:da:70:
1e:fe:ff:fd:87:d6:46:c7:58:41:4a:8e:11:9b:d4:
f4:61:f0:08:03:cb:1a:44:52:ab:5b:5d:07:6f:6e:
4f:a8:2d:31:55:11:f6:2e:c4:c7:2c:11:61:9f:50:
a1:16:ca:21:c5:35:a3:6d:a5:ed:d0:b1:c1:d8:fc:
d5:9f:14:28:e2:db:ea:91:0f:94:90:64:4f:8c:79:
7a:13:b3:cc:72:cf:32:c6:21:50:cc:c1:1d:c9:dd:
4b:fd:aa:d2:25:14:f1:0f:9f:58:f9:8a:78:9f:f9:
80:cf:86:88:4a:a1:0c:5d:74:3d:81:79:b0:73:d7:
96:fd:20:b2:61:23:67:df:8d:5c:ec:30:d9:ee:f4:
e3:14:e1:c8:a7:d5:c5:95:94:c3:2f:53:00:22:2d:
9d:16:7f:d3:5b:1a:d3:c0:62:a2:01:29:72:e8:3b:
e0:41:91:14:98:6b:c6:f7:ba:5b:ab:a1:af:16:7c:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B6:FF:93:98:02:3E:46:C9:97:74:FF:53:2D:94:CD:66:16:1E:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3fd93ce-8833-3108-b9d4-1801771ac123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:5a:ff:6d:9e:89:51:54:f7:c0:cc:70:01:92:62:51:10:93:
e4:84:93:ae:a3:fa:2a:a3:49:e9:7d:95:12:66:e4:5f:4d:3c:
81:0c:13:cb:13:7c:95:bc:b9:65:bd:ee:92:0b:71:4e:06:46:
2a:fb:53:03:a4:a2:ed:55:de:28:6f:47:81:d2:de:0c:43:21:
be:4c:17:7c:26:24:6a:73:a5:29:16:01:0b:df:01:20:ff:54:
1d:ed:93:42:29:57:4f:85:93:7f:80:58:46:65:56:fa:7a:44:
b5:e9:3a:84:60:69:3c:ca:36:7a:e0:e8:ac:0e:a4:2d:10:9a:
05:5e:1e:a5:68:aa:76:97:67:7d:9d:0d:16:de:1f:71:04:6d:
0d:a6:a5:1a:96:f8:4f:4f:9f:2b:20:75:79:6b:b5:04:64:36:
14:ee:76:65:1d:5f:10:8b:5e:e9:46:e9:43:f7:55:f7:17:60:
6d:e7:dc:6c:6d:98:84:9a:b2:cd:1f:36:b3:05:43:e7:a1:1c:
ce:29:a6:b0:66:d0:2d:de:e2:38:c7:41:75:00:c8:29:ae:0b:
57:de:04:cc:64:94:1d:34:0f:6b:94:95:b8:7f:c4:0c:8c:6b:
9f:06:0d:f4:30:8f:71:61:55:c8:1d:63:11:d4:89:54:6f:aa:
97:af:4b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:11:38 2025 by rpki-client