Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/f33de978-bb8b-3385-aee0-f605b6040cf8.roa
File: f33de978-bb8b-3385-aee0-f605b6040cf8.roa (raw, json)
Hash identifier: 8tGnycsml9Ln3XnJMp1XtYoyHBQk8fr1rPwF65w5qC4=
Subject key identifier: 6F:38:70:95:C0:80:C2:A0:25:0F:D7:FC:40:40:BE:2A:90:F3:2E:80
Certificate issuer: /CN=53c2cca8-3817-42e5-a92f-da9eff96d7a7
Certificate serial: 010D0C9F43285848DD5EFF5C8CBF62D100481A00
Authority key identifier: 77:AC:E4:87:D1:CC:2C:04:32:06:65:33:BA:E0:F6:ED:0B:45:FC:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/f33de978-bb8b-3385-aee0-f605b6040cf8.roa
Signing time: Thu 13 Feb 2025 03:11:56 +0000
ROA not before: Thu 13 Feb 2025 03:11:56 +0000
ROA not after: Wed 14 May 2025 02:11:56 +0000
asID: 398876
IP address blocks: 195.85.62.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 06:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dd:5e:ff:5c:8c:bf:62:d1:00:48:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c2cca8-3817-42e5-a92f-da9eff96d7a7
Validity
Not Before: Feb 13 03:11:56 2025 GMT
Not After : May 14 02:11:56 2025 GMT
Subject: CN=afdc6ebc-f51b-449b-95d2-9b82405e7bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:92:94:b8:0f:f3:12:3f:f4:96:a8:4f:36:fc:
ee:0b:1e:47:dd:27:ac:1e:99:2e:a8:1a:c7:76:2c:
c2:07:96:69:9e:4c:12:e3:85:f1:b7:c5:41:20:5e:
bf:b4:f2:b4:ec:0b:d5:78:21:7f:0a:0b:33:49:a4:
73:31:76:16:19:3a:0f:3a:de:96:f9:b8:b6:c9:06:
89:7f:42:b6:67:4e:73:cf:c2:e2:4d:39:db:1c:ee:
ab:d7:36:bd:e5:bc:d7:6c:c0:af:28:9e:e8:a3:3d:
80:4a:55:c7:83:b0:c4:de:3c:f3:21:99:2e:fc:5f:
1f:f4:0c:93:9d:7e:6e:21:d5:53:f6:e0:48:66:75:
fd:e3:dd:8d:84:8a:e5:a6:d0:90:58:3f:83:7c:85:
43:9e:03:65:0f:78:2b:de:0b:52:2e:82:ae:09:fa:
69:15:cb:79:74:0d:64:70:97:5a:fd:2d:59:ba:e2:
72:ae:12:89:c8:eb:cb:ee:6d:e3:ff:49:69:88:b1:
34:4d:aa:bc:52:e8:b2:5a:aa:7c:56:bb:8e:dc:bd:
f8:93:02:51:89:7a:d6:0f:49:21:33:eb:12:45:0d:
83:dd:79:28:7e:25:eb:76:f0:1c:54:12:1b:a4:cc:
84:fb:b2:0f:8f:22:bb:35:69:18:3f:7c:ea:c7:f8:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:38:70:95:C0:80:C2:A0:25:0F:D7:FC:40:40:BE:2A:90:F3:2E:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/f33de978-bb8b-3385-aee0-f605b6040cf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/53c2cca8-3817-42e5-a92f-da9eff96d7a7.crl
X509v3 Authority Key Identifier:
keyid:77:AC:E4:87:D1:CC:2C:04:32:06:65:33:BA:E0:F6:ED:0B:45:FC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7.cer
sbgp-ipAddrBlock: critical
IPv4:
195.85.62.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:60:2e:45:e9:a9:36:7d:71:13:5b:9c:70:0a:c4:92:68:bc:
12:8f:09:81:32:97:01:79:5f:43:54:e2:ba:87:4f:7a:84:4c:
3b:5f:cb:d1:37:3c:b4:8c:b0:d2:23:b3:78:d3:2d:0a:08:40:
04:a6:6e:1f:c1:28:c2:ff:c7:58:5b:3d:05:fd:83:ed:9f:c6:
da:44:31:28:f2:c2:a7:3d:11:c3:08:06:48:58:0b:47:cf:86:
ab:4d:cf:c1:ff:bf:a4:be:a4:20:6e:3f:c2:e2:92:88:cf:96:
df:9b:34:b5:b1:86:b1:40:06:dc:20:a8:ee:21:44:7f:81:df:
36:29:bd:6e:4c:39:ea:49:47:b3:84:0d:ab:1f:d5:dd:09:66:
52:84:a6:fd:84:a4:d0:e4:ed:3a:95:0c:e8:0d:0d:79:e5:7b:
89:7d:67:2e:57:06:4b:dc:bd:38:ca:53:c4:9d:59:71:eb:35:
7d:36:2c:77:a4:16:ab:05:41:d6:b0:df:e3:f9:b9:f0:a9:c1:
9e:e1:48:05:8b:78:c9:d6:77:c0:a2:26:28:9f:09:2b:f7:54:
8a:ba:ee:1a:5d:d3:35:32:d4:31:05:e0:a1:18:5e:48:38:61:
04:fa:c4:fa:28:ea:ff:65:3c:26:c3:69:c6:36:dc:75:db:79:
64:98:a4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:01:30 2025 by rpki-client