Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/161168a2-6fe7-3a33-b8d9-06bc2648aeda.roa
File: 161168a2-6fe7-3a33-b8d9-06bc2648aeda.roa (raw, json)
Hash identifier: uCeCmatVWEIJwDjbER9LoW5B66Lwh1fQKwjmkQBsI00=
Subject key identifier: 48:16:53:12:CF:F3:5B:AF:DC:4E:D5:28:E2:A5:25:AB:08:5B:4A:E2
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584874F09B2F77970B1887C46700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/161168a2-6fe7-3a33-b8d9-06bc2648aeda.roa
Signing time: Mon 06 Jan 2025 17:25:27 +0000
ROA not before: Mon 06 Jan 2025 17:25:27 +0000
ROA not after: Sun 06 Apr 2025 16:25:27 +0000
asID: 11798
IP address blocks: 168.93.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 23:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:f0:9b:2f:77:97:0b:18:87:c4:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 6 17:25:27 2025 GMT
Not After : Apr 6 16:25:27 2025 GMT
Subject: CN=027fb2ab-b96a-494c-bf74-bf5a21b3d577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b5:70:1b:94:2a:9f:04:5c:44:3a:62:c0:28:
0f:03:ff:c0:da:a4:fb:95:60:32:37:e1:a2:cb:3f:
88:d7:94:55:08:f1:f4:07:a2:2c:8d:5a:56:fa:71:
a2:0d:c6:d5:bf:19:11:a9:bd:c4:e9:9e:4c:c5:bb:
a8:d4:b6:d4:2a:cc:c5:e5:d1:32:c8:be:9a:c1:fc:
7d:57:77:ab:14:e2:6e:c0:ee:4e:3b:d1:10:e7:c7:
bb:b6:53:a6:5a:d0:68:36:ed:38:3e:8d:e2:33:67:
bf:9c:47:b3:73:b9:5c:19:6e:cf:07:b4:74:6b:b3:
f2:f2:39:05:dd:f4:13:72:bc:22:b5:95:1b:df:c6:
b4:2b:0d:08:2a:2c:ee:44:42:43:6a:37:a1:d8:4d:
a7:15:ea:24:a4:f3:03:8f:e8:bf:f2:af:53:02:73:
6d:35:db:23:61:40:86:db:4b:33:00:aa:8a:5d:1e:
b6:b4:d0:0a:ce:94:4e:1f:17:3b:d6:a2:72:60:a6:
a3:1b:7b:c6:a4:fd:ff:12:67:aa:5a:99:b6:0c:d7:
d0:4d:d2:40:d2:ab:10:97:f4:36:68:e2:41:ae:e7:
ca:6d:64:6e:9c:75:d9:7c:a9:d8:ce:ce:a2:26:be:
fa:b8:e4:6e:bb:71:99:86:8a:e7:67:27:fe:6c:d8:
c0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:16:53:12:CF:F3:5B:AF:DC:4E:D5:28:E2:A5:25:AB:08:5B:4A:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/161168a2-6fe7-3a33-b8d9-06bc2648aeda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
168.93.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:f8:9e:ef:c8:9a:2a:ff:2d:86:e6:4e:dc:2b:c5:a4:90:0a:
75:59:5b:5e:fc:e1:2a:eb:11:a6:a5:74:a7:53:b1:41:de:89:
32:77:dd:53:f3:63:ec:f1:b5:70:de:46:81:7b:3f:82:9b:8b:
f1:84:ce:cf:38:5b:50:22:9b:fd:20:58:92:10:6e:70:87:78:
b5:78:4b:8e:c8:dd:fa:97:33:d8:1b:55:03:2e:5a:37:d8:93:
da:09:4c:7e:1a:4d:ab:da:20:58:6b:2d:68:60:45:68:d4:a4:
b4:2a:4e:5f:de:c5:38:9c:2a:2d:19:a9:a2:c9:9c:f3:c1:22:
48:64:06:f3:4b:62:34:5e:13:21:a0:67:58:93:32:d2:75:ea:
bf:a9:e5:70:f8:f7:0e:1a:9a:7a:c4:bd:df:89:a6:94:ac:a6:
96:e6:92:5d:d1:45:6a:d7:24:08:8d:b0:ce:5d:52:3f:4f:ee:
40:9a:e3:1a:e1:f9:0e:d4:69:b0:24:ae:30:bf:62:27:29:ea:
65:63:86:8a:02:50:1b:88:00:41:c1:e7:be:6c:8c:78:5d:c7:
33:be:38:11:06:10:72:8e:f3:cb:2b:27:7b:c3:f8:15:f3:fa:
25:4e:d4:90:ef:de:73:db:27:6c:f9:81:56:a5:b6:98:38:a1:
41:7e:9b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:40 2025 by rpki-client