Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c86c336-d1ef-35e1-92e0-5afc212f384c.roa
File: 8c86c336-d1ef-35e1-92e0-5afc212f384c.roa (raw, json)
Hash identifier: +g14sr0cVGJb3eMDibC3nV2MiZV5AsxYSq4A9FkgbfA=
Subject key identifier: 40:C8:AF:9B:D5:7B:B1:FB:EC:0B:98:7E:75:62:58:36:34:B2:08:47
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848AF2B9F53A92F605A45E4CB00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c86c336-d1ef-35e1-92e0-5afc212f384c.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 18779
IP address blocks: 142.111.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 23:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:9f:53:a9:2f:60:5a:45:e4:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=8815f8bd-cc18-407a-913e-78dad7c87ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bd:5b:74:4d:a5:cc:60:cd:f4:55:a5:9a:da:
24:9e:d9:00:f1:c7:db:70:8b:bb:a3:96:7d:36:ab:
f8:0b:db:48:ab:d6:9e:7a:f2:b1:32:bf:0b:6b:b7:
c9:2a:c7:d2:9e:ae:fe:55:3f:e8:16:85:ee:8b:de:
3d:e4:d1:27:c2:c1:04:0c:4b:7e:72:71:e3:0e:1a:
36:f1:e7:0a:b9:51:8f:81:c5:9f:3b:d0:b8:79:8b:
3d:92:40:24:fc:11:b4:99:b7:44:3e:8f:e3:89:c5:
03:d2:4e:72:f0:90:46:3b:ec:70:fd:df:24:57:00:
d2:77:e3:a8:ef:1a:29:b6:f7:0f:19:65:d4:66:ea:
b1:29:d5:d6:73:2f:dc:2c:59:2a:b7:a9:86:98:7b:
54:96:f6:ea:06:4e:4e:84:af:de:ea:a5:b7:db:46:
d1:e1:5a:36:09:6f:2d:c1:ca:e0:d4:31:b8:03:0e:
e4:84:09:2d:a1:32:04:48:b6:fa:2a:b6:9b:1c:81:
9b:3d:66:20:b3:75:29:4c:2a:46:fa:fd:7e:4c:da:
28:a4:85:fe:d3:06:8c:30:ac:86:8d:b2:1a:00:06:
69:2a:56:3e:bf:e0:bd:24:a8:05:5e:3a:d5:31:f1:
86:37:57:2f:78:99:1e:c1:6c:97:41:56:9f:52:e3:
e8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C8:AF:9B:D5:7B:B1:FB:EC:0B:98:7E:75:62:58:36:34:B2:08:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c86c336-d1ef-35e1-92e0-5afc212f384c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:1d:43:43:95:50:60:94:2c:97:c7:2b:a9:19:fe:93:15:e8:
83:11:95:72:1e:aa:de:06:14:c7:50:78:c6:a8:b1:ba:b6:a2:
15:89:04:c4:a8:0a:61:d7:97:98:42:ec:2b:83:e6:5f:8a:41:
d5:eb:4a:98:9d:c1:44:0c:9e:c2:3b:c4:70:92:8f:bf:4b:71:
02:6a:8b:f7:57:62:69:cd:d4:54:4c:69:2f:fd:a3:83:a6:36:
6d:c6:03:f3:b1:30:18:62:27:cc:e4:2e:31:0a:aa:93:fb:5b:
6a:30:f7:a2:87:33:90:78:00:5d:1c:98:4d:cc:d5:ed:21:95:
bd:57:19:2d:69:d2:20:1e:9a:84:cb:7f:df:db:92:db:fc:9f:
87:ed:c4:fd:89:6a:44:f1:db:bd:a5:93:46:32:e0:ca:67:75:
70:67:63:6a:cb:85:98:0f:51:c5:1b:f3:5d:bb:36:ab:c7:7e:
ad:6e:95:09:eb:fa:e5:10:db:37:9b:bf:96:83:c3:e6:c5:fd:
3c:3e:b2:8a:0f:b5:de:14:b2:ff:60:9f:2a:56:df:dc:80:a8:
9e:a5:35:04:ed:08:41:20:36:91:bc:1e:d2:54:a3:a9:4d:60:
96:70:d5:82:84:fa:48:6a:2a:e9:11:f7:3a:77:ea:90:21:da:
67:46:6d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:20 2025 by rpki-client