Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9803d6c5-0865-3191-b0ba-a48d8fac747e.roa
File: 9803d6c5-0865-3191-b0ba-a48d8fac747e.roa (raw, json)
Hash identifier: sjGXe1WUwgdo1E2CfL5KR0wbHcrQbB3AQgq1nDF9Nqk=
Subject key identifier: D2:45:8B:D4:55:09:14:D8:DA:04:F8:FB:71:81:52:61:89:D6:6C:4B
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848AF2B9F9AAA8960D4EE868100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9803d6c5-0865-3191-b0ba-a48d8fac747e.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 18779
IP address blocks: 142.111.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:9f:9a:aa:89:60:d4:ee:86:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=34c686a4-9aa6-40c4-abe9-a0ab10f9dc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:ef:48:5c:00:79:75:76:6e:19:88:40:bc:
9f:31:95:0a:8b:8a:15:05:34:7d:dc:c2:7a:e7:da:
fb:e9:20:ae:35:6e:87:1c:ac:3a:df:4b:56:9a:4e:
a2:ce:6d:da:4f:05:63:bc:70:0a:3a:10:e8:50:67:
46:24:cb:c1:56:20:8a:2a:dc:97:aa:c7:d0:a1:7b:
fb:c4:7e:29:30:33:9a:70:11:89:78:05:d4:1d:09:
b7:18:77:9a:88:2d:8f:c5:fc:f5:0a:b7:87:0f:e6:
1a:56:fa:40:47:29:4e:d8:58:75:3b:3a:de:9e:3d:
fe:75:e4:82:b0:19:7c:e2:45:10:de:f7:36:ab:e9:
3c:fe:22:68:fe:f9:3d:00:04:fc:8d:3b:21:11:89:
9e:ef:17:1c:f9:0e:60:cb:42:1f:00:6c:6b:da:46:
e6:3e:b8:4a:9f:83:e5:67:fe:8c:2c:bc:14:17:45:
a7:0f:15:01:86:c4:1f:c7:66:bd:cc:17:55:c8:34:
2c:0d:b0:4b:f4:31:79:b8:64:71:36:d7:3d:f8:db:
7d:ab:8d:a3:d5:96:d1:17:57:b7:d3:bc:07:84:65:
e3:4e:1e:e8:d1:c8:5f:a8:08:2b:f7:34:50:6b:3d:
da:25:06:55:db:ac:ae:1b:fc:b6:82:e1:2f:ae:d4:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:8B:D4:55:09:14:D8:DA:04:F8:FB:71:81:52:61:89:D6:6C:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9803d6c5-0865-3191-b0ba-a48d8fac747e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:63:eb:4c:d5:2f:81:ac:9f:a6:44:04:82:37:7e:59:5e:30:
d2:9a:90:cc:30:b7:de:3f:20:a8:d3:39:ba:ec:21:30:b6:42:
31:e2:fe:d7:64:b7:d1:53:ab:32:3e:ef:7c:c9:83:2c:57:36:
f1:38:31:69:47:5f:df:65:33:a1:ff:d1:05:f5:57:74:e8:41:
fe:27:ab:1b:21:b3:11:1b:d9:a0:f8:91:45:1d:0d:29:45:21:
2a:74:8e:8b:68:a9:99:90:d6:6f:3d:34:e8:56:b0:f1:25:ec:
35:b1:53:ba:39:fa:54:e4:06:a4:a7:bb:81:d3:89:4c:80:c8:
b7:32:1e:00:87:02:fe:ef:6e:91:bc:28:7f:bf:5d:35:b2:29:
ed:29:33:f8:5f:db:2f:76:a8:19:7f:d8:9a:63:b8:46:a7:ca:
35:17:5f:f3:06:fa:0b:0e:a8:8e:83:0b:07:43:0a:6e:c5:b2:
46:cb:c5:cb:f0:30:53:f9:7c:d6:15:17:3b:ff:79:3a:4f:dc:
49:97:b4:0f:d4:4d:bd:f1:0f:d7:08:39:f5:ad:88:ba:6b:09:
ce:2f:59:bc:e1:3d:81:37:26:fe:b1:8b:e7:df:a2:dd:5c:c3:
d5:1f:17:b1:40:12:0b:ff:d7:d3:10:a3:87:b9:72:a6:c9:39:
6f:22:31:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:05:22 2025 by rpki-client