Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aec8c256-ddac-313e-b6a2-9968100cb3dd.roa
File: aec8c256-ddac-313e-b6a2-9968100cb3dd.roa (raw, json)
Hash identifier: senlxZI6FGqcqW0Uj4nyKHRCr5WWa8u6qkuG0/sYMv0=
Subject key identifier: A9:52:77:BB:8B:3C:42:02:25:0C:FC:9A:0F:7E:65:EC:C8:2C:B8:8A
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848D0ABC1BDE9EB426BFC2AC380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aec8c256-ddac-313e-b6a2-9968100cb3dd.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 44477
IP address blocks: 136.0.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 19:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:c1:bd:e9:eb:42:6b:fc:2a:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=46153267-1826-4409-bcad-509d471ff8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:07:4c:bf:60:00:19:02:cc:bd:97:ea:0e:
6a:b4:5b:ac:3e:84:ac:57:de:79:2f:30:db:94:39:
57:51:b4:eb:df:86:87:c0:b9:db:8d:3f:d1:12:06:
38:ad:c2:49:db:b3:d7:03:34:41:06:a2:f9:22:81:
31:45:25:cb:56:bc:00:b7:6a:09:6c:2d:35:c6:81:
7b:68:c2:36:41:c8:b8:2d:47:cf:d3:79:bb:85:65:
73:9c:66:25:47:34:b0:c7:96:90:12:d8:d3:da:2c:
b8:12:95:2e:8a:23:41:7a:e7:26:1d:83:13:52:9b:
a7:49:61:95:3b:03:81:c8:23:c1:6a:a2:24:b5:6b:
03:22:d2:6e:8f:25:e8:ef:cb:b8:84:cf:e7:84:89:
1a:59:ba:88:70:71:00:05:3c:80:2f:95:f0:88:c9:
89:22:37:27:e5:5a:0e:ee:a2:9f:43:31:1f:cd:6d:
80:24:2b:02:9f:fc:c0:ad:13:d5:76:8c:b4:93:b4:
97:cd:e3:11:cc:26:de:09:56:9f:cd:2a:5b:82:c8:
db:39:db:9a:2f:b4:c3:f3:5f:96:5b:c8:e6:63:d6:
df:62:0f:a2:8a:9d:e3:32:0f:b7:fd:37:36:cf:b8:
c0:3f:1c:8c:4b:5a:d0:52:65:0e:50:f5:5a:53:ed:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:52:77:BB:8B:3C:42:02:25:0C:FC:9A:0F:7E:65:EC:C8:2C:B8:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aec8c256-ddac-313e-b6a2-9968100cb3dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:4c:34:cf:62:09:9f:34:0d:bd:1e:b4:66:38:50:ae:18:6e:
26:3d:05:82:b0:ce:25:55:cb:6d:79:97:b8:44:bc:08:e1:16:
b6:f0:fa:42:89:26:f9:14:6e:3b:94:30:8b:0d:b2:e9:b2:43:
9e:30:9f:34:a1:42:aa:7c:c9:d5:6b:a7:22:d4:1b:92:c8:01:
24:ee:41:94:17:eb:81:c3:47:33:5c:69:fe:64:8c:61:6d:94:
9b:a9:d1:d0:af:dc:76:76:e5:3e:73:73:b1:b1:ab:6c:26:bb:
8e:f0:f2:23:49:2e:b2:44:b2:e8:89:cf:81:dd:a5:33:08:f0:
45:0b:33:1e:85:14:05:7f:b4:7a:01:b7:5d:e6:79:a3:06:de:
7f:27:ab:af:40:99:2d:7f:03:a5:c8:8e:76:02:6d:a8:72:6a:
02:cc:86:83:c5:90:33:35:86:71:43:25:6f:20:b4:65:69:ca:
34:12:37:d7:66:3b:2b:9b:75:a1:33:6e:1b:10:b9:80:8d:fe:
be:32:bc:c1:7c:b5:2d:aa:41:c1:6e:67:13:0a:ad:75:96:a9:
b3:d8:99:fb:57:c7:66:15:e3:e8:f3:cc:f7:cf:ae:b3:d5:2d:
2b:97:95:08:dd:57:92:8e:ab:67:8f:a5:3b:17:14:c3:3f:fa:
2b:59:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:42 2025 by rpki-client