Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af02410d-4569-3f3f-a76b-438b15db3cce.roa
File: af02410d-4569-3f3f-a76b-438b15db3cce.roa (raw, json)
Hash identifier: MP5AVB9CnBlkCpsNexuHbkBEFLYulCcFn2EPAGwGi7M=
Subject key identifier: 58:2B:99:E1:1C:98:89:B7:84:DA:99:12:F7:38:30:D7:0F:F1:9B:56
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F432858487E5061E8E1BA682D14C02D00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af02410d-4569-3f3f-a76b-438b15db3cce.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 8100
IP address blocks: 136.0.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 17:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:61:e8:e1:ba:68:2d:14:c0:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=c8284def-386d-4113-a768-341bcd7ff388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:0b:41:42:34:a3:76:03:c3:6c:14:0d:24:
33:c9:11:1f:f7:5d:be:47:65:b0:3d:19:c2:5f:e8:
68:4b:02:fe:7f:be:eb:f2:71:85:d8:57:c9:cb:3c:
35:83:42:20:a1:16:30:60:3a:ec:47:3c:85:c2:3a:
89:b9:35:b1:57:81:37:68:93:66:16:ff:9e:3a:b5:
20:24:6b:72:f9:79:7d:97:6a:7e:1f:62:71:70:49:
24:7f:ed:47:03:e3:a2:21:23:93:2e:e5:1f:42:ee:
d9:86:92:bf:da:be:fa:9e:de:b4:bc:ec:9b:5b:1b:
3a:33:f9:b5:07:b4:d3:01:ad:88:05:1e:db:9e:37:
cd:5a:a7:26:b2:1e:ee:f9:fc:f3:74:72:99:41:9e:
3c:a1:ce:69:65:f0:5f:a6:48:85:c8:24:b7:65:67:
a3:37:c2:89:6a:9f:03:4d:bc:b9:2c:f2:ab:e6:f2:
7b:7e:a0:b5:e1:37:ff:35:53:19:97:6d:b6:b0:9a:
af:84:d3:16:88:65:ef:a3:1c:37:87:44:37:2f:04:
60:e5:3a:48:a0:42:96:42:c3:ca:8f:d3:a2:d9:70:
c9:69:38:46:70:86:57:cd:af:13:72:da:cd:0c:a9:
c0:25:40:25:77:ed:43:5b:56:98:b6:d7:67:27:ec:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2B:99:E1:1C:98:89:B7:84:DA:99:12:F7:38:30:D7:0F:F1:9B:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af02410d-4569-3f3f-a76b-438b15db3cce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:18:ca:37:9f:f9:52:b5:49:1d:02:5e:bb:82:95:d2:2c:ce:
af:03:b0:35:4c:dd:cb:a1:02:56:74:37:bc:14:d1:22:80:3b:
ec:f1:4c:97:2e:e9:03:0a:fb:b3:54:d6:ac:40:1a:03:61:c7:
16:37:cd:4f:30:bb:9c:20:0b:f8:94:ab:d5:e3:92:9c:c1:4e:
f5:8a:55:e0:f8:50:63:f3:f7:69:db:10:df:f2:e1:fa:9a:d8:
9e:be:ec:d4:ab:95:10:bc:37:d4:0f:3f:39:93:67:97:89:fe:
6d:89:07:10:04:e1:ca:19:ce:2a:de:8c:4f:5b:46:2e:00:a7:
a7:d3:4d:47:52:da:9a:e3:d1:c4:53:75:80:37:0f:cd:37:17:
83:b0:bc:6e:c9:7c:d2:2d:e1:2b:05:0f:e9:6f:73:9b:2a:3f:
b4:7c:19:b3:ad:9f:d1:db:9a:08:83:02:a0:04:ee:1c:a6:fc:
2d:51:b2:cb:bb:8a:9d:e4:ee:2a:5e:c8:b2:2d:4c:68:44:18:
4c:d3:3a:1b:d6:bd:0a:41:e7:e6:3d:f9:8f:36:79:20:57:8d:
da:00:bd:19:e4:dc:ee:c0:e7:1c:f1:53:a3:99:ca:1a:26:57:
40:38:2c:56:ee:d7:c1:73:ab:1e:12:e0:72:af:44:e0:95:32:
ff:84:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:01 2025 by rpki-client