Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfc25511-6d8b-34e2-a72a-3af3adb3be51.roa
File: bfc25511-6d8b-34e2-a72a-3af3adb3be51.roa (raw, json)
Hash identifier: Pt1/oMqHY2qaYnDG5ZQbjCV7C9h3yfTLMGMZkjTB76I=
Subject key identifier: 96:31:A8:33:E3:9C:A6:BE:DB:32:DD:F2:22:87:9C:6B:8A:A1:2A:3B
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584911A0082C40D974D32A7AE8C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfc25511-6d8b-34e2-a72a-3af3adb3be51.roa
Signing time: Mon 03 Mar 2025 20:25:01 +0000
ROA not before: Mon 03 Mar 2025 20:25:01 +0000
ROA not after: Sun 01 Jun 2025 19:25:01 +0000
asID: 401152
IP address blocks: 136.0.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 19:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:11:a0:08:2c:40:d9:74:d3:2a:7a:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Mar 3 20:25:01 2025 GMT
Not After : Jun 1 19:25:01 2025 GMT
Subject: CN=528cba48-e828-433a-9410-46d0bb53f0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d8:b5:8a:84:08:cb:3e:d1:14:e8:bb:6b:c0:
53:72:ce:02:e4:22:5c:5c:b8:23:2e:6a:30:65:15:
c3:0d:26:2a:ec:6e:f3:3a:91:a2:3f:1e:03:ff:e2:
b9:a0:ae:72:6b:c0:0c:b8:33:84:9a:b2:56:d0:a3:
ac:7d:19:a5:f8:b9:4b:b9:8d:32:61:d7:30:10:09:
9a:fe:ab:b8:7c:65:5b:42:59:f7:62:87:aa:74:87:
32:ab:39:a7:43:2b:b0:40:0e:54:55:a8:28:29:4c:
5f:2a:82:68:99:74:ca:f8:96:80:11:82:41:f4:b5:
81:f7:a3:b3:c9:75:67:1f:07:14:94:0b:4c:38:d6:
9c:21:b5:a4:c8:da:13:ed:04:8a:70:04:91:9b:27:
42:93:6f:b3:72:76:13:25:f3:93:62:c0:80:2f:a9:
e3:b1:83:2f:63:80:6c:d8:69:68:55:3d:c4:6b:b3:
82:eb:ce:03:0d:ad:74:36:48:16:98:c9:ff:2e:45:
22:4e:16:01:50:c2:44:ef:4b:68:e3:88:2e:bc:49:
bc:a2:85:89:b4:87:9f:79:e9:e9:ab:d2:e1:fc:6f:
56:8c:b5:04:65:71:12:2f:4c:18:dd:48:de:fe:bf:
e9:80:94:16:4c:59:da:99:b2:1c:1c:84:33:1b:36:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:31:A8:33:E3:9C:A6:BE:DB:32:DD:F2:22:87:9C:6B:8A:A1:2A:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfc25511-6d8b-34e2-a72a-3af3adb3be51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:0b:76:2f:77:0c:56:78:a0:19:ea:59:9a:41:a0:88:65:c0:
fe:54:8b:08:5e:b3:bf:f7:54:1e:d6:07:95:4a:af:7a:b3:97:
27:d4:11:fe:9b:c6:de:43:ff:0c:c0:aa:8c:79:75:c2:dc:fc:
7d:01:e9:98:3b:40:2c:24:c7:23:c5:58:3a:f7:89:fc:bc:07:
bc:cc:38:43:a5:5a:fa:70:85:9c:58:e2:72:47:6f:16:b6:52:
79:fe:2a:d1:1e:87:99:86:b9:b4:fe:5c:82:a6:44:b8:d4:73:
e6:36:24:38:32:95:31:ef:9c:71:9f:34:1b:ab:b2:96:8b:98:
63:2e:7a:47:1f:75:16:dc:ae:25:57:fc:86:b2:00:5a:e7:c2:
9b:6f:e3:fb:57:2c:8d:9d:b5:59:ea:a4:53:6b:d8:b3:ef:fa:
37:4f:cf:41:7a:d1:37:9f:3a:84:a4:27:ea:65:97:5e:2b:96:
bb:6f:08:d8:6b:e7:3b:f9:f7:d8:fc:0b:23:d9:2f:b8:96:af:
4f:62:5f:e1:d9:74:e5:a9:7e:8d:f3:34:54:7f:9a:1a:84:cb:
44:20:50:1b:51:11:14:30:46:55:93:e0:92:20:ec:0a:78:4e:
4f:ee:4c:6e:db:84:23:3d:d0:bf:87:f9:bf:bd:72:d2:41:c4:
9a:08:c1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:29:57 2025 by rpki-client