Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4fa1ae8-1c11-37e3-ad5f-a23cfbb15b2f.roa
File: e4fa1ae8-1c11-37e3-ad5f-a23cfbb15b2f.roa (raw, json)
Hash identifier: DBCZ9+kquT16v+Ilnn2+lz7qEuctRGVbCpxqKsilM6Q=
Subject key identifier: 78:B0:94:D8:93:91:AB:84:38:3C:0B:93:05:7A:8B:03:B4:09:7A:FD
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848977092F2BFA2E74B3E202480
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4fa1ae8-1c11-37e3-ad5f-a23cfbb15b2f.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 2914
IP address blocks: 168.93.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 20:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:92:f2:bf:a2:e7:4b:3e:20:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=220d78ea-05f7-4ba0-9f8c-7558999da833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:f7:0a:1a:bc:5d:1e:5b:2e:87:93:2f:9a:
8a:2d:2c:79:ee:db:fc:66:f6:96:96:d5:45:86:79:
a4:7b:c4:b2:86:fd:12:a2:b5:92:57:17:d1:dc:72:
56:5f:63:2e:d5:32:82:5b:6c:c6:40:b7:ee:a9:98:
1d:d0:3c:2b:39:44:29:2f:80:ad:bb:89:87:d8:a0:
c9:2d:f0:af:bc:85:c0:8d:d2:f3:8e:d2:b9:35:21:
d7:b1:cc:30:13:81:d5:03:5d:26:16:a2:68:84:0c:
45:44:9c:9d:12:22:4f:a0:a3:a3:42:f0:08:ad:c4:
0a:b4:81:38:46:1c:43:51:56:fc:b2:d7:ba:55:16:
7c:9e:bd:31:ae:10:b5:67:9a:b1:d4:7c:a1:38:0e:
cc:b7:25:de:db:dc:6c:64:2d:f4:3c:de:89:57:a5:
bf:ec:76:36:ba:4e:2e:ee:ff:92:a8:c6:84:5b:80:
34:f0:c0:17:b9:97:37:9b:2e:6b:d4:d6:51:f8:01:
a7:26:32:16:18:81:66:10:e9:03:e4:85:c4:71:ef:
69:4b:40:78:72:e6:cc:f1:df:cc:65:ff:23:f0:5a:
7e:a7:42:7b:f4:e2:ec:59:10:45:f2:74:d7:74:ea:
2a:6b:53:67:8b:bb:07:8b:27:d6:e9:59:62:c2:bc:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B0:94:D8:93:91:AB:84:38:3C:0B:93:05:7A:8B:03:B4:09:7A:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4fa1ae8-1c11-37e3-ad5f-a23cfbb15b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
168.93.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:d7:95:e1:83:90:9c:37:b2:83:26:6e:2d:c3:97:71:de:66:
62:b6:9c:5e:b2:ae:30:59:5c:6c:76:1e:a1:71:ae:0e:4a:8b:
87:fa:aa:78:2b:2d:ab:a6:de:e1:e6:ba:7e:24:2c:bb:a1:86:
9c:a6:57:ad:31:25:e0:99:43:76:52:54:df:3f:0d:42:d0:ad:
c8:7b:13:3d:47:f2:d3:c1:81:43:07:30:81:7c:6b:bc:01:f6:
87:4c:34:25:44:f9:8b:13:a1:95:0b:e2:0d:21:1d:6e:49:80:
2a:47:b2:4b:54:fa:57:54:72:ba:64:52:77:a6:75:45:97:0f:
7d:d8:64:01:7e:85:77:e4:2b:04:76:95:18:8a:37:1d:19:ec:
71:c9:19:f3:aa:3d:bf:13:dc:f7:22:e1:12:9e:8a:c7:6a:05:
d7:d9:00:19:30:c7:45:a9:b8:c6:bd:f1:39:2c:ff:a4:5f:f0:
35:75:40:12:37:5a:39:f0:8e:b8:ca:56:bc:16:18:bb:e4:cb:
bf:1b:99:b6:b0:f2:da:49:14:96:95:eb:2e:00:1a:1f:31:f5:
df:20:59:7e:dd:55:9b:67:6b:e1:44:c5:db:09:fe:a9:42:0a:
4c:aa:a4:13:2a:dc:ca:ea:be:0c:cc:68:43:d6:40:74:bf:34:
00:17:1b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:41 2025 by rpki-client