Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/d86af507-955b-3d94-866c-0099859df643.roa
File: d86af507-955b-3d94-866c-0099859df643.roa (raw, json)
Hash identifier: +ZXYy/LXLS/avtlqO7NBKz3rIBaZ1W06hj7z1w5bUCs=
Subject key identifier: 5E:3F:A9:0E:F9:E7:8D:0F:AB:19:1D:1D:9A:0C:88:8B:14:15:33:0F
Certificate issuer: /CN=aed2676f-2a52-4e10-9b06-0b423a5503c5
Certificate serial: 010D0C9F4328584861B0361BD9F252D322197980
Authority key identifier: C1:19:25:DA:B2:BB:05:C1:B7:75:96:C1:27:16:FC:6C:77:AF:76:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/d86af507-955b-3d94-866c-0099859df643.roa
Signing time: Mon 30 Dec 2024 19:55:20 +0000
ROA not before: Mon 30 Dec 2024 19:55:20 +0000
ROA not after: Sun 30 Mar 2025 18:55:20 +0000
asID: 11452
IP address blocks: 146.203.135.0/25 maxlen: 25
Validation: Failed, certificate revoked on Mon 03 Feb 2025 14:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:b0:36:1b:d9:f2:52:d3:22:19:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aed2676f-2a52-4e10-9b06-0b423a5503c5
Validity
Not Before: Dec 30 19:55:20 2024 GMT
Not After : Mar 30 18:55:20 2025 GMT
Subject: CN=f5eca71f-28c3-476b-b7e0-ba9a834b5bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:e0:1a:b1:30:a9:37:39:9d:a6:74:09:78:
bf:46:5a:b9:7e:80:5f:9b:a8:39:8c:fd:86:99:3f:
cf:28:7c:71:e2:45:2d:62:55:c9:1b:96:fc:db:4a:
3b:92:ae:a1:cf:ab:f0:60:03:22:9a:d4:7e:99:6e:
fc:d5:6f:64:0d:b9:cf:02:01:d3:42:e1:95:81:3b:
b9:32:59:49:b3:9b:a4:0b:43:52:25:e1:5c:4e:59:
74:04:21:75:d1:c0:e8:29:af:7f:d3:2e:fc:17:77:
e8:9c:cc:2c:29:5d:68:08:d9:94:27:2c:75:1c:1c:
4c:9c:bc:73:d8:a8:ca:28:6d:03:80:f1:23:6f:c2:
b9:22:2e:bb:64:04:c5:53:e7:22:0d:19:d0:63:71:
44:68:62:1b:5d:fb:c2:65:8a:5f:79:aa:9d:d6:fe:
a5:f8:df:fe:50:51:54:55:f1:01:b9:47:78:4d:1f:
57:e8:c8:f6:1d:21:70:bf:8e:62:9b:5b:9e:8b:55:
20:08:31:ea:50:c9:87:a5:c1:d7:8c:5f:ce:c1:91:
b3:a9:0e:8e:b1:53:11:6c:93:79:a0:fa:2c:46:59:
72:3d:46:23:87:c7:71:44:6c:8a:41:cb:ad:ee:53:
ff:0c:08:0a:d7:6a:c6:e0:dc:3d:60:71:fb:fc:ff:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3F:A9:0E:F9:E7:8D:0F:AB:19:1D:1D:9A:0C:88:8B:14:15:33:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/d86af507-955b-3d94-866c-0099859df643.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.crl
X509v3 Authority Key Identifier:
keyid:C1:19:25:DA:B2:BB:05:C1:B7:75:96:C1:27:16:FC:6C:77:AF:76:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer
sbgp-ipAddrBlock: critical
IPv4:
146.203.135.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:9b:49:74:12:26:34:60:1f:8b:2c:32:36:8b:c4:55:da:36:
63:56:84:53:e3:d6:45:85:73:f1:ce:2e:28:6a:37:8b:ff:bb:
46:fe:5d:e3:b1:76:77:f2:ce:a2:d7:34:e1:44:f4:ed:73:19:
30:09:2d:01:ea:36:5c:0f:b3:a5:da:62:ab:23:24:32:8c:4b:
a0:40:17:14:20:95:5f:8d:d9:6d:5b:89:a3:f7:bb:46:4a:15:
1f:87:83:05:aa:99:ca:e3:6d:13:ef:8d:88:c6:48:86:7d:74:
d3:f6:17:57:ef:14:6b:f4:0d:43:f5:ca:53:30:6e:60:11:ef:
2b:d2:e6:6e:fe:f4:a6:b3:cb:cf:55:34:ff:b7:0a:11:3e:d1:
77:3b:68:aa:80:8b:6e:ca:95:29:5b:e7:1b:9e:ab:bd:4f:0f:
69:67:b3:b6:e5:0f:ae:42:e0:1e:14:03:47:bb:a6:9f:e6:93:
88:6e:47:f4:cc:6c:33:be:ee:43:80:f8:eb:9b:79:53:45:04:
30:66:29:b2:b2:0c:2a:49:d4:01:ef:ba:f7:09:6c:71:9d:63:
25:4e:46:7a:85:ab:b6:02:f2:c8:af:1b:f4:e2:11:1d:78:43:
47:c1:90:72:d4:26:40:09:9a:2e:43:d8:7b:21:77:a0:c3:3c:
cf:c1:6d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:06:33 2025 by rpki-client