Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bd57ab78-e721-31d1-ac1c-a185a8472c5f.roa
File: bd57ab78-e721-31d1-ac1c-a185a8472c5f.roa (raw, json)
Hash identifier: yT14KJN/xJ2r7rjlRtIUufFqXSDuJb7Tdf5yO9mI1kk=
Subject key identifier: 7E:A3:81:54:70:4B:B3:5E:E4:04:85:35:B3:98:49:7A:B2:BF:CC:D5
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285848C580F2ADC5B439C50E5D7F80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bd57ab78-e721-31d1-ac1c-a185a8472c5f.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 1239
IP address blocks: 216.170.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 21:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f2:ad:c5:b4:39:c5:0e:5d:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=7ce6b561-b81f-4b13-9375-e71e0be903b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c9:ff:cb:33:b6:15:9a:05:a1:51:c7:db:ce:
95:3a:44:50:12:8c:f6:b8:e5:3f:bb:fb:ae:9b:a0:
9f:8c:90:ae:c3:6c:70:08:80:1a:72:c0:20:68:89:
de:f1:f2:ae:31:aa:ad:d4:9d:84:c2:70:6a:d0:e9:
4b:de:88:01:9f:2b:7c:e6:49:f5:00:89:68:ed:7e:
13:ae:cd:34:3d:31:3e:18:b3:8b:53:15:52:88:60:
6f:ea:ae:63:24:5f:7c:6f:fb:1d:9d:5a:54:0f:f0:
72:7a:a1:48:76:96:59:65:e4:37:ec:9b:8f:77:ce:
9c:6a:ef:6e:d9:eb:3c:0f:16:bb:f3:83:b6:70:a8:
a1:1d:89:19:8a:c9:aa:3e:e2:09:ca:a5:12:eb:42:
8e:2c:cd:c8:a8:b0:73:dc:85:1c:db:3d:7f:0d:43:
36:e1:19:a3:dc:9b:7d:47:de:88:6b:3e:eb:8e:38:
c0:86:83:85:59:6c:d9:e6:59:7a:67:cb:4d:c4:10:
d0:df:5c:f5:25:da:83:7c:3a:25:2d:53:f5:85:6f:
80:17:15:af:29:d2:98:fb:b0:bf:34:3f:a8:d6:8c:
f4:8d:48:90:81:2f:da:53:c3:71:2e:13:65:c5:47:
cc:58:b1:a6:d0:84:c8:db:3d:c0:1f:09:c4:42:09:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A3:81:54:70:4B:B3:5E:E4:04:85:35:B3:98:49:7A:B2:BF:CC:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bd57ab78-e721-31d1-ac1c-a185a8472c5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.170.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:97:f0:6c:2a:35:90:33:3c:5b:7a:04:1f:e7:26:98:d7:fc:
2f:5a:f4:98:ac:45:9d:92:e6:6b:af:ca:61:34:02:ad:5c:86:
54:b7:cf:1f:55:1a:20:e7:08:68:d3:e1:36:f8:6c:9b:ad:5c:
fc:ce:87:63:1e:ce:06:19:ab:80:a5:2b:65:e2:49:f5:d9:01:
88:67:47:e9:dd:9b:65:ef:ee:23:d6:f3:d0:25:80:52:9c:c6:
21:1c:69:d6:e6:66:23:c9:b9:cc:14:93:07:95:aa:31:48:4c:
55:fd:e9:25:d8:65:0d:4f:4a:c0:55:59:1d:34:0f:a8:83:6b:
7d:f4:93:95:52:a1:89:3c:21:e9:ba:b4:ac:03:76:8c:12:ac:
43:1b:4b:fb:e2:7e:9a:b8:91:8d:79:65:fb:72:33:10:9f:15:
ca:54:0e:8b:75:93:eb:8f:c2:79:7f:39:e7:f5:f9:9d:8e:b4:
c5:06:bb:16:2a:75:ef:0e:6c:4b:68:d2:4c:e0:57:38:98:45:
6a:28:7e:ed:12:04:dc:47:89:9f:aa:62:59:a9:f0:eb:98:a1:
62:bb:5f:07:96:44:4c:5d:cc:ce:05:0d:ac:fb:4b:9d:69:bf:
c4:39:11:51:59:73:bf:24:85:6b:3c:25:2c:a7:46:38:aa:c0:
09:40:65:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:19:23 2025 by rpki-client