Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/ff7ff600-2ea6-3cba-8da5-cba673f1d0f2.roa
File: ff7ff600-2ea6-3cba-8da5-cba673f1d0f2.roa (raw, json)
Hash identifier: 2SGz10HUje1q87bz13AsxOiqVGyPFOA3UM6Dt+Dmydg=
Subject key identifier: 45:92:91:C1:70:08:B8:CA:B3:43:92:9B:B3:57:AC:E1:55:34:9C:ED
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F432858487DADD58926D193772A108B80
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/ff7ff600-2ea6-3cba-8da5-cba673f1d0f2.roa
Signing time: Thu 09 Jan 2025 20:33:11 +0000
ROA not before: Thu 09 Jan 2025 20:33:11 +0000
ROA not after: Wed 09 Apr 2025 19:33:11 +0000
asID: 202656
IP address blocks: 147.124.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 19:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7d:ad:d5:89:26:d1:93:77:2a:10:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Jan 9 20:33:11 2025 GMT
Not After : Apr 9 19:33:11 2025 GMT
Subject: CN=70312c46-69e8-4943-886e-a06eb16f973d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:9f:74:64:b5:73:a1:2d:bc:07:fc:f2:d1:
58:cd:94:05:cf:6c:f6:6d:82:8a:08:73:24:6a:a2:
48:39:ed:03:fa:f9:29:93:bf:e5:8e:47:f2:70:97:
e8:67:24:a4:52:56:d1:0d:2e:dc:c7:ae:da:8c:26:
6a:d3:a1:af:b9:3b:4b:79:fe:ca:88:14:4c:74:bc:
fd:94:49:57:24:51:35:f3:1d:0a:ca:a7:c8:99:cf:
43:1d:7c:1b:6f:80:bc:ea:c7:91:bd:b3:9e:78:4c:
23:94:53:62:55:c8:0c:a2:98:27:5b:c3:66:b4:96:
79:8d:89:0f:49:4b:6d:a4:c1:1b:88:6c:c9:98:c7:
e6:ca:86:d2:0d:2e:5e:2b:ae:38:78:67:f1:6b:e7:
d5:cf:45:63:0b:ad:c7:54:58:7e:69:c9:7d:d7:9c:
56:36:88:35:b5:6d:44:3b:4e:44:c1:d7:ae:98:2e:
8d:87:0d:d6:0e:5d:89:c8:f3:60:36:ef:d9:1d:3e:
a0:5f:7c:43:b6:ac:9a:88:a9:e6:68:7b:e5:5d:ce:
35:80:bd:3d:32:2a:b1:bc:10:48:72:35:91:4b:a3:
30:a1:66:aa:d1:17:ab:73:71:08:8a:f9:26:05:8f:
01:af:fd:1a:0d:8f:d7:7b:c4:e2:12:39:8d:3c:9c:
7d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:92:91:C1:70:08:B8:CA:B3:43:92:9B:B3:57:AC:E1:55:34:9C:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/ff7ff600-2ea6-3cba-8da5-cba673f1d0f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:e7:ab:bb:60:80:11:fc:5a:25:ab:97:b9:99:b7:fd:92:d8:
73:bf:4a:57:63:0a:ed:83:ea:68:fe:f9:30:ed:96:66:df:aa:
b4:ff:ee:ed:e7:e3:1b:7c:30:30:42:c0:d5:46:5d:97:c8:e6:
a0:3b:59:a6:bc:24:0e:80:c7:65:60:63:ba:89:74:d7:d7:56:
28:f0:b1:fa:9d:94:2c:ad:6a:6c:83:0d:ca:02:cc:f1:27:c9:
89:6b:73:ed:e9:a2:38:b5:fe:78:54:42:a0:4d:01:27:90:5c:
99:71:93:4d:23:9b:2b:7b:f2:87:6c:50:57:d9:c6:3f:bb:5f:
23:c5:d1:36:79:c3:1a:7e:b5:b1:92:32:29:7e:70:64:c2:d5:
d8:f2:39:ce:50:43:c8:d7:81:a7:d3:84:ca:f6:3e:2e:54:7a:
38:a5:0c:c0:f8:64:99:76:05:e3:50:13:db:bc:a6:7f:fb:47:
67:f8:0a:92:c4:b7:29:2d:4e:0b:6f:02:ff:0e:7b:37:59:39:
5a:2e:2b:d0:54:c9:d0:9a:50:b9:bc:27:8a:2b:4c:6b:85:5d:
8a:be:23:7a:9c:a1:03:c3:1a:6e:d2:c4:86:80:9c:05:b7:b3:
3e:60:c5:ed:52:da:ea:70:77:77:5b:91:b4:1c:b3:df:8e:7a:
ea:23:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:00:06 2025 by rpki-client