Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7f173ada-50ec-39b8-a450-58e816635608.roa
File: 7f173ada-50ec-39b8-a450-58e816635608.roa (raw, json)
Hash identifier: AE6XeQrx0vwuRcUHWDyWm+GZ8IgkTqTdHxcZp/Zknco=
Subject key identifier: 3E:28:91:88:B8:BC:47:B2:90:5E:87:16:0F:7B:80:AF:E8:B8:3A:29
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210EF7E29E81EA897172700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7f173ada-50ec-39b8-a450-58e816635608.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 71.30.176.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 24 Mar 2025 12:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:ef:7e:29:e8:1e:a8:97:17:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=b4f3b257-4f14-46e4-9e0d-f680ef1233a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f2:01:5a:03:f0:b7:70:72:7b:d9:bd:bc:cc:
21:25:32:bf:4e:be:f8:b0:a2:38:20:1b:d1:a4:ab:
e9:ca:2c:88:48:ee:b5:b2:1b:6b:76:82:a2:f7:51:
8d:52:73:ab:84:2a:2a:ed:8c:a7:f8:b1:d2:41:36:
44:84:1d:60:db:2d:4d:ed:c0:06:a0:16:9a:36:3c:
af:cf:1a:e1:0e:9c:51:93:0a:c6:b8:9d:fc:a0:83:
70:40:71:9c:92:16:5d:22:84:a4:7f:d0:d4:74:75:
c7:a7:07:8e:65:b2:cd:f3:9b:26:cc:bb:a6:d9:50:
95:b3:64:71:07:ca:5d:45:6f:93:77:00:bc:74:3c:
ee:b5:d6:ea:57:79:e8:ce:5a:34:c4:09:39:b6:28:
fd:1f:c6:43:39:aa:6f:d9:1a:02:68:18:74:2c:d7:
f9:2e:5f:76:e5:cd:a0:65:f8:9e:49:7d:0e:32:67:
48:1e:d1:5a:f9:a6:71:2d:85:95:93:2b:13:4c:ca:
70:63:4e:38:c3:72:e3:bc:f5:f2:d2:da:40:c6:65:
45:d2:b1:d5:35:f6:07:7b:67:e3:63:ee:ac:c8:a9:
68:27:a7:81:3b:52:db:45:7d:f9:52:b3:76:35:90:
97:52:d8:b2:75:fb:73:2b:17:95:3c:fd:29:04:40:
f1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:28:91:88:B8:BC:47:B2:90:5E:87:16:0F:7B:80:AF:E8:B8:3A:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7f173ada-50ec-39b8-a450-58e816635608.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:e0:8e:a7:37:fe:62:82:12:62:b3:f7:c6:86:25:2a:ce:08:
c7:a5:40:05:cb:29:8c:04:a9:a3:8b:f1:75:6c:60:1d:76:5a:
dc:ab:3d:99:51:3b:3b:5b:d6:d0:10:fe:45:10:c3:33:89:fe:
e1:67:f4:f0:aa:23:aa:be:b8:b2:3e:d0:f1:29:9d:2a:b2:47:
64:57:c1:01:13:f3:a1:b5:81:1c:e8:64:68:66:ac:f2:53:90:
d5:e1:0a:b5:37:82:cc:52:06:f2:20:98:29:d3:16:a5:a8:1d:
ae:e9:56:5c:63:73:96:63:be:e5:9e:c4:59:a5:c7:6e:d9:dc:
ba:4e:4c:b1:bc:61:ed:25:b9:28:b0:e2:5c:45:ae:4e:c3:1a:
5a:83:77:7e:09:c7:5c:2f:c6:d6:60:8a:e8:3b:31:48:d9:48:
39:d8:38:be:cf:64:7b:83:69:88:21:58:e5:c4:9f:7b:68:37:
51:10:83:df:9e:7a:7a:11:7f:82:da:8e:30:65:b7:da:54:ed:
ef:ad:0d:f1:3d:30:ad:9b:6d:8b:de:74:30:72:4e:5b:2d:df:
83:72:d1:1d:c5:ff:42:f8:ef:2f:6b:1c:26:0d:8c:92:fe:68:
b9:e3:41:46:93:e3:a2:5a:e5:81:05:24:96:26:f3:27:ef:26:
fd:a7:44:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:38 2025 by rpki-client