Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a290c149-0017-3a57-a073-21736e428a6b.roa
File: a290c149-0017-3a57-a073-21736e428a6b.roa (raw, json)
Hash identifier: RxLobwRXUhybbBGED//kpjw8BWzlJDFpT2JiHcddeGc=
Subject key identifier: 57:DC:A1:A4:73:84:2B:E3:4A:E0:F8:BE:32:B7:EE:85:1A:6C:4C:1D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F155374A50E64FB64611A480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a290c149-0017-3a57-a073-21736e428a6b.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 174.130.64.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 05 Feb 2025 14:35:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:37:4a:50:e6:4f:b6:46:11:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=24bf3fa4-4a8a-402a-81d9-d3ee0bec442b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d6:28:5e:78:aa:b3:51:49:e1:b9:b4:f1:c4:
e4:b9:59:c5:07:b1:49:23:6f:23:a8:df:bf:e6:a1:
dd:44:d1:0d:6d:38:6e:66:4e:f5:5a:7b:5f:a4:aa:
2c:3b:29:1e:32:08:e7:4d:d3:e0:48:6d:9e:65:5a:
eb:b9:4f:c2:7d:bd:81:89:54:6c:1f:b8:d6:4b:b9:
1f:9c:fb:c4:e0:92:c5:f7:80:3b:f0:cd:ca:05:a0:
12:26:36:d2:e7:64:da:5c:a2:03:78:2c:eb:a0:ec:
2d:75:a4:77:f7:a0:93:e4:bd:8e:df:9a:b6:83:8f:
68:5f:a2:35:99:70:b7:00:6e:bc:74:83:f1:19:38:
ba:a5:fc:6b:52:68:0f:66:25:01:de:f5:c4:d8:5c:
9b:e3:22:be:fc:37:e7:2d:c5:f4:f3:cc:b7:53:0b:
9f:04:f0:a1:4e:4a:3f:c1:9c:d1:8d:0e:0a:28:69:
c7:0e:be:f9:94:b8:f7:5b:ae:8f:00:aa:32:bc:25:
83:fb:2f:24:eb:ec:2b:aa:a1:23:6b:04:cc:30:53:
30:0c:ad:d8:82:a3:50:fc:60:4d:57:ae:73:83:47:
56:5a:58:b1:e1:cc:51:2c:b5:1c:a5:f5:6a:21:27:
50:ac:61:b3:d6:1f:a6:a7:d7:92:7e:55:30:fa:cc:
20:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DC:A1:A4:73:84:2B:E3:4A:E0:F8:BE:32:B7:EE:85:1A:6C:4C:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a290c149-0017-3a57-a073-21736e428a6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.130.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:8e:77:a8:65:5d:44:4e:99:6a:1f:65:ca:a5:97:49:8b:77:
1d:80:3e:36:8f:dc:5c:8a:6f:9d:b2:31:27:81:e2:eb:43:8f:
e9:7a:f7:d3:19:ca:d9:52:b0:53:93:7b:66:9a:e8:1c:27:ac:
cc:e8:f8:52:a1:bb:0a:63:8c:fc:84:88:05:34:9a:65:85:eb:
c5:c9:f1:ef:b1:b7:6a:85:cf:c7:94:20:a7:f2:fd:f5:81:70:
e7:64:18:76:22:32:36:b1:6c:8b:ea:c1:4f:7a:bc:71:e7:f0:
e7:1d:c1:c8:85:52:0b:22:1a:10:cb:d7:ee:8f:9c:43:49:e4:
71:ad:e2:b1:ad:b0:33:da:8c:8b:d2:47:5e:e5:cb:2d:a9:34:
74:f7:80:2f:e4:6e:94:c0:7d:a4:c8:42:5b:97:80:2a:58:db:
3c:c5:ee:35:1e:aa:9a:52:cd:cb:ab:63:ad:0d:a0:de:e2:bf:
12:df:4e:ab:90:b7:f9:72:97:db:cb:fd:f2:8f:68:3b:06:92:
2c:a3:da:bd:e6:9b:92:fc:29:4e:c7:0f:b0:78:46:61:19:4d:
1a:0f:08:83:c0:ed:6f:f6:4e:ca:9b:2c:37:dc:03:5a:86:7c:
34:d1:44:a6:9e:f0:cb:f9:6f:d9:00:68:43:fa:d8:3c:07:33:
fa:a4:90:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:08 2025 by rpki-client