Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae5c7345-a6a9-3b66-aa3a-e19af05fb029.roa
File: ae5c7345-a6a9-3b66-aa3a-e19af05fb029.roa (raw, json)
Hash identifier: N2lN4IJFTJnTdGHlKuqFRH/wQ8rz497GmA43ICDNs1E=
Subject key identifier: CA:91:F5:29:52:9F:77:4E:4B:B4:82:11:06:FF:50:96:38:53:5B:56
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F154FA47462689FCD769B000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae5c7345-a6a9-3b66-aa3a-e19af05fb029.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 67.224.56.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 05 Feb 2025 14:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:fa:47:46:26:89:fc:d7:69:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=3d52ac2e-e32d-4fc4-8689-7455a3848afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:71:cb:cc:9a:eb:32:97:0d:4d:0b:a4:f8:
ab:4b:64:25:1f:78:21:ef:d1:5b:57:5b:40:5e:28:
af:24:6d:7d:50:93:7b:56:b0:64:70:5f:44:35:ef:
f4:58:6a:de:2e:6c:0c:6b:7b:d7:1e:01:34:23:c6:
6e:a0:9b:b3:1b:36:a0:3a:2c:7b:b8:84:48:07:c1:
9c:07:6d:35:88:f8:6c:c7:3d:e3:b2:ef:50:06:45:
d9:17:dc:a5:0e:58:2b:bf:49:c8:04:10:42:a1:58:
5e:47:af:ee:03:4e:84:f6:5b:59:0b:d7:d1:b5:0b:
3c:1d:97:a1:7d:f2:5d:84:de:6d:af:8f:15:0e:e4:
16:47:bb:1a:59:73:98:06:ac:3f:c6:c0:f3:98:47:
97:e0:5b:7d:37:01:54:4c:15:2c:fc:47:54:f3:65:
1b:1a:cc:6f:96:de:5e:f3:40:8d:05:43:6e:ee:d7:
42:b2:c5:6d:3b:58:23:3d:4a:31:46:c0:40:61:0d:
e4:20:1a:1f:24:bb:03:17:93:5f:4f:bd:8a:55:db:
88:96:e1:a2:47:05:de:bb:c4:7f:40:c6:1e:10:53:
be:17:87:b1:a6:b8:00:c0:58:d7:39:a1:03:2c:90:
b8:23:85:42:34:dd:27:44:ec:df:06:57:a2:3d:c0:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:91:F5:29:52:9F:77:4E:4B:B4:82:11:06:FF:50:96:38:53:5B:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae5c7345-a6a9-3b66-aa3a-e19af05fb029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.224.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:ca:47:71:ce:ce:eb:5e:25:fd:40:85:ca:6f:98:ba:6a:28:
ae:2e:d0:f1:1c:b1:0b:48:11:b6:a8:38:66:7e:fb:ca:5e:cc:
6c:d6:1a:12:ac:08:ce:54:9e:11:ef:87:8b:8a:b7:1a:2d:8c:
3e:ec:0a:43:5c:d7:84:a3:5a:ce:fe:2e:bd:6f:d4:dd:be:6a:
36:c1:0a:c7:1e:28:a5:a7:41:a5:0b:f2:07:8d:8f:f3:40:a2:
68:6f:ae:0a:07:ba:a9:02:ed:c2:78:8d:83:c3:50:52:4c:06:
9d:ec:57:9d:af:d0:b3:a8:be:22:7d:7a:8a:33:82:c5:62:c8:
cd:6a:a6:96:33:e8:d8:4c:a4:d1:5c:b1:32:63:0b:26:d3:b4:
14:35:3b:9e:7e:c7:e0:ad:30:18:26:20:4f:f6:95:0b:ee:b4:
b6:dd:b4:17:69:e6:29:97:19:3a:29:d2:e7:ac:8a:5c:65:23:
0a:f3:cd:3c:4f:a2:71:05:e5:10:5d:49:0d:32:3a:cc:42:49:
3f:8a:22:af:b6:e4:56:c8:03:4a:80:81:b9:e3:68:79:eb:98:
08:b8:28:65:75:8d:12:f8:4e:44:d4:10:1e:90:b7:aa:16:f8:
4c:3b:3f:b9:e7:0e:3d:2f:7e:3e:91:55:44:c7:72:99:40:0a:
be:f8:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:41 2025 by rpki-client