Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae71f3bd-c940-3cf9-aa05-c4bf3c34e58b.roa
File: ae71f3bd-c940-3cf9-aa05-c4bf3c34e58b.roa (raw, json)
Hash identifier: NaqhHrk95I2fyoZfOuePcGUEDpSFrUhxSNJ1lrpt/hU=
Subject key identifier: 28:3B:09:72:6C:35:79:8D:D3:1B:F0:DD:E3:9D:C3:B4:42:6F:9D:B5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210F412B64A5D52E961CE00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae71f3bd-c940-3cf9-aa05-c4bf3c34e58b.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 151.213.224.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 19 Feb 2025 15:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:f4:12:b6:4a:5d:52:e9:61:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=2d13bd3e-f444-47d0-af63-154844418052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:3f:a6:43:b2:3c:4d:d2:66:c4:b0:a2:b3:
20:36:92:fd:f6:38:38:0c:78:d4:e1:9a:30:c6:d6:
30:4f:ec:ca:8a:62:8b:31:5b:5c:b2:d5:d1:e6:55:
e1:46:ff:39:80:af:15:2f:76:d6:7c:01:d2:b6:de:
51:7a:c9:7d:b3:4f:11:02:b5:24:fc:22:1f:6d:7d:
db:67:65:5c:e4:e1:7b:be:0a:d2:89:cd:7a:f7:b2:
bf:21:f5:57:c5:7f:41:e7:27:81:fc:9b:e7:4a:62:
d5:86:23:e9:f8:e7:09:81:8f:c1:56:58:c5:49:9b:
19:07:56:f6:89:62:0a:fb:43:ca:d5:ef:af:ed:19:
92:65:7d:a5:e2:ee:12:d4:1d:cf:c4:ad:58:59:d7:
f9:ec:27:57:15:47:e3:52:48:3f:d8:d3:ae:a1:c8:
67:f3:38:ff:12:20:07:63:b7:17:5b:48:29:04:27:
e5:b2:a2:9e:8a:e0:ad:22:27:9a:ea:93:a4:b3:7f:
4b:98:a8:f5:f7:33:f0:5b:14:ad:09:60:b4:48:69:
53:89:1e:99:61:a3:1f:9a:97:5f:63:ab:c4:f3:93:
06:a8:04:8f:15:bd:ae:40:c7:11:21:64:7c:0c:88:
36:a3:88:1f:38:2a:70:fc:de:fc:99:76:0e:a8:1b:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3B:09:72:6C:35:79:8D:D3:1B:F0:DD:E3:9D:C3:B4:42:6F:9D:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae71f3bd-c940-3cf9-aa05-c4bf3c34e58b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
151.213.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:48:dc:02:f9:5a:79:14:3a:4d:eb:8f:44:37:c4:33:d3:f7:
04:e0:a8:82:d7:e4:0f:db:98:06:37:b3:fa:ba:42:f0:e9:cf:
8f:66:3f:d1:fb:c3:df:65:62:7f:04:a0:5a:4d:c0:68:fb:70:
ec:99:48:88:9d:3d:e5:ca:e6:4b:c4:89:cb:50:b1:2c:60:a3:
d0:dc:8c:22:2a:17:78:1d:e6:ab:be:e2:7d:a8:4a:12:a3:7b:
7e:e3:20:7c:9f:9d:ce:bf:7f:a7:68:fe:8b:87:d2:ce:72:99:
52:7e:6b:2f:05:7e:3a:61:ec:0f:c2:fc:7a:53:c1:d4:5e:f1:
ba:89:65:81:cf:fb:bf:0c:79:ef:4c:da:79:ca:97:15:1d:32:
20:b4:64:c6:80:cf:68:8d:9f:e2:4f:f7:ef:7e:0e:c7:16:27:
b8:68:a8:52:75:6a:3f:38:ff:17:71:bc:9b:08:93:e7:32:7b:
51:52:41:df:c1:8f:e6:c7:ec:07:85:9e:f8:69:20:eb:99:57:
8c:de:d6:08:9a:7b:cc:37:5e:a0:8f:5e:06:55:d4:3f:57:4e:
8e:00:c1:1a:3c:ac:17:1e:79:fd:ff:9d:c9:cc:44:d5:77:c8:
50:d5:4c:3d:d1:14:f5:42:d4:8f:d0:92:39:09:f5:1c:87:29:
14:b5:eb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:06 2025 by rpki-client