Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baab5a7a-3ac7-30ac-9fbc-37e93c9e5a1b.roa
File: baab5a7a-3ac7-30ac-9fbc-37e93c9e5a1b.roa (raw, json)
Hash identifier: mZykbBFPd8/w081onJE4alzbGV+qsJBZGHKKwsrMLXE=
Subject key identifier: 0C:6C:2D:90:D5:1A:55:B1:D7:9F:F8:E3:D6:C4:B3:04:78:E1:E9:E8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F154FE42FB66103B10F76000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baab5a7a-3ac7-30ac-9fbc-37e93c9e5a1b.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 75.90.32.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 05 Feb 2025 14:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:fe:42:fb:66:10:3b:10:f7:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=90346ecb-82c4-476f-b7d8-6d5197ca1eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:f3:a7:cb:05:2b:8a:64:e4:99:30:7c:0b:
4a:fa:49:53:ba:13:79:2a:7b:b4:1a:4e:13:a9:5e:
14:fc:ef:41:de:80:61:84:75:ab:90:8c:4a:db:c7:
34:c8:95:a4:6f:48:72:d4:7d:31:8d:e5:e2:f6:23:
0a:d5:42:4c:20:c0:c8:3f:e8:2b:44:10:fa:3d:07:
ea:58:d6:2e:a1:55:8b:cd:9f:11:6c:65:a3:39:43:
2f:3e:00:41:bf:f1:9b:8c:f5:8b:65:84:6a:40:5a:
5e:ef:bc:a0:bf:76:44:c4:a8:29:30:e3:b7:e5:5e:
bc:7c:39:dd:72:92:e2:a7:98:1f:51:aa:95:66:ff:
e1:18:75:8d:cd:8d:0f:96:a7:ad:a8:23:ee:53:f0:
dc:29:d1:cb:30:07:28:8e:b3:70:77:32:e5:86:27:
1a:59:1e:c1:57:71:21:a0:4f:55:f6:b2:2a:dd:c2:
de:e5:30:66:e5:2b:bf:be:f2:7b:9a:57:92:df:ee:
c9:27:e9:c0:60:50:8f:c2:f5:11:50:86:df:0c:77:
48:3f:67:ab:5a:2d:db:bd:50:42:2d:d0:c5:11:65:
c8:e7:16:81:f4:05:af:81:b2:ea:41:e8:42:e2:54:
aa:79:e0:85:cf:25:dc:17:1f:a2:3f:75:d3:27:19:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6C:2D:90:D5:1A:55:B1:D7:9F:F8:E3:D6:C4:B3:04:78:E1:E9:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baab5a7a-3ac7-30ac-9fbc-37e93c9e5a1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.90.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:ee:22:c4:ec:7a:bb:77:e8:4e:ad:77:3c:d2:ec:bc:54:7c:
7d:64:49:2a:92:79:91:a5:37:b9:a1:81:2a:96:4d:9a:2d:6e:
43:10:53:34:50:fb:db:a3:11:2a:da:5b:38:b0:5b:2c:7f:fe:
2d:98:1c:7c:a3:8e:c8:f3:ab:4f:40:b2:5f:fa:4d:be:2e:bd:
9c:9f:dc:44:18:94:00:d8:cf:c8:bb:8a:83:04:6b:eb:f1:51:
a9:08:24:71:15:46:6e:c0:63:16:13:52:e5:24:50:bd:22:64:
f7:0d:c9:48:9b:4c:54:63:0d:6a:7a:f5:32:08:25:70:e4:f5:
4d:f0:47:13:38:fe:43:3c:dd:86:5d:97:a7:be:82:da:4b:d7:
0c:c5:f5:53:97:e6:79:ea:7e:58:48:43:eb:d2:e5:14:03:d0:
63:df:80:64:58:3f:a0:03:21:86:87:55:14:34:16:9b:2e:15:
fb:a9:20:f7:03:54:df:c0:d3:47:ea:16:f6:2b:6d:f3:e3:2e:
9c:88:5d:30:aa:0b:53:a5:ca:cf:d5:aa:a6:5d:87:e9:7f:3d:
76:3e:9b:3d:49:35:da:a1:97:48:10:e8:37:8a:af:f8:1c:89:
aa:03:49:ba:36:41:fd:28:87:cb:73:87:1a:58:1b:52:76:cc:
eb:31:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:51 2025 by rpki-client