Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2ff6fd4a-64af-333e-825d-d1ebe58c9c76.roa
File: 2ff6fd4a-64af-333e-825d-d1ebe58c9c76.roa (raw, json)
Hash identifier: +zsphRPXZ7lhxx0tryfQ2Z+2+Qi8Kt0wNZELuQ3g0XE=
Subject key identifier: 5A:11:57:F5:4F:47:FA:61:C8:95:7F:A5:C0:57:AE:6E:C0:E8:31:0E
Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d
Certificate serial: 010D0C9F43285848CC7B9DF08E415ADE5FD20B80
Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2ff6fd4a-64af-333e-825d-d1ebe58c9c76.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 399082
IP address blocks: 23.157.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 06:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:9d:f0:8e:41:5a:de:5f:d2:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=e023499b-a010-4245-888d-b7e40dbe3ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:17:79:c6:41:16:0a:de:b0:a0:4b:0e:bf:
61:6d:08:fd:d2:4c:bc:b4:ff:38:99:32:56:fd:36:
2c:3c:7d:cd:b6:b1:2f:d8:a9:92:c5:a3:26:65:cb:
7b:56:bb:8a:93:3c:a6:fe:66:46:97:c4:87:25:d7:
b2:dd:19:bf:20:f3:6a:2f:98:6a:50:99:c1:10:2a:
9c:37:18:6d:ac:2f:2e:a8:09:ab:cd:62:76:de:9d:
f9:5b:5c:46:03:b0:18:0a:00:34:c2:e2:a6:c4:ee:
d4:19:75:55:9a:b6:c3:2a:9c:23:c3:35:ef:81:fb:
d7:4a:61:85:22:9c:25:fc:b8:e2:05:12:89:c6:27:
eb:84:84:d2:fd:10:d6:3c:a3:3a:c9:ce:64:04:5c:
ac:20:c7:2f:45:6f:7b:93:7e:a4:5f:4d:9d:9e:56:
5c:25:35:c2:d0:6e:aa:75:45:e7:40:05:ef:80:63:
e9:83:7c:74:1d:cb:6c:2d:f7:98:2a:cd:8c:93:d4:
bd:77:dc:5d:16:5a:af:81:45:9e:b8:b3:fe:36:f5:
4e:8d:bc:9a:dc:a2:5f:92:c9:7f:c6:ea:c3:03:89:
a0:11:b6:16:0c:ed:a2:c9:eb:59:d6:fd:73:21:61:
00:90:30:b4:63:4a:58:c0:9c:2f:2a:72:19:63:4d:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:11:57:F5:4F:47:FA:61:C8:95:7F:A5:C0:57:AE:6E:C0:E8:31:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2ff6fd4a-64af-333e-825d-d1ebe58c9c76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl
X509v3 Authority Key Identifier:
keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:15:72:0b:db:e8:4f:17:6f:90:6b:5d:51:84:84:a6:ed:23:
eb:ba:d1:9f:20:90:5a:37:d3:7c:f2:5f:fc:f0:88:bc:41:63:
3a:b6:a7:5d:ee:ba:46:a9:93:9c:6d:cd:77:ac:16:74:8b:b7:
69:ab:ef:9c:2c:b4:de:60:c4:20:b1:c1:42:a7:81:9b:0e:e6:
6b:2b:8a:59:a3:ba:27:d7:0e:6c:11:0d:2e:c0:f4:db:e7:0f:
77:ad:91:7d:54:d3:2d:49:1c:92:74:38:5f:32:23:5c:a2:1e:
40:28:3a:35:fa:d5:94:57:75:07:d4:d3:b2:cf:ee:e9:71:79:
2f:13:14:b0:78:61:b6:5a:1a:70:22:78:43:7f:d4:85:ac:15:
07:ef:6d:fb:67:4c:a9:34:92:b3:5b:d4:3b:a9:b8:88:f7:ff:
33:cb:a5:5a:ee:15:72:2d:db:c8:b3:5f:42:35:f5:31:63:75:
b8:21:7a:ec:05:6b:42:8f:86:df:62:c0:37:b6:27:12:88:c0:
51:45:ef:d8:a1:2f:5d:bb:c7:d7:87:97:ba:62:0d:12:5b:6d:
9a:88:89:84:15:1a:95:65:df:48:df:a9:02:ec:92:40:f6:74:
74:90:e0:12:be:db:df:00:87:19:b9:4a:84:57:05:c6:7b:ef:
89:30:4d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:25 2025 by rpki-client