Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1f2bf482-0ef9-3f89-bc79-9276e7f06454.roa
File: 1f2bf482-0ef9-3f89-bc79-9276e7f06454.roa (raw, json)
Hash identifier: H29I3qT9PAk+q/L9/cMaqhGtro+HmCPKuv7sd+w2Zws=
Subject key identifier: 80:13:89:8F:CF:94:1E:91:79:C4:C1:15:D2:33:05:66:CE:94:6D:9E
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489DA68F3AA8F9D56BAAF95D00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1f2bf482-0ef9-3f89-bc79-9276e7f06454.roa
Signing time: Tue 21 Jan 2025 07:24:24 +0000
ROA not before: Tue 21 Jan 2025 07:24:24 +0000
ROA not after: Mon 21 Apr 2025 06:24:24 +0000
asID: 329007
IP address blocks: 104.250.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 11:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:a6:8f:3a:a8:f9:d5:6b:aa:f9:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 21 07:24:24 2025 GMT
Not After : Apr 21 06:24:24 2025 GMT
Subject: CN=f97b9956-564e-4b33-89ab-6fbf123313ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:6d:d9:e5:c2:da:b6:12:a5:b6:dd:d4:4a:
ed:2f:db:33:5a:54:77:03:77:2d:b2:78:a6:56:fd:
8f:e0:a9:1f:2b:d1:19:67:7d:0f:b7:1a:4e:3e:10:
2a:54:98:03:7f:19:87:79:8f:b4:6d:56:ea:13:23:
bc:a8:1b:ed:3d:9b:21:ca:00:b6:60:dc:6e:c9:45:
f4:c5:69:21:54:64:9f:51:59:43:e7:e7:9b:96:07:
40:14:16:b0:87:2d:6a:8a:0a:68:30:75:07:40:0c:
65:23:ba:cf:75:08:7a:aa:04:c8:9f:cf:6a:ab:03:
ae:bc:cc:7c:96:6a:53:b0:c4:5a:c9:94:a3:80:08:
42:1a:1e:f4:d2:1c:07:de:e6:af:ee:c6:c1:6e:c8:
66:94:25:53:d4:00:63:7a:5e:aa:5f:7e:e9:d9:15:
24:e3:e9:52:9c:90:d8:39:5c:c0:0f:8f:0f:a4:69:
8f:a2:ff:64:4e:d3:b2:d8:17:81:91:da:a6:f2:4e:
e2:12:b8:6f:2c:9e:62:7b:8a:c5:a3:f7:14:c3:d0:
a8:c9:54:21:85:57:8e:24:78:60:40:82:73:f9:b9:
c8:cf:47:0e:ac:11:d1:74:9e:14:e3:63:d5:4f:23:
e7:35:66:02:3c:d9:ef:7a:3a:37:33:4d:c6:96:d6:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:13:89:8F:CF:94:1E:91:79:C4:C1:15:D2:33:05:66:CE:94:6D:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1f2bf482-0ef9-3f89-bc79-9276e7f06454.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:6f:f3:07:8b:fc:9d:97:da:06:b9:fe:cc:07:24:79:0f:f4:
c3:39:7f:c2:6e:6d:1a:28:3a:d6:d4:48:c8:1d:91:51:37:30:
15:1e:22:1f:ed:c0:21:b6:c4:e5:cd:97:c4:68:8c:9b:e2:d8:
8f:dc:3f:94:bd:6f:0c:7d:f6:5d:03:50:d2:b1:c9:bd:75:51:
a1:38:b4:5c:1c:ed:8c:fd:3d:1d:f6:d1:66:54:39:ab:e3:a7:
0b:17:c1:0c:df:06:d5:92:23:46:bd:bb:cb:10:0d:3a:c6:b9:
b1:69:65:82:87:f0:05:d2:2e:f5:ff:32:67:da:6f:5c:e7:e3:
96:5d:3a:70:28:f7:f0:fd:3f:e6:bd:df:70:3f:2f:a6:30:14:
6d:16:91:65:1a:8d:8d:94:ba:38:3a:bc:72:6c:30:a6:d2:06:
bb:ad:9c:96:21:ca:a1:d9:45:ed:d2:26:bb:fa:69:5e:fa:7c:
94:5f:5a:d8:3c:13:0b:35:ab:03:60:07:03:ec:2e:7d:a4:5a:
a7:a8:1d:91:e6:92:a5:1f:ea:38:29:a5:f2:a0:f1:e0:aa:83:
37:b1:d7:1f:9b:75:84:77:5a:3b:80:db:0f:47:4b:f1:b5:d4:
10:f8:f6:e6:cd:96:63:fb:f9:ec:c5:75:34:a4:ee:8e:27:f6:
89:c2:c7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:49:47 2025 by rpki-client