Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28255574-3062-374c-b764-2c975ecde283.roa
File: 28255574-3062-374c-b764-2c975ecde283.roa (raw, json)
Hash identifier: OCgez9rjRRdr/lPDYlJ9w2ZB3O2iHqirpd8JsjL8D/Y=
Subject key identifier: D2:F7:42:08:88:EC:6E:7E:15:A1:64:D2:9A:3F:6B:30:10:45:D1:82
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285847CFD4D77F35A068B84085D340
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28255574-3062-374c-b764-2c975ecde283.roa
Signing time: Fri 08 Nov 2024 14:00:39 +0000
ROA not before: Fri 08 Nov 2024 14:00:39 +0000
ROA not after: Thu 06 Feb 2025 14:00:39 +0000
asID: 9009
IP address blocks: 45.74.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 10:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:d4:d7:7f:35:a0:68:b8:40:85:d3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 8 14:00:39 2024 GMT
Not After : Feb 6 14:00:39 2025 GMT
Subject: CN=378c49f9-6f3e-4b7c-adb3-360104209980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:59:85:8d:2c:83:7b:bb:f6:24:71:0c:fc:
8f:b4:6c:67:ee:a1:bd:f5:33:c3:1a:a8:ac:a3:4a:
fc:50:2c:fa:19:2d:ab:aa:ca:80:db:24:c5:00:29:
55:fa:16:11:50:62:da:71:14:85:7e:e2:1a:17:77:
4b:c9:53:85:5c:c4:e8:f0:b2:ff:03:d3:60:18:02:
1d:bf:1f:a0:cc:c4:ee:ed:85:c4:d1:06:50:5a:af:
3f:1e:4a:80:d9:84:9f:9f:c4:ae:a3:e4:d3:59:8a:
77:b9:ed:0f:cc:6e:4c:ab:db:c9:8e:27:76:a1:ec:
f2:60:19:91:7d:98:e2:be:a3:0a:ae:28:41:1b:20:
16:93:0f:97:b1:b7:eb:0b:e6:82:dc:9d:88:99:b0:
1c:86:51:61:62:45:54:ad:e6:8b:e6:d8:4e:d1:1e:
d0:e5:bc:90:58:ad:0f:93:06:ff:f3:1c:63:b1:a1:
49:bc:f1:f3:3f:23:ba:60:62:0e:ce:af:fd:b1:57:
e7:a8:f9:63:da:66:8d:b5:11:c8:61:b8:15:11:3d:
d9:d2:76:31:02:28:68:16:24:2a:98:1b:0e:88:2b:
b1:e8:ea:d9:5a:aa:29:5b:9c:79:5c:57:2c:b5:94:
c6:93:a1:4e:c8:b1:24:00:3a:2b:b5:ca:02:7a:20:
58:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F7:42:08:88:EC:6E:7E:15:A1:64:D2:9A:3F:6B:30:10:45:D1:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28255574-3062-374c-b764-2c975ecde283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:ad:28:90:69:4c:ce:50:01:69:fc:a3:a8:34:ae:0c:8b:ce:
8a:31:d8:e1:c2:a0:fe:e8:d7:32:3d:e0:2a:bf:da:5a:c4:22:
2b:24:b8:63:6a:d6:1a:33:54:32:b8:c2:d9:72:62:33:f3:81:
72:34:67:0d:c6:70:55:45:07:b3:e5:29:48:d4:ad:e2:fa:f3:
02:6a:af:ae:e7:d1:a5:41:59:f1:cb:42:c5:7c:4d:ac:26:10:
ef:b7:20:f4:ef:eb:eb:31:8b:2d:5d:d4:1d:91:46:bf:01:92:
d6:4b:a5:33:77:50:4e:a4:b1:33:5a:b8:39:f7:73:73:5d:4c:
fe:2a:3b:49:09:ac:21:96:f5:78:21:ec:cc:5a:d4:9c:29:92:
e3:2d:f6:37:58:01:2a:df:46:17:69:d5:ff:b5:d3:c0:62:95:
43:bd:71:86:14:94:5d:42:6d:f1:db:20:be:99:ab:0e:f7:12:
82:af:66:7c:66:0b:1d:09:c4:18:b9:19:4d:8c:56:1a:b3:c7:
9c:47:9d:8e:47:c0:db:0d:45:c0:3a:01:e0:cd:8d:3e:96:18:
4d:78:f9:5b:78:6b:59:e1:eb:43:66:a9:4b:65:89:a2:30:59:
01:f0:18:60:22:bd:a2:1f:61:f7:45:b8:41:24:23:82:29:0b:
af:d0:f7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:48:22 2024 by rpki-client on console-ams.rpki-client.org