Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c23fac61-23ae-36ec-9ce0-d4fe3dc63420.roa
File: c23fac61-23ae-36ec-9ce0-d4fe3dc63420.roa (raw, json)
Hash identifier: Oj7NnM0xzh28/ldANEw1c1y5UHF8mS21/aGDHhid1sI=
Subject key identifier: 35:97:13:FB:05:54:1C:54:82:31:F0:3E:0C:EC:B7:DE:13:86:AC:58
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848A930669A5CC029FBC77AEC80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c23fac61-23ae-36ec-9ce0-d4fe3dc63420.roa
Signing time: Sat 25 Jan 2025 10:36:01 +0000
ROA not before: Sat 25 Jan 2025 10:36:01 +0000
ROA not after: Fri 25 Apr 2025 09:36:01 +0000
asID: 329007
IP address blocks: 45.74.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 17:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:30:66:9a:5c:c0:29:fb:c7:7a:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 25 10:36:01 2025 GMT
Not After : Apr 25 09:36:01 2025 GMT
Subject: CN=932ee58b-9132-43d6-9eb9-7046eeb27b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:e5:57:c6:a1:1a:6c:f1:f6:77:56:d0:d7:
45:16:8f:98:47:ba:61:c3:40:41:2e:0c:41:90:0d:
b5:b9:13:e5:7f:78:d6:19:f2:ad:b7:90:9d:96:be:
66:a6:27:38:2b:c0:9c:41:b2:a4:e8:3f:60:2a:64:
7a:7a:c7:92:f3:49:df:36:86:04:1e:cb:c5:89:57:
49:bd:67:d2:e7:de:16:fb:94:a7:82:e2:3e:e1:24:
24:c0:5c:80:43:ec:68:9e:0d:3e:01:37:0f:10:d1:
19:29:75:20:98:ab:7f:db:29:91:bf:61:6c:42:93:
3f:a0:4d:62:37:bc:56:d1:18:a4:eb:fd:b0:ad:e8:
db:ba:19:96:73:cf:91:17:6b:77:97:0c:ef:cc:3d:
23:d3:fd:b2:a2:ff:4e:08:a0:92:ec:08:a7:ca:ee:
c0:c9:b4:ad:f0:29:e3:f0:92:78:de:7f:8b:7d:cc:
6e:19:d6:6b:d3:ed:56:35:fe:46:64:35:e8:21:4e:
9b:2f:f6:f0:61:23:9f:59:96:f4:c4:da:c1:f0:f4:
c0:2a:bb:04:85:5d:01:fd:13:2c:ea:52:5b:89:5c:
82:db:e6:90:8c:29:57:2c:e9:1b:4f:cf:a9:34:fc:
5a:68:19:47:ac:04:aa:2a:1d:e4:ff:ea:19:bd:ab:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:97:13:FB:05:54:1C:54:82:31:F0:3E:0C:EC:B7:DE:13:86:AC:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c23fac61-23ae-36ec-9ce0-d4fe3dc63420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:a6:56:dd:ed:30:47:a3:ff:d4:1d:75:42:89:d6:61:07:9e:
47:3b:0c:cf:cd:bd:91:ab:8c:2e:41:30:03:64:38:92:77:9f:
b1:c4:66:b6:c1:2c:94:23:4e:b1:07:1c:ba:e8:d9:80:79:98:
51:a5:2f:82:83:7a:4f:00:e9:ac:42:08:40:33:07:35:f5:87:
17:0c:fc:fc:27:9e:a7:17:e5:d9:30:67:20:e3:19:cb:65:f8:
ff:d6:36:7e:f7:47:a3:7a:db:58:18:40:5a:8d:2f:8a:f2:da:
3d:29:7e:c4:21:3f:f8:f2:ed:d8:4f:55:a2:3d:ca:78:8f:3e:
2a:ca:be:e6:43:af:8d:e2:b7:c7:e5:e4:c6:1a:fe:9d:bf:2c:
fe:bd:03:18:64:60:c3:0a:41:a6:93:4b:51:66:cd:9e:cc:69:
92:f7:98:3c:f1:7c:28:65:9b:66:41:21:79:16:5a:0c:2b:5f:
66:c0:08:52:d6:60:58:35:d0:ea:37:ce:e5:6d:20:ec:f6:f8:
e2:89:f1:28:b6:bc:2e:a9:33:f2:f6:d6:41:08:55:75:08:8b:
84:e1:70:cc:2f:4f:7f:0b:d6:ec:fb:3c:27:bd:28:e2:58:9a:
6c:05:8f:40:34:36:4e:0c:31:b5:79:e7:71:c4:c3:c0:c3:4d:
50:82:df:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:07 2025 by rpki-client