Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f651a564-d188-3e5f-a92c-efa3b479a423.roa
File: f651a564-d188-3e5f-a92c-efa3b479a423.roa (raw, json)
Hash identifier: c4wHnqIXxyvpQvnWou2gI8MZJNgUtfP8Pvm/Bb4m8kM=
Subject key identifier: 44:DE:B3:D5:F6:AD:51:EC:7E:CA:7C:1B:59:73:73:D9:DD:6B:34:22
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848C274DC3FD3381C93845D4080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f651a564-d188-3e5f-a92c-efa3b479a423.roa
Signing time: Mon 03 Feb 2025 11:49:10 +0000
ROA not before: Mon 03 Feb 2025 11:49:10 +0000
ROA not after: Sun 04 May 2025 10:49:10 +0000
asID: 43260
IP address blocks: 206.123.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 07:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:74:dc:3f:d3:38:1c:93:84:5d:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 3 11:49:10 2025 GMT
Not After : May 4 10:49:10 2025 GMT
Subject: CN=77fe3072-d85c-4d3f-a865-23a33a61d0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:9f:fe:54:3d:e7:0d:e5:6a:91:84:a6:fa:
06:60:41:e3:9b:f9:8b:51:f1:a0:d9:3f:49:f4:bb:
33:3b:46:65:db:d0:f8:af:45:b3:a4:b1:02:55:ac:
bf:00:9c:df:75:96:93:00:c0:24:9d:d3:dc:ef:d6:
34:18:c9:0c:d1:48:db:0b:88:4e:49:ab:2b:12:ea:
44:b4:78:86:e8:e3:21:64:40:dd:db:c3:54:57:85:
59:df:8a:1b:40:6c:2b:40:e7:a6:f5:dd:63:13:1f:
43:a8:19:00:7a:09:de:df:e3:ed:36:5b:7c:af:7e:
f2:d4:02:c6:e7:03:be:12:f1:ab:52:48:7b:a8:e3:
cc:87:4d:e9:e8:21:f0:19:9c:13:85:81:d2:43:b6:
c7:f2:01:33:c5:fe:35:72:75:70:7c:de:73:91:38:
bd:79:a3:9e:06:ee:69:8f:3a:65:9c:75:72:0a:2b:
83:f0:a0:4b:38:f6:eb:d7:91:cf:28:95:ad:73:c3:
a3:0f:48:31:f4:b5:c8:05:a0:cf:3f:37:18:a8:70:
20:29:05:d0:99:fd:a9:23:fc:ca:7a:ff:fb:f8:95:
a9:06:32:a8:1b:4f:43:c4:ac:e8:94:0f:b5:9f:ba:
6a:e5:17:d8:00:31:c0:25:31:0c:36:1d:c4:29:a2:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DE:B3:D5:F6:AD:51:EC:7E:CA:7C:1B:59:73:73:D9:DD:6B:34:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f651a564-d188-3e5f-a92c-efa3b479a423.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:a7:75:fc:14:f3:f0:c7:20:89:d3:38:3a:72:6e:46:5c:7d:
9b:3f:b8:01:06:b6:05:39:82:8f:ed:c4:65:c5:29:d9:77:0a:
9c:ac:19:88:ef:fa:9c:ce:4f:82:1f:02:65:11:94:83:c2:ef:
f7:52:d8:1a:7d:f3:19:f6:32:6b:0c:88:27:97:19:dd:a6:14:
13:26:b5:fa:bf:8c:50:d2:11:0a:9f:cc:90:0f:49:6a:29:23:
c4:b6:1b:80:18:7b:62:d2:51:24:a1:8d:2e:90:28:bd:56:f9:
a9:68:bf:cd:ea:10:fb:9f:b8:90:52:cd:2f:bc:ac:18:79:b7:
e2:3d:25:00:a6:27:85:da:84:0b:50:de:9e:0d:45:85:dc:4d:
25:e5:d1:44:a0:55:f2:db:d5:9d:5b:2e:ee:0d:7e:0c:c7:a1:
16:25:96:c4:51:bf:ed:45:17:0e:7c:fe:4c:95:08:0a:dd:3a:
07:b2:a2:61:3c:c9:54:09:88:8e:43:56:89:4f:94:52:e0:ca:
5d:3a:9d:c2:65:ee:82:46:c6:aa:5b:59:d3:20:90:7a:b5:32:
98:91:09:e7:1a:ac:98:30:9d:1c:ea:76:ae:f5:b1:ee:29:81:
ac:c1:c9:a7:ba:48:f6:ee:33:70:11:3e:d5:5a:a2:be:9a:92:
f7:33:ad:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:49 2025 by rpki-client