Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8c59906-4be6-3563-ba74-31f368f7a452.roa
File: f8c59906-4be6-3563-ba74-31f368f7a452.roa (raw, json)
Hash identifier: Qe5kjDankxLDMG13jf62aovNMtdDz2Ci5xwIbvLCdPo=
Subject key identifier: 74:C7:3D:37:42:EB:3A:05:FB:20:CC:6B:8A:E9:04:7B:BA:3A:1B:2A
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848D82E3CF8A511458F3989B040
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8c59906-4be6-3563-ba74-31f368f7a452.roa
Signing time: Tue 11 Feb 2025 06:34:39 +0000
ROA not before: Tue 11 Feb 2025 06:34:39 +0000
ROA not after: Mon 12 May 2025 05:34:39 +0000
asID: 43260
IP address blocks: 45.74.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 06:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d8:2e:3c:f8:a5:11:45:8f:39:89:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 11 06:34:39 2025 GMT
Not After : May 12 05:34:39 2025 GMT
Subject: CN=85df59ac-fb90-41a0-878b-32e5a5b2721f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2b:77:0e:60:f5:48:20:86:af:f2:1c:ef:d7:
87:91:45:a1:76:8b:61:f8:46:a9:d9:e3:1e:e5:2b:
b0:28:7a:fe:9e:19:6c:c5:c7:6f:89:76:f5:67:2e:
97:e9:8d:38:64:44:aa:a1:76:69:43:8f:1f:77:61:
3c:c2:50:e0:bc:c4:42:71:f1:d3:cf:9f:fc:5d:ef:
27:b7:57:f6:77:57:d3:92:08:02:69:81:58:16:fb:
d4:4f:cc:d0:28:91:e7:64:8f:49:bc:4c:a2:79:7f:
72:fc:a6:5d:03:5b:f8:00:5b:d2:a7:20:84:bc:13:
24:f7:e9:58:79:b9:43:34:e0:ca:5f:a7:12:1a:95:
8a:68:50:9b:08:c6:d9:8c:ef:84:a3:ac:58:35:7a:
9b:8a:b5:a1:74:3e:ef:91:87:43:36:f3:2a:27:02:
ee:40:e7:b8:5e:25:f0:bd:03:c9:25:27:6a:89:a5:
67:c6:a5:dd:50:c5:77:06:32:5f:25:25:1b:1b:09:
e0:32:f7:4d:c4:8a:00:fc:62:98:7b:87:d7:ad:0a:
6c:c6:1f:8f:8e:5b:c3:fb:73:d5:93:39:b1:41:ce:
aa:ec:f7:48:57:7e:bd:a7:69:22:ff:2d:ea:96:82:
93:1a:2a:2b:d1:98:6a:bb:b3:55:ac:33:28:cc:db:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C7:3D:37:42:EB:3A:05:FB:20:CC:6B:8A:E9:04:7B:BA:3A:1B:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8c59906-4be6-3563-ba74-31f368f7a452.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:e1:3e:c1:7e:52:df:20:29:f2:6f:73:23:c4:df:ec:26:d1:
03:95:6b:fb:f8:05:f5:52:1c:2c:7d:a0:1e:2e:2d:b5:96:45:
2e:75:fd:4a:20:b6:9d:34:02:8a:a4:5f:7a:15:d0:3c:c9:c3:
79:aa:9e:d6:31:f7:2a:5a:91:fd:be:2f:b1:e4:72:4a:0b:e1:
9c:f0:2e:cc:d1:58:3d:4c:14:65:9e:0a:b3:6f:27:6b:bd:e4:
bf:db:e2:76:8d:b9:b3:a0:d1:1f:f1:15:35:34:17:dc:e8:e4:
86:65:27:c7:bb:5b:cf:56:44:a8:c9:c8:b3:13:f9:3d:db:57:
9e:36:c6:c3:da:04:6b:f3:9e:15:6b:ea:c0:fc:c3:1b:4a:70:
15:6c:f6:01:41:5e:89:44:59:9a:96:6d:86:4b:db:b5:77:f1:
50:5a:a3:1b:e1:bc:e9:7a:af:d6:97:43:7d:c9:0b:68:e0:fd:
f5:37:85:a1:1f:10:06:a1:be:88:39:2e:93:8e:2e:b8:4c:95:
c2:9f:e4:19:ec:eb:41:0a:13:35:f4:e8:81:b2:87:d2:0d:5b:
69:33:42:4a:0f:e6:cd:a1:ed:12:8e:b2:06:08:df:cf:f9:2e:
48:a5:50:be:be:34:64:f5:cc:ed:bd:e0:01:e3:2f:01:10:ad:
0e:f7:85:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:02 2025 by rpki-client