Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/de1f69d6-5de2-3fc0-af99-49dcab5deeca.roa
File: de1f69d6-5de2-3fc0-af99-49dcab5deeca.roa (raw, json)
Hash identifier: G0Ozgu4K7z8khDQhUbDS+Koohu17sJQ9vbvJZ+4K6uE=
Subject key identifier: 0E:E5:0F:9E:17:2A:39:83:60:FF:34:17:CE:00:F2:A0:EC:F5:96:B0
Certificate issuer: /CN=78eba1b6-855c-4b4c-8ecc-23746cad1ae9
Certificate serial: 010D0C9F4328584802150A03EA8BCD2A23590760
Authority key identifier: FE:4A:C7:EE:73:45:70:7E:5D:45:E6:3E:B4:00:C9:8F:19:66:3E:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/de1f69d6-5de2-3fc0-af99-49dcab5deeca.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 16509
IP address blocks: 23.247.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 08:24:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:0a:03:ea:8b:cd:2a:23:59:07:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78eba1b6-855c-4b4c-8ecc-23746cad1ae9
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=fbac0302-74b2-486f-a2bf-64e6063644f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:58:ab:e7:d8:4b:46:32:91:a5:92:5e:63:
51:04:3c:f3:1c:90:39:dc:20:57:e4:82:91:c6:a9:
e1:29:43:1e:ad:0b:73:dc:a3:3f:05:4a:81:e5:be:
72:ea:47:2f:6d:b7:b7:c8:c2:06:b4:8c:47:a4:70:
88:ba:a7:9f:87:02:1a:04:4b:90:ee:8f:d4:d8:1a:
5a:59:19:c8:51:93:f4:e0:61:f3:eb:c5:01:1c:31:
87:e3:0c:0b:c0:18:36:a7:e1:26:a5:d9:00:55:6c:
03:ab:e1:98:a5:58:09:4d:12:af:dd:6a:68:73:e7:
9e:5b:97:dd:d0:4c:b4:03:66:e4:98:1f:c8:15:85:
88:3c:39:22:94:01:79:c0:c9:d7:ef:26:2c:9f:31:
9a:8d:ee:c4:bd:39:e1:6e:c4:dc:93:0a:b2:91:ce:
60:c9:2d:cc:90:ee:16:f0:07:0f:d1:d2:31:d5:02:
7b:61:f3:2d:91:8c:26:fa:53:6c:a8:8e:d5:4d:e4:
f1:50:16:ae:7c:b3:0a:de:a3:8a:d5:80:d6:64:cb:
7e:44:8d:39:b0:85:3f:56:be:bc:84:ba:bb:25:bf:
1b:a2:a3:8c:16:56:0b:aa:fe:cd:cf:88:54:ce:3b:
8d:9e:39:b6:12:bb:9a:31:6f:7f:c0:be:0a:cf:fc:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E5:0F:9E:17:2A:39:83:60:FF:34:17:CE:00:F2:A0:EC:F5:96:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/de1f69d6-5de2-3fc0-af99-49dcab5deeca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.crl
X509v3 Authority Key Identifier:
keyid:FE:4A:C7:EE:73:45:70:7E:5D:45:E6:3E:B4:00:C9:8F:19:66:3E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:49:5f:06:b0:4d:d0:ab:ef:9c:4f:81:25:d0:22:69:b5:40:
36:17:b0:b2:7e:a9:c6:b8:23:b4:b3:d9:da:8e:91:b4:0b:8f:
63:c9:8c:cf:da:02:7e:d4:18:74:3a:5d:e3:85:66:ab:7e:bb:
6e:20:e8:3a:68:62:bd:1c:f3:80:ed:c1:0e:45:a1:ad:27:02:
ae:ab:d3:fc:99:a0:da:25:66:db:b5:23:00:b1:e3:d2:1b:cf:
57:9f:62:21:a1:f1:93:31:44:4c:65:43:54:c6:e1:26:bc:82:
c0:ef:41:c7:ac:62:35:c4:81:fd:28:d7:f7:b7:fa:05:6b:d8:
2d:29:24:fc:9f:35:d4:7e:2e:5d:70:8b:a4:53:29:6e:9d:58:
07:2b:9f:83:b9:2b:3d:a3:1e:b3:56:66:91:5d:ca:24:78:91:
05:83:2a:60:a9:11:cc:eb:f6:8f:1f:10:d6:5a:52:95:22:53:
59:7f:44:8a:7d:8a:18:3d:30:2a:a4:fc:84:a5:24:78:ad:94:
e3:f6:7f:c3:1b:74:e8:ee:86:fd:e8:d4:8c:4a:52:98:38:76:
c2:99:e1:36:dc:4c:21:87:d2:38:d3:cb:7b:f1:9d:c3:b0:db:
b6:11:e3:9e:99:20:6f:30:52:47:2a:ce:0a:38:fd:74:ee:97:
51:14:12:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:11 2025 by rpki-client