Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/4648e65d-5610-3f45-bbc4-c1e11f266a12.roa
File: 4648e65d-5610-3f45-bbc4-c1e11f266a12.roa (raw, json)
Hash identifier: 4FNMYWFqfpm31rgY+R4BZQ5/IQcIVdMlhQS9ygM0d+c=
Subject key identifier: 56:3D:E8:71:F6:C9:91:95:6A:63:B8:78:28:97:54:F4:B7:5E:A2:10
Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial: 010D0C9F4328584894A5EF24C4EEF2349C000C90
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/4648e65d-5610-3f45-bbc4-c1e11f266a12.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 8075
IP address blocks: 152.38.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 22:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:ef:24:c4:ee:f2:34:9c:00:0c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=3babc99e-da1c-4f46-9073-b434a884bce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b7:88:41:78:5a:de:71:09:fd:d1:44:92:20:
18:29:9b:5d:fe:76:41:77:d8:df:75:c1:7e:a9:2b:
1b:d2:3f:60:e7:bd:0b:b8:de:62:6e:f8:84:00:9f:
ba:e2:14:44:3c:f7:98:d0:1a:6b:ad:18:61:56:48:
21:15:17:96:d7:47:0f:ae:27:b5:de:d4:bb:b1:65:
96:d6:42:82:dc:65:6d:04:12:18:16:cc:16:00:a2:
f4:e6:45:d6:a5:85:86:dd:d1:5d:68:0c:55:0a:f3:
12:4a:9e:9a:e6:15:fc:7a:6f:23:57:47:f3:4f:2b:
9d:52:62:92:3c:9e:8c:a8:48:53:80:e2:3a:87:0a:
45:b8:77:88:8c:22:fd:42:2d:99:30:fa:ec:f8:2c:
6c:d5:7b:3a:96:e8:d2:e2:9b:ea:bd:f2:9f:49:21:
b7:d4:cc:72:0d:f6:0b:61:e2:aa:5f:de:15:b8:45:
96:53:8d:bc:7a:8d:75:c0:76:6d:34:ed:09:fe:59:
cd:a3:b1:c1:cb:de:9d:27:58:a0:54:45:b3:1a:9d:
08:47:5a:11:80:c0:bb:0a:97:a9:d4:52:9b:15:d5:
99:94:ba:bc:13:01:6b:32:ca:ec:73:c2:b0:f0:7c:
63:3c:05:9a:49:2b:1d:d1:ed:69:a8:2f:8b:9c:90:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3D:E8:71:F6:C9:91:95:6A:63:B8:78:28:97:54:F4:B7:5E:A2:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/4648e65d-5610-3f45-bbc4-c1e11f266a12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
X509v3 Authority Key Identifier:
keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
sbgp-ipAddrBlock: critical
IPv4:
152.38.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:0d:f4:34:fa:ea:33:6c:6a:e4:35:c4:46:4b:0b:58:71:6f:
72:97:f2:9d:80:a9:57:f5:74:10:ed:70:4e:4a:d0:94:27:b4:
1f:8d:aa:4f:6a:5c:7e:33:52:9e:25:78:d2:61:bd:91:9d:d1:
69:80:a9:e2:5e:65:ae:89:27:c4:5d:52:04:87:f3:79:fe:4a:
86:3f:d6:50:c0:76:35:c1:27:6d:8b:ae:7c:bf:9d:33:4a:53:
63:6f:69:37:d3:cc:67:52:44:d5:56:a2:4d:43:75:e4:e2:92:
fa:26:5f:d7:05:5f:dd:df:d2:37:0e:cb:f1:30:0a:d4:af:7c:
9c:23:61:13:88:97:44:4a:cd:d1:cf:57:6c:45:ff:1c:91:39:
9a:cf:7a:3f:50:00:d4:0b:47:9c:af:74:5c:de:23:aa:ff:b5:
c3:96:45:96:8f:bf:da:ef:ca:70:87:28:50:c9:2d:f9:26:a0:
c7:3d:76:b3:dc:05:bb:87:0f:f1:93:ce:9f:84:8c:a2:be:24:
d1:ff:c3:da:46:5a:f0:4e:10:e0:87:9f:37:a5:4e:c6:76:85:
44:8e:58:1a:41:23:b0:3b:cd:ca:1d:67:0c:68:f8:90:8d:2f:
a3:9a:84:4a:54:7e:34:c9:fa:05:9b:da:1e:6d:2e:aa:04:e9:
9e:a5:32:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:03 2025 by rpki-client