Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/8da573a4-37e0-31c7-a2b2-75913180a533.roa
File: 8da573a4-37e0-31c7-a2b2-75913180a533.roa (raw, json)
Hash identifier: cHe6sQdqDJvl+8mQw86uNRZsjR4/7NOLRq640SLGhuU=
Subject key identifier: 43:8A:C9:38:6B:1E:08:8D:D5:77:E1:69:32:9C:8A:EA:66:63:1C:E8
Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial: 010D0C9F4328584851A57E321C104F4BBDC20380
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/8da573a4-37e0-31c7-a2b2-75913180a533.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 7029
IP address blocks: 209.250.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 05:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:7e:32:1c:10:4f:4b:bd:c2:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=27f5e140-effe-4dbd-bce6-df432208287a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:28:a4:0e:c8:fe:e9:ae:e0:71:cd:30:97:
bf:e8:78:03:de:e9:95:1b:38:05:2d:da:9a:f7:0f:
e1:26:a2:d6:e2:80:eb:cd:28:c4:d7:cb:41:65:8a:
5c:fa:95:47:50:bb:b6:a2:81:4d:63:31:d2:63:01:
90:ae:4b:cd:4c:89:19:81:62:f3:aa:d2:65:eb:2a:
5f:c9:11:9a:da:0f:dc:ed:81:b9:fe:70:3f:dc:05:
66:9a:db:56:95:ac:15:2b:9b:25:fb:f3:71:dd:a9:
8e:c0:67:34:f3:9e:54:01:a0:91:9e:47:ae:14:85:
f7:9f:1b:78:07:ef:27:23:d7:71:c3:f3:2f:12:ed:
c3:f6:63:32:c0:54:2c:9e:2e:04:4d:f4:19:79:eb:
cc:7c:b4:9b:2a:b9:f5:a7:ca:0d:ae:6d:ff:ca:2b:
2e:1e:f5:63:09:2b:c0:8c:cd:6e:41:a0:1f:e8:e5:
e7:3c:ae:16:c7:55:da:d0:1e:4d:81:bb:44:d2:b6:
9c:45:8b:3a:ec:6d:ad:4f:76:3b:f1:54:4c:72:05:
0d:9a:8b:36:d9:1c:ed:d9:00:51:dd:4a:66:86:fc:
fe:17:fd:e7:ae:06:92:ab:df:46:ac:a0:20:7b:28:
aa:bf:b4:25:ae:98:7f:7a:19:0c:96:b0:d1:b5:d2:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8A:C9:38:6B:1E:08:8D:D5:77:E1:69:32:9C:8A:EA:66:63:1C:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/8da573a4-37e0-31c7-a2b2-75913180a533.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
X509v3 Authority Key Identifier:
keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.250.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:6a:18:fa:b5:ae:a6:36:94:96:32:5a:e2:e8:69:3a:5b:e4:
e7:bf:aa:6b:fc:15:9d:36:5b:a9:23:ad:6c:27:04:3f:ce:f6:
c1:20:f3:a2:28:68:84:62:54:54:8a:37:5d:76:e3:b8:0c:11:
7b:51:d2:a1:c2:8a:20:26:d3:5c:df:6b:aa:d3:af:34:22:f9:
0f:bc:52:e4:c1:73:b3:32:18:60:64:6c:cf:a8:5f:c8:24:02:
19:16:d5:f3:6d:13:95:32:63:21:6c:b7:cd:8e:26:a8:5a:56:
d7:d8:d5:b2:c4:52:2e:42:df:da:1e:e0:3c:9a:a4:38:46:93:
05:80:1f:88:06:52:ab:59:62:03:6a:af:76:49:6f:63:ac:6c:
41:53:d5:e3:df:7a:41:de:6d:ef:b0:0b:0e:d8:dd:9c:cf:f8:
ee:33:37:19:c6:da:fb:0d:5f:5e:73:bf:69:72:d4:06:33:66:
34:fd:05:3d:28:33:3a:dd:55:85:7a:74:76:be:7f:14:4d:90:
f3:0c:72:c8:d5:70:f4:31:92:95:c3:d0:a7:9a:6c:f3:62:33:
dd:04:82:e0:03:c8:30:09:d0:13:16:c3:1d:5a:f6:23:e8:58:
97:72:75:31:d7:7b:c5:02:61:cb:dd:1b:ff:c2:09:4d:48:25:
8f:d4:ff:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:05 2025 by rpki-client