Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/cbfb2a04-a2c6-3def-8f38-96f566a95801.roa
File: cbfb2a04-a2c6-3def-8f38-96f566a95801.roa (raw, json)
Hash identifier: j4Tw8gNFKu/6Hgc7qrBmhITdJnJFWj7RIiuUCGuqAQo=
Subject key identifier: B5:19:F9:31:EA:C0:7A:FD:2F:CB:49:7E:B2:E5:1F:E1:87:A3:FC:0D
Certificate issuer: /CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
Certificate serial: 010D0C9F432858494BA4F53F0CCBF4E0F5367E40
Authority key identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/cbfb2a04-a2c6-3def-8f38-96f566a95801.roa
Signing time: Mon 24 Mar 2025 15:11:49 +0000
ROA not before: Mon 24 Mar 2025 15:11:49 +0000
ROA not after: Sun 22 Jun 2025 15:11:49 +0000
asID: 31852
IP address blocks: 2.57.166.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 25 Mar 2025 00:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:a4:f5:3f:0c:cb:f4:e0:f5:36:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
Validity
Not Before: Mar 24 15:11:49 2025 GMT
Not After : Jun 22 15:11:49 2025 GMT
Subject: CN=f15df484-6145-49bf-bace-07fc6fc5c024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:42:d2:39:74:12:20:36:12:8d:60:67:e5:
02:10:bb:62:33:f6:e8:a8:a4:aa:20:d5:4e:6b:71:
a5:89:bc:91:46:6a:f0:b3:a2:8e:fe:3e:da:00:ca:
69:11:3e:c6:ba:53:9d:99:3f:3f:ac:20:c2:48:f1:
d3:15:92:f6:9e:11:ad:cf:a0:91:fa:d9:77:47:93:
12:a2:f9:2a:c6:5f:72:21:a9:76:c8:0c:6d:72:c6:
a3:9c:ca:77:0b:37:a9:5b:37:e8:d5:88:11:1c:71:
cf:21:75:10:79:90:29:0f:35:47:30:04:bc:7f:e0:
4e:4f:e4:c5:89:57:f3:60:72:76:de:ab:21:09:e4:
42:d8:18:49:92:c7:26:12:c1:da:94:67:0c:31:1f:
cd:72:1a:ba:5a:a4:cb:64:6c:45:bc:bc:9c:d9:df:
93:0f:94:7c:a8:e5:4d:f2:67:2c:11:66:ed:9b:1f:
68:67:d8:30:67:57:30:8d:99:25:5b:c8:24:e0:5e:
81:22:df:62:46:c5:72:a5:cf:27:f2:26:62:4c:fc:
ff:5d:03:04:f3:78:7f:61:ba:4a:8d:ba:8b:79:2b:
a8:f5:6c:67:04:7a:3a:d0:d3:d4:c9:bc:83:ba:f8:
98:44:bf:7e:b5:07:29:54:bb:2c:6b:49:c5:23:e1:
a3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:F9:31:EA:C0:7A:FD:2F:CB:49:7E:B2:E5:1F:E1:87:A3:FC:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/cbfb2a04-a2c6-3def-8f38-96f566a95801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl
X509v3 Authority Key Identifier:
keyid:4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
sbgp-ipAddrBlock: critical
IPv4:
2.57.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:d7:bc:75:11:8e:dd:4a:b0:e3:66:00:1e:26:54:5d:fd:47:
13:df:24:21:b6:1c:2b:7b:e3:e0:71:20:a4:54:46:22:79:22:
5f:3a:19:de:1b:a8:6c:be:0c:a5:dd:fc:f2:27:c1:58:18:dd:
0c:89:ec:0b:6c:a3:f1:0d:2f:b8:35:46:7e:17:62:a8:62:e8:
e3:72:6a:7a:33:e8:22:7a:60:09:2a:6b:f2:e5:8b:c5:87:c8:
cd:2e:ce:79:d4:c7:0b:06:db:32:ea:36:54:02:bf:b7:13:c5:
02:09:dc:5e:ab:79:31:49:3b:a4:44:be:7d:96:f0:e4:b8:7c:
d1:1d:62:60:6b:01:f4:3d:92:51:f6:f4:cc:38:24:27:c3:93:
8f:87:a0:b2:9c:e2:86:4d:45:2f:f5:6f:ed:52:4b:67:61:6f:
d2:90:df:d8:e7:56:8c:7e:e7:d0:12:30:52:e0:c2:02:3d:44:
bc:59:23:a9:71:7d:78:c3:b2:a1:1d:28:a8:65:5b:7f:b6:46:
74:aa:dc:53:cb:ea:be:0b:be:72:0c:36:e4:92:38:a1:f3:02:
1d:90:dc:ff:2b:44:d4:ea:8e:fb:2f:5b:d9:80:46:24:59:6b:
9f:5a:d7:79:0a:59:5f:d2:cd:34:f8:59:82:f1:eb:5d:e8:aa:
ca:14:02:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:08:24 2025 by rpki-client