Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/275aff02-7a3c-3827-9684-4d7ed1fc82ee.roa
File: 275aff02-7a3c-3827-9684-4d7ed1fc82ee.roa (raw, json)
Hash identifier: sPW2iPMaaX6O4liWFP25iV6kA7hEnOM5Ip8v3xJh1x0=
Subject key identifier: A5:38:52:40:2C:1B:29:7E:34:9A:4C:7A:BB:60:AB:1F:73:9A:B0:F0
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285847EC1BE75F7370852C92DA0900
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/275aff02-7a3c-3827-9684-4d7ed1fc82ee.roa
Signing time: Mon 18 Nov 2024 17:06:57 +0000
ROA not before: Mon 18 Nov 2024 17:06:57 +0000
ROA not after: Sun 16 Feb 2025 17:06:57 +0000
asID: 222
IP address blocks: 149.112.154.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Dec 2024 15:35:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ec:1b:e7:5f:73:70:85:2c:92:da:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Nov 18 17:06:57 2024 GMT
Not After : Feb 16 17:06:57 2025 GMT
Subject: CN=3f654fea-8bcc-4588-a1c5-d77154d9c240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:fe:3a:3d:46:7f:64:fa:ec:12:71:60:eb:
0d:7c:4a:22:4a:ab:30:1c:bb:d3:b4:2f:d7:ad:1c:
42:e7:4e:ef:65:4a:3b:f3:d5:70:4d:d2:b8:45:4d:
56:96:bb:a8:4f:3c:32:e8:1e:8a:3e:9e:57:b8:45:
43:8e:2a:98:ee:9d:58:06:7b:35:23:76:dc:67:ba:
15:81:49:d7:b3:c9:2a:e5:1e:ec:44:b1:a7:2b:33:
cd:b9:9b:9d:28:22:09:8a:26:ac:20:1c:3c:2e:65:
1b:83:35:25:5d:ad:78:c4:35:07:90:d7:68:f6:30:
a5:13:66:69:ff:db:57:ea:67:d8:d1:14:4c:88:83:
ce:53:97:fb:4b:5b:8b:5f:76:ba:e5:93:89:54:e9:
39:30:8f:b1:60:ad:c8:47:4d:97:69:47:88:bf:de:
ad:af:d7:f2:10:da:6b:2a:e3:ab:92:70:3f:dc:3a:
b7:91:fc:93:55:26:34:4f:cf:5b:39:af:d8:6e:a5:
48:ed:8f:4c:93:bd:0a:27:7e:04:80:cf:bf:bc:c1:
a8:aa:e0:80:9c:72:5b:7c:3b:1d:db:62:15:a9:49:
4b:0f:a1:7f:f1:e3:ab:98:64:cc:e8:c1:e9:1b:98:
0a:ac:52:8b:b4:98:5a:dc:24:11:dc:e7:2a:4b:40:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:38:52:40:2C:1B:29:7E:34:9A:4C:7A:BB:60:AB:1F:73:9A:B0:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/275aff02-7a3c-3827-9684-4d7ed1fc82ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:a8:4c:ae:4a:76:61:17:8d:ff:39:85:16:08:b1:99:46:09:
65:23:7a:e0:9e:b7:02:c5:a2:f1:f4:ff:5f:b5:4e:5e:1b:ef:
e2:ab:ff:08:63:99:62:58:02:a1:22:79:8e:d8:ed:30:0a:da:
f5:c8:21:a2:03:3a:ff:aa:8a:63:58:6f:e2:29:6d:ac:5b:0e:
04:c3:4c:68:46:7d:82:40:c0:a2:24:20:57:4a:ea:bc:ec:04:
2e:31:9f:42:37:8c:22:a6:a0:31:61:7e:af:ca:2f:42:87:7d:
7e:25:e6:69:02:c8:d7:7f:db:97:c5:17:7e:3f:ce:55:b7:49:
21:85:aa:e0:8f:20:6c:bb:5d:82:5b:f8:2e:88:3c:6f:6f:65:
12:ab:dd:1d:06:4b:70:e4:62:81:2b:6f:82:ca:52:91:ed:72:
f9:b4:f6:57:38:e9:a5:5e:f0:d3:f0:1a:ce:9e:14:25:45:d6:
f4:50:2c:ca:8b:47:eb:24:92:db:f7:88:b8:bf:3f:2b:9a:85:
93:00:03:d0:24:b3:a6:5f:36:d1:36:09:c0:a4:df:b4:30:85:
45:d4:fe:89:90:59:57:1a:d7:68:e8:85:ca:ee:8d:84:7a:4d:
36:46:86:1b:12:0f:49:9a:3c:54:b4:f4:bf:f7:3e:df:65:36:
cc:cd:fd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:26 2025 by rpki-client