Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/5335d508-e235-3d9a-bbd5-be196e4a897f.roa
File: 5335d508-e235-3d9a-bbd5-be196e4a897f.roa (raw, json)
Hash identifier: 37f1iQhhit/A7gKXPI0CJyWohA7nctCYhMN4of7map4=
Subject key identifier: 2B:A7:0F:FF:0E:1A:1C:60:A8:E4:C9:C7:27:FF:07:85:2E:B1:67:E5
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285848C36C09E239EB86632D409DC0
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/5335d508-e235-3d9a-bbd5-be196e4a897f.roa
Signing time: Mon 03 Feb 2025 20:07:12 +0000
ROA not before: Mon 03 Feb 2025 20:07:12 +0000
ROA not after: Sun 04 May 2025 19:07:12 +0000
asID: 39970
IP address blocks: 149.112.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 22:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c3:6c:09:e2:39:eb:86:63:2d:40:9d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Feb 3 20:07:12 2025 GMT
Not After : May 4 19:07:12 2025 GMT
Subject: CN=b58ed7cd-8fc5-42b9-8266-dafa298850d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:3b:a6:e8:9a:da:79:d3:26:2c:df:4a:91:
2a:0c:cc:b8:dd:55:fe:5a:8d:e0:be:f0:05:9b:10:
71:fa:c2:7f:90:74:84:35:f6:67:53:18:55:95:9f:
0e:9b:46:1c:90:eb:ba:ac:d4:f4:a7:1b:6b:00:9e:
50:ce:01:87:42:f9:c5:7f:78:78:8b:b2:f3:f6:0f:
0f:c4:84:a5:6a:98:b9:a0:ed:8a:11:09:49:fc:ff:
75:9c:e0:b5:f7:72:06:9d:ae:51:f2:e0:67:65:7d:
aa:60:e1:ae:7f:c5:e0:69:31:2a:c0:7c:4c:90:f2:
f9:4c:c7:c4:0a:2e:de:5e:4e:8b:29:d7:c1:8f:db:
df:d2:51:eb:f4:c0:62:7f:27:61:a7:e1:a3:a2:52:
63:e3:8e:b0:90:15:67:8a:84:02:7c:00:c1:0b:d5:
b2:a4:84:df:58:af:cd:0e:95:44:df:ff:7e:bc:f6:
c6:7b:3a:df:d4:00:c5:58:e7:7e:65:9f:f8:93:15:
7a:c0:3b:45:c0:fd:2a:3d:1c:dd:68:e4:fb:35:16:
28:ed:6d:c9:6a:dc:b1:89:4a:0a:ad:7c:34:4d:bb:
db:3f:d6:e3:69:80:7a:6b:35:a3:6f:64:a1:22:3c:
f8:d6:14:76:f8:7f:bd:88:93:4b:54:df:c5:aa:b5:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:0F:FF:0E:1A:1C:60:A8:E4:C9:C7:27:FF:07:85:2E:B1:67:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/5335d508-e235-3d9a-bbd5-be196e4a897f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:de:1f:7a:c9:47:a3:7f:de:b6:d9:d4:d6:a1:f1:a9:ce:1d:
cb:ea:ba:06:06:d4:9f:0c:df:d2:83:05:aa:83:e3:bb:5f:d6:
38:e8:4d:22:0a:a5:ad:e0:8d:c1:88:39:42:3c:aa:16:ef:8f:
96:15:c9:01:87:8f:7d:57:5d:cb:64:82:42:52:37:46:70:d8:
a4:1a:95:d5:ce:b5:3a:02:43:3f:73:2b:db:08:d9:9c:1d:df:
2f:f9:6c:37:1b:d9:0f:8a:60:ba:3d:da:e1:d7:9b:70:8d:bd:
83:9e:7a:35:e5:ab:6a:f6:74:e8:d1:98:45:3c:87:b7:1a:1d:
85:60:71:85:cf:99:73:09:a7:fe:f2:9a:b4:b3:e6:2e:13:28:
7e:dc:6a:59:5f:2b:3f:72:8e:7d:62:3e:02:fe:f5:ba:df:ae:
2d:47:7a:45:0d:c0:79:34:13:03:a6:08:71:80:fd:29:ce:54:
e0:a1:30:e8:5e:49:63:1f:ee:bb:74:ea:c7:2a:ed:29:39:ba:
8c:44:fd:60:c9:cf:65:bc:9e:81:4e:47:5d:65:e9:93:de:ca:
ef:b8:97:9a:86:64:20:64:90:68:1d:57:7c:dc:64:8a:0e:bb:
c0:c6:7d:fd:11:a9:ea:60:ab:80:e0:44:7d:d4:ad:03:07:63:
f1:e0:78:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:49:31 2025 by rpki-client