Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/19b3bbdf-2adb-32bd-806c-06bb730da9ba.roa
File: 19b3bbdf-2adb-32bd-806c-06bb730da9ba.roa (raw, json)
Hash identifier: CpQBf/ewiQd2oWaIgDVc7/lHlahdYR99CtoATdPP6tA=
Subject key identifier: 65:48:D9:23:09:F2:07:24:7A:64:E6:52:7D:4F:0D:EF:5B:0A:6F:E2
Certificate issuer: /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Certificate serial: 010D0C9F43285848CB1651CC9F72F7FCC3975700
Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/19b3bbdf-2adb-32bd-806c-06bb730da9ba.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 10996
IP address blocks: 192.154.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 12 Feb 2025 06:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:51:cc:9f:72:f7:fc:c3:97:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=40d5892d-50e7-409f-b5a5-5e338120cc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:be:c5:3a:73:3a:9d:67:77:5f:a3:08:46:08:
0b:5c:8f:45:84:3a:c5:43:c6:e8:88:e3:a4:fb:a2:
ff:58:a8:c0:cc:a9:11:dc:a5:9e:91:06:d0:4d:6c:
39:13:5b:dd:63:12:79:d7:ea:56:30:61:c7:f5:4e:
02:28:2b:85:3d:f8:22:cc:75:c5:d9:ab:c0:6e:e0:
11:55:63:fd:7d:7a:59:31:e1:41:de:d0:87:13:4f:
c1:33:45:e2:47:ad:27:71:b9:bc:37:f9:a4:fe:c1:
63:90:6d:0e:c6:4d:40:e3:75:78:f3:99:a7:ad:c2:
c0:8c:d3:4e:58:8e:49:85:6c:29:b4:e3:d6:99:a6:
b3:68:72:db:5f:57:bb:96:c6:a8:db:ed:7b:40:3e:
e4:3a:91:78:dc:71:8e:46:eb:be:11:1d:e0:c4:49:
57:a1:b8:9f:26:e2:e5:fc:53:5a:e5:06:c4:7d:9a:
25:3c:ec:78:3f:7d:bd:e9:c6:2e:d0:f5:0b:dd:fd:
7e:ee:fd:9a:5f:02:a6:35:e6:63:45:14:4a:03:00:
95:92:9a:82:52:6a:65:b7:b2:25:be:1c:af:6a:b3:
7b:23:12:9b:55:6b:58:8a:1a:07:4e:0e:81:bd:8a:
fb:fc:04:38:69:c4:b9:df:3a:bc:af:fa:ae:e0:c0:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:48:D9:23:09:F2:07:24:7A:64:E6:52:7D:4F:0D:EF:5B:0A:6F:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/19b3bbdf-2adb-32bd-806c-06bb730da9ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl
X509v3 Authority Key Identifier:
keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:b7:14:5b:c4:c3:cc:49:85:3b:2b:97:66:94:7e:bd:e8:50:
87:e2:32:bb:b6:5f:63:33:3a:a8:6e:3d:6f:4e:ca:77:66:74:
fd:0f:8e:27:25:5c:18:6b:4e:d7:11:f6:2e:9c:19:8e:06:dc:
14:e7:2c:0f:e2:9b:db:35:fb:37:fa:63:26:c1:a8:76:06:31:
1d:c1:aa:28:c0:d4:3e:f0:75:bd:b8:89:f3:b3:9c:1c:9a:5a:
b8:5c:aa:93:08:17:2a:bb:5b:85:54:ec:65:a3:0a:45:60:ec:
73:e3:cd:98:ae:5a:1f:a9:84:95:3c:ae:c6:37:39:74:39:7e:
c3:74:73:6f:6d:fa:7e:56:b9:c0:73:9f:9c:d0:78:e5:02:32:
f5:69:3e:96:c5:39:22:18:0a:f6:67:19:07:b8:2c:7e:51:1e:
60:1c:99:e2:c8:3a:84:9c:7b:d7:0c:fe:3b:97:98:35:40:42:
d0:1b:d5:f6:8f:c0:c9:aa:e3:ce:e1:51:6b:4b:08:a0:44:d8:
12:fa:db:6c:5c:5c:30:be:db:55:3b:be:49:e1:a7:1e:90:f5:
09:74:a0:19:c4:96:6f:e0:72:97:86:73:4d:b2:9d:0f:e3:aa:
42:22:11:21:69:f7:78:92:b4:cf:2c:56:74:58:8d:c6:c3:21:
8d:1e:25:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:29:43 2025 by rpki-client