Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/c3ae80e4-1ad6-394c-8b18-b6d5d6b643ce.roa
File: c3ae80e4-1ad6-394c-8b18-b6d5d6b643ce.roa (raw, json)
Hash identifier: J2Q3JBnVTOf3rsBZc+L23gYe0mzVIJqXz1uqm/W6Z/o=
Subject key identifier: 6C:61:5F:EB:F7:CF:B1:8A:82:CD:CA:58:13:97:88:E7:B6:55:CC:1B
Certificate issuer: /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Certificate serial: 010D0C9F43285848A1361CBCFE76B7360CE25940
Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/c3ae80e4-1ad6-394c-8b18-b6d5d6b643ce.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 23.161.104.0/24 maxlen: 24
2620:be:a000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Mar 2025 23:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:1c:bc:fe:76:b7:36:0c:e2:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=f4f93e1c-7a72-4545-a291-d1a429a71d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b9:29:ac:43:cb:40:13:0c:f9:8c:01:7e:a9:
d3:70:7d:9c:55:ff:89:8e:0b:24:be:c4:70:db:84:
f4:db:d9:63:c7:c3:fd:2d:3f:e8:18:88:90:b2:1a:
ff:3b:98:10:b3:af:1b:35:5f:71:36:8d:11:ee:ca:
4c:19:e4:b8:7d:36:be:bb:a6:9a:50:9e:03:d4:4b:
71:f6:16:4e:f2:93:6b:e5:15:fc:c8:c6:05:70:55:
fa:73:a3:d8:a3:20:f2:8f:c3:d0:16:74:c7:66:6a:
c6:cc:73:95:bf:87:a3:e9:ab:75:7d:6c:18:be:ab:
13:ea:ea:f2:49:14:81:c6:32:2a:3c:45:2b:87:f2:
33:7f:52:f0:db:22:95:d4:0a:84:6d:4d:99:7f:5e:
d3:ca:90:7c:b0:29:1a:9b:d2:32:96:e8:fe:80:93:
d1:c0:d4:59:20:7b:34:94:a4:78:1f:c7:5d:fc:95:
99:b6:57:ce:dc:aa:ac:20:76:00:ff:34:d6:45:72:
ad:97:71:8e:d1:95:91:86:31:da:e8:2d:c4:4f:57:
de:bc:5f:17:ec:8a:f6:73:7f:da:0f:da:1e:f1:27:
c3:ac:35:e9:b3:84:05:d5:2e:b6:0b:f3:45:be:24:
b3:29:ba:0e:8c:ed:2c:93:bd:05:b4:33:5c:fb:43:
72:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:61:5F:EB:F7:CF:B1:8A:82:CD:CA:58:13:97:88:E7:B6:55:CC:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/c3ae80e4-1ad6-394c-8b18-b6d5d6b643ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl
X509v3 Authority Key Identifier:
keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.161.104.0/24
IPv6:
2620:be:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:b1:f8:78:e9:f5:36:27:d4:b5:ee:e0:1b:3d:3a:fb:17:ec:
c4:40:5b:14:06:8d:54:f0:5f:e9:cc:a6:a6:32:5a:c1:91:36:
16:41:bf:c0:46:07:11:e5:c2:89:99:31:31:e8:c7:a2:c4:40:
2a:ac:49:aa:01:bc:bb:5d:33:59:46:bf:97:51:46:b0:63:60:
11:ca:cd:11:17:9b:50:ec:29:ce:af:f5:47:3f:52:84:79:9d:
75:d2:b6:62:9f:3f:e1:68:b1:66:97:5a:ee:43:4c:82:47:be:
34:78:63:71:72:a0:eb:71:31:d4:71:c3:d3:4f:55:73:8b:cd:
0f:ee:ea:93:2b:32:86:82:dc:73:b3:4d:35:5c:3d:c5:05:cf:
a5:11:f5:9f:b4:df:ec:69:70:88:5f:57:2c:a6:93:a1:6a:80:
a3:e6:03:8a:43:c7:00:23:20:da:41:d6:8b:c2:81:bd:9c:af:
5d:17:07:53:7e:b0:6b:64:02:4a:b0:67:a3:5a:f1:80:cb:58:
1d:f0:07:fe:31:3f:5d:9c:e6:26:37:21:bc:53:42:20:93:a1:
f3:2c:3e:08:7d:56:71:e8:9d:be:35:ab:3b:2a:4c:48:62:c7:
f8:3a:66:e2:8d:a1:aa:fc:a1:ae:1b:2f:24:46:6a:38:70:ed:
02:3f:aa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:32:36 2025 by rpki-client