Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/363b030f-a049-31de-b4d8-bbec426dbd02.roa
File: 363b030f-a049-31de-b4d8-bbec426dbd02.roa (raw, json)
Hash identifier: df66CkXBG5MEQfJG4agBuxsU6W2JVf+DpzzVMS9bXDQ=
Subject key identifier: 61:A8:89:5F:A7:D0:4A:A8:F9:8F:78:C9:99:F8:39:D4:34:8E:13:9C
Certificate issuer: /CN=aae4f0de-2296-435c-b411-b16981804498
Certificate serial: 010D0C9F432858487BD51FEA950929A30622E800
Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/363b030f-a049-31de-b4d8-bbec426dbd02.roa
Signing time: Thu 09 Jan 2025 04:40:44 +0000
ROA not before: Thu 09 Jan 2025 04:40:44 +0000
ROA not after: Wed 09 Apr 2025 03:40:44 +0000
asID: 23470
IP address blocks: 199.58.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 16:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:d5:1f:ea:95:09:29:a3:06:22:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae4f0de-2296-435c-b411-b16981804498
Validity
Not Before: Jan 9 04:40:44 2025 GMT
Not After : Apr 9 03:40:44 2025 GMT
Subject: CN=2ae861d9-49e9-47e2-adaa-124f21c7010e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:17:bc:77:3f:00:59:17:fa:f3:70:2f:8b:
ce:6e:95:ab:8a:9c:56:93:f0:30:05:4f:bf:d9:32:
6b:4b:36:0d:97:87:6d:6f:c6:a3:ea:3f:b2:a3:5d:
e4:6f:0f:b6:b9:02:34:23:bc:66:81:df:68:ea:fb:
6a:38:ca:65:0f:52:11:17:33:31:dc:36:98:e9:8c:
65:b8:a0:9d:cc:31:5d:fe:3f:91:ae:e4:e3:6e:55:
39:ea:f3:76:89:2c:62:d8:f1:03:97:c8:f2:b7:9d:
fe:41:f8:f8:dc:ff:9a:35:a4:18:ed:99:59:cf:eb:
5c:15:8d:85:7b:8b:73:dc:e0:c4:8c:65:a8:01:e2:
03:fd:8c:e2:82:f2:91:3d:47:22:56:5f:a7:82:66:
16:06:47:7f:fe:87:bc:6c:72:0c:4a:0a:01:50:63:
69:20:32:de:59:5b:1d:31:16:d7:56:32:7f:9b:6d:
34:ef:d3:cd:fd:ba:2d:14:ea:4c:62:0e:de:82:e5:
50:c3:87:6d:f2:c1:99:c0:2f:24:c7:58:7c:b1:4c:
fd:41:60:ab:1b:d9:a1:d2:85:2e:93:c5:d4:d3:bb:
2e:59:f1:b0:a5:ea:91:c8:9d:fd:8b:a4:5d:b1:05:
bb:31:59:9b:ae:aa:ba:85:a2:6c:94:44:0c:ca:32:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A8:89:5F:A7:D0:4A:A8:F9:8F:78:C9:99:F8:39:D4:34:8E:13:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/363b030f-a049-31de-b4d8-bbec426dbd02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl
X509v3 Authority Key Identifier:
keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
sbgp-ipAddrBlock: critical
IPv4:
199.58.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:e0:d0:d7:01:02:4a:c5:dc:e6:36:c4:6d:a3:e3:a2:c8:a4:
47:70:9c:af:0f:0e:51:eb:56:50:dd:c5:8b:f8:a2:03:81:25:
48:bf:35:85:1d:88:b1:5e:16:3f:b5:81:bc:ea:f2:d3:fd:4d:
2c:1d:b8:a4:e7:a5:6f:98:07:6e:a1:f6:e7:23:b8:d3:0b:01:
c2:d0:e8:6d:c1:34:eb:47:47:e7:ce:93:ac:9b:a0:e4:8a:67:
5f:6a:ec:15:b5:1a:e0:df:10:b0:a7:22:f4:6d:1e:04:e2:36:
05:c9:5d:8f:f8:7f:44:1a:b0:1d:6e:d2:60:d2:b3:c7:3d:dc:
58:31:79:6c:69:eb:2d:16:b1:22:66:64:3c:58:1d:b6:27:6a:
a6:f5:8c:ce:25:c6:31:26:17:d4:04:c5:65:e0:cd:f3:0e:0e:
36:af:57:b3:7e:28:29:52:50:90:42:fd:f9:b7:6e:e3:fb:82:
10:8a:3e:c2:60:12:1a:d0:ec:01:48:c9:03:9a:6d:35:ae:b8:
d8:28:48:5f:a8:59:29:86:c7:9e:41:ec:9f:dd:97:52:7a:58:
a9:27:2e:bc:ef:04:ea:f6:d7:26:91:c3:dd:e2:5f:02:81:13:
a6:46:fd:b3:46:58:cf:6e:e7:20:3e:70:54:01:6e:72:7f:1a:
17:74:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:53:19 2025 by rpki-client