Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/58429839-6a68-3734-ba49-fae6bbd2b28d.roa
File: 58429839-6a68-3734-ba49-fae6bbd2b28d.roa (raw, json)
Hash identifier: 3pZ9MBQhDHi0cq8+RTxztEN8KBTf9pXBM/4EDEhztk0=
Subject key identifier: B3:23:59:12:A1:CF:F8:FD:A0:F0:D5:EC:B7:2A:4D:55:9D:F1:6C:AD
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E86D3E82FE7339D811500
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/58429839-6a68-3734-ba49-fae6bbd2b28d.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 16:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:86:d3:e8:2f:e7:33:9d:81:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=04efb425-9406-4000-8551-df4cebf6d09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:74:10:ab:54:57:69:68:16:5e:18:4c:b1:
fa:d5:14:a4:9d:6b:79:c3:e0:77:4a:e2:63:01:68:
67:af:d5:d8:30:e5:81:3e:7c:b0:7f:a8:1f:33:d4:
33:f8:64:db:bc:45:24:f9:a6:8a:fc:52:97:62:1e:
05:97:31:85:a3:c3:4c:2d:47:4e:73:5a:96:18:e5:
91:77:8b:cd:09:95:49:63:7f:7e:5c:73:a0:cd:5a:
ea:08:be:de:54:f8:23:2c:69:eb:d1:b5:3a:f1:d6:
12:c0:6c:4e:3a:63:3c:50:3e:3b:91:9b:af:70:66:
2a:4c:a6:a5:7d:bd:f0:02:ab:45:b0:a5:fe:99:4c:
65:b0:a7:7d:59:ac:fa:8d:da:ce:07:a5:89:df:94:
df:93:69:71:d0:65:c0:f5:c3:ef:60:e6:0f:eb:32:
a0:78:3f:db:66:08:56:7a:6c:8f:19:b4:99:a2:19:
fc:b0:8f:f4:70:55:e9:61:69:8e:b6:30:81:2c:94:
25:e1:a0:d0:f9:57:b2:37:65:f7:c1:70:95:4f:20:
a8:06:18:37:2b:f6:e7:fd:e1:23:59:65:f7:bd:c1:
f0:ae:4e:42:0c:7b:1b:f4:40:17:e8:c0:7e:68:61:
bc:83:81:0f:5e:2b:e9:b5:60:55:5a:3a:ab:37:12:
2b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:23:59:12:A1:CF:F8:FD:A0:F0:D5:EC:B7:2A:4D:55:9D:F1:6C:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/58429839-6a68-3734-ba49-fae6bbd2b28d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:08:52:b1:1e:10:f5:e8:fc:a5:38:b2:3b:d6:47:25:f2:cf:
47:20:ba:6a:c9:a6:20:56:35:1e:fa:65:7f:dd:48:54:89:dc:
d6:6c:e8:62:dc:4b:bc:aa:a0:f1:b4:04:4a:6b:52:61:76:58:
76:91:9c:13:36:0f:02:5e:96:95:45:97:c2:88:b2:45:80:c8:
4d:72:ac:75:80:77:aa:bf:f0:f8:be:60:95:3c:40:ee:de:6c:
a4:0b:90:78:71:72:b1:87:73:a8:2c:87:f8:62:b0:8e:20:c6:
f0:cc:7b:8e:cd:d0:37:17:62:0b:77:71:1f:68:dc:5c:9d:a0:
cf:39:5c:ab:82:40:2a:2d:cc:66:bf:9d:d4:6c:ab:e9:a5:dd:
85:a1:d3:19:b5:bc:79:02:b8:cc:88:eb:79:1d:a0:ff:6f:4e:
10:36:b1:f3:07:32:23:56:37:5a:ac:bf:70:02:f8:a1:04:47:
a0:a4:a7:d0:18:88:03:f5:35:9e:60:17:56:17:65:3f:1c:c7:
d4:89:51:42:45:bd:8d:d9:73:2e:72:1c:18:f5:c1:4f:69:82:
ff:2b:59:60:13:6b:dc:22:2b:a0:67:40:54:19:28:9d:6a:ba:
87:72:95:0a:55:8a:36:1a:f0:30:89:8d:d4:0a:ff:14:59:4b:
85:51:ca:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:35:39 2025 by rpki-client