Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bac099cf-530a-32c0-b8af-65446907c86e.roa
File: bac099cf-530a-32c0-b8af-65446907c86e.roa (raw, json)
Hash identifier: JYSNvnWPmkjaD3TOp8FN4rP0XSsZ5B1vjD/teAVPE9A=
Subject key identifier: CB:11:13:C8:B1:B0:E6:80:99:A1:54:44:21:8B:50:EB:41:58:70:77
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E84EF40B2FCCAEEF46A80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bac099cf-530a-32c0-b8af-65446907c86e.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.45.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 16:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:84:ef:40:b2:fc:ca:ee:f4:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=6a697a5a-1f3f-4771-8a22-0b85ff7f22ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:c4:87:46:76:7f:22:c8:0b:5e:02:57:32:
c7:27:f9:76:25:d7:dc:35:98:4f:92:53:f3:a8:8f:
cf:76:76:1c:14:72:72:cd:2b:c0:b3:11:90:f7:d5:
f3:6c:ed:16:c3:66:92:f3:1e:92:23:01:7b:7b:3c:
fd:16:66:67:60:07:00:08:ff:03:14:94:79:f8:f6:
2f:ac:a2:7a:95:d4:72:ea:89:dc:c9:66:5e:be:8d:
8a:af:f9:27:17:c4:27:8f:b5:62:c9:40:33:96:fe:
c5:44:06:d7:57:3b:4e:11:2f:09:b9:99:d2:d4:e3:
6c:da:81:99:98:70:7c:b1:b9:07:cc:c5:7a:58:dc:
1d:4e:af:de:b7:91:b5:35:17:e7:58:b8:c3:2e:00:
0e:e1:11:1f:12:2f:96:ff:16:b5:20:42:09:5b:26:
23:d5:54:73:ea:48:08:b6:cc:51:81:fe:5f:d8:43:
05:ec:16:33:35:fd:c2:fd:5a:32:ee:6e:43:5b:3c:
04:b2:45:a1:6e:4f:4d:35:d5:f5:5a:ed:6a:4e:59:
82:bd:03:3f:c5:e9:9f:b4:92:0c:ed:e2:bd:5a:0b:
ed:f4:b8:90:ab:67:36:9b:90:da:47:d9:1a:db:ec:
47:52:0b:86:2f:e1:0a:0d:22:9e:a5:9e:da:26:ae:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:11:13:C8:B1:B0:E6:80:99:A1:54:44:21:8B:50:EB:41:58:70:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bac099cf-530a-32c0-b8af-65446907c86e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:65:9f:49:a6:3d:23:d7:39:b9:00:ae:e0:d7:e7:81:41:9a:
20:7d:4d:44:1a:01:4e:4e:ca:21:68:44:4f:48:93:61:f7:38:
8d:9b:28:15:6e:60:a6:8a:dd:1f:11:a4:04:af:d6:6d:0a:8c:
a6:cf:f6:86:fb:ac:ed:25:d7:b7:56:2f:5c:72:92:80:19:11:
0d:37:59:54:51:92:c9:ee:28:fa:00:47:b1:cf:5f:22:37:af:
5e:2a:ea:a4:5a:47:2f:44:f5:c2:63:91:0e:40:a5:03:c2:ca:
14:84:49:09:20:9a:f9:44:cb:26:ee:8e:ac:38:cd:13:81:b3:
6d:8d:ac:78:df:91:65:d7:fe:27:b6:a0:7c:18:f5:13:e0:31:
9a:c9:9f:6e:a3:44:4e:e7:af:66:bd:f1:36:87:cb:8e:27:6a:
49:74:56:41:3a:02:66:f2:04:c4:be:ff:3d:f1:b6:4d:31:d8:
df:c2:27:35:d2:e9:69:b8:ae:43:c3:19:1d:47:ae:ed:85:85:
eb:63:f8:c0:46:bf:33:41:cc:ed:7d:14:93:7d:98:51:10:12:
c6:57:6d:0d:c4:f3:34:f1:ae:72:3b:ad:21:f5:dc:44:13:5c:
a8:a8:5c:66:12:2c:89:9a:75:68:5e:5c:06:ec:6c:7c:71:31:
e5:3a:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:04:43 2025 by rpki-client