Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e0045687-3588-3b46-ac26-d264bdcc0371.roa
File: e0045687-3588-3b46-ac26-d264bdcc0371.roa (raw, json)
Hash identifier: 79tajv4BZPFzwi3wlfAwJUqpzjW9FcADs9YpjIhbmmI=
Subject key identifier: 19:C0:78:32:5A:24:A6:76:42:27:61:3A:91:2C:BF:A7:7F:1E:60:DC
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E8299E03E6F21BCAF7B00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e0045687-3588-3b46-ac26-d264bdcc0371.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.26.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Apr 2025 16:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:82:99:e0:3e:6f:21:bc:af:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=bf557570-49a3-4ebb-8bd4-7ab439f08d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:51:cd:28:19:85:36:bd:43:8a:ca:9d:6a:
9a:9d:29:41:02:b4:ab:66:98:16:7e:63:6b:fc:e2:
bd:fc:f9:c3:e1:21:8e:4c:eb:41:70:22:68:6a:83:
0e:d2:0a:db:45:5a:97:ce:87:a5:c2:cd:8e:05:1d:
01:bc:7d:c4:ad:50:43:2c:a9:b3:30:81:e3:58:de:
7b:7d:61:3c:22:d7:3d:fa:18:d3:53:cd:13:8f:97:
2e:da:ca:72:47:d3:4b:20:e6:8f:c6:9c:bd:dd:89:
82:3b:96:97:59:12:15:56:de:58:02:2e:9f:70:92:
06:72:bb:23:58:1c:18:15:70:6f:8c:41:d1:cb:91:
94:52:e7:fc:e4:02:64:ed:c0:22:20:42:68:84:84:
61:37:29:49:b4:d3:4c:63:fe:d9:44:08:27:16:40:
8f:4e:ff:cf:a4:a3:7f:f0:80:42:70:fa:a2:e3:9e:
d6:d4:a1:84:23:ef:26:5c:86:bb:84:55:11:80:26:
36:7b:35:87:57:13:bc:c1:4d:b9:d8:d2:9a:b0:55:
a9:d8:c8:6d:fe:c8:ce:53:9a:29:11:64:61:dc:6a:
ec:10:75:d4:89:c3:d3:cc:31:af:17:21:28:ca:6e:
1a:69:24:2b:1e:f0:f5:be:49:18:fa:a0:ea:c8:41:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C0:78:32:5A:24:A6:76:42:27:61:3A:91:2C:BF:A7:7F:1E:60:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e0045687-3588-3b46-ac26-d264bdcc0371.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:f7:60:d1:fc:6f:34:08:47:9d:c3:c7:73:1f:48:84:5c:13:
ad:b5:62:27:0a:53:49:6b:c7:d1:40:43:02:4e:20:6a:92:7e:
f7:32:c0:11:08:8c:9e:ff:2f:47:e8:db:b7:e0:3a:6a:39:5f:
e0:6d:81:82:54:d7:bd:bf:89:39:fd:13:86:b8:01:fe:ef:28:
e5:c3:7f:85:11:07:b8:95:5f:00:ee:58:6c:57:d9:d7:d3:da:
b0:b3:e5:2b:7f:c5:58:40:4e:de:da:39:e1:d4:7a:d1:4b:55:
05:04:97:2c:5a:7d:c1:2d:d5:4b:b9:51:8a:94:f8:43:18:37:
f4:93:70:44:a0:a4:ba:e2:05:88:6f:9b:3d:36:42:ee:68:a8:
13:10:e2:20:95:40:73:37:5c:50:59:39:a3:cc:5b:bb:1e:9b:
92:ee:a0:35:d8:53:c3:ca:9a:a3:d7:39:47:1e:90:2e:57:67:
ac:6f:a9:21:94:a5:02:74:1f:1f:0f:ee:40:9b:68:42:d5:b2:
f1:52:3f:fa:a3:fe:23:cd:96:4c:40:15:11:0e:04:18:f2:b0:
1f:6d:1b:d0:a3:8d:1f:c8:58:a2:08:fc:a1:f4:5c:90:82:74:
b9:73:78:b9:6f:27:2d:5b:fa:7f:82:5b:e8:7e:03:c5:7a:9f:
2c:f4:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:38:20 2025 by rpki-client