Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0bedc9af-e4de-347a-a9f3-6c836dca1a69.roa
File: 0bedc9af-e4de-347a-a9f3-6c836dca1a69.roa (raw, json)
Hash identifier: eJIZi4mwSTdvJyjGrN8BeXIiML0fuZAZNlYUHgFdSrQ=
Subject key identifier: 6C:BD:21:C6:5E:90:EB:87:2F:DA:D6:A8:8A:F7:C2:82:98:56:32:01
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F432858488333603C938AB8609B94AC40
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0bedc9af-e4de-347a-a9f3-6c836dca1a69.roa
Signing time: Sat 11 Jan 2025 20:01:18 +0000
ROA not before: Sat 11 Jan 2025 20:01:18 +0000
ROA not after: Fri 11 Apr 2025 19:01:18 +0000
asID: 215287
IP address blocks: 216.224.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 03:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:33:60:3c:93:8a:b8:60:9b:94:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Jan 11 20:01:18 2025 GMT
Not After : Apr 11 19:01:18 2025 GMT
Subject: CN=29f32617-6daa-447f-ad2c-f34a4626dcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:83:b8:1f:e7:30:6c:79:de:d8:24:29:da:15:
ab:26:39:77:59:d6:37:89:7d:48:b8:6c:bf:b2:1e:
d5:59:b8:3f:fd:51:18:69:61:e2:1c:fe:d2:c6:db:
4e:f7:ad:da:c5:da:e4:3b:48:23:d6:7f:87:e8:34:
15:78:1b:9d:01:65:57:ec:b5:65:82:c5:ec:f1:a1:
25:9f:a3:6b:48:bb:9a:e7:36:77:54:72:06:8c:f9:
53:46:ea:3a:a4:90:7d:5f:47:a4:77:8e:7d:a6:de:
f7:ef:37:ef:94:3d:3b:1a:a2:f5:df:05:82:1f:84:
42:68:f0:9f:cf:fe:ea:b9:59:e4:1e:30:7d:4f:3e:
63:df:a6:9f:2a:54:32:ae:01:0a:8c:86:eb:ba:41:
41:5a:86:28:c2:af:3f:3a:e7:47:cf:17:4b:16:b7:
4d:e4:d9:45:af:72:8e:c1:4f:e9:79:5d:a0:69:cd:
a7:ae:e2:b5:7b:7e:1f:ae:e0:06:f9:f6:fb:36:ba:
9e:76:3d:e2:d6:b8:8f:ca:32:4f:11:8f:26:9a:05:
41:fb:9e:66:92:7f:04:08:24:1b:f1:fe:b9:8a:d7:
8b:5a:75:d0:e6:82:3f:4e:d8:3d:7f:8d:77:08:b5:
fc:c6:32:cd:e4:b6:21:e8:df:e1:89:d2:c6:ee:17:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BD:21:C6:5E:90:EB:87:2F:DA:D6:A8:8A:F7:C2:82:98:56:32:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0bedc9af-e4de-347a-a9f3-6c836dca1a69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.224.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:16:95:11:5c:e1:30:fd:7b:20:bb:70:fd:fd:9c:36:eb:38:
3c:b9:ba:68:00:3d:93:3e:0b:ac:4b:7f:20:ab:ef:c6:15:75:
16:ab:be:e5:ed:db:64:24:28:93:a0:2c:f8:49:2f:25:88:57:
ef:67:74:b9:a1:0f:8f:94:91:13:b3:ce:60:2a:75:c3:b6:2f:
53:c5:e4:a8:d9:20:39:f5:8d:47:1f:78:a9:79:50:53:92:fd:
1e:45:65:ac:9a:9a:1b:41:28:ca:f1:00:10:37:80:cb:4f:de:
0c:92:10:5a:1c:97:3b:42:93:d2:00:6f:a6:d6:b1:d1:c8:6a:
a9:1b:d6:ec:32:8f:15:88:9a:db:02:5a:f2:f0:4b:0b:86:c2:
0d:1c:2f:43:18:99:79:0c:65:c2:f3:42:ab:04:3b:32:d0:69:
b3:56:47:59:20:ff:cd:dd:24:07:9d:e9:ec:7c:c9:6b:94:5b:
0f:39:ad:8d:d6:6a:f2:e0:b4:6a:79:74:17:fd:f9:08:59:dd:
37:3a:1e:67:6b:81:bd:21:4d:87:6d:c2:37:b9:36:35:18:9a:
9a:a0:4b:ed:9c:77:13:14:9a:0f:3f:52:7c:d9:26:41:44:4e:
02:d8:66:5b:fc:b6:ff:cb:f8:86:ef:cc:64:44:9e:79:c5:d5:
8b:69:07:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:43 2025 by rpki-client