Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/1ee5d5ef-3cf0-36e2-bf8d-0281942fcf99.roa
File: 1ee5d5ef-3cf0-36e2-bf8d-0281942fcf99.roa (raw, json)
Hash identifier: XvYJb6ORvR0fVXeKmn5DiiabXhGjqZphkGcMQju49lQ=
Subject key identifier: E2:68:C1:77:D5:B7:E7:26:9F:BF:95:EE:DB:AE:78:4C:C4:36:7D:F0
Certificate issuer: /CN=3f8ce937-b65c-4889-8a3c-145d71949e14
Certificate serial: 010D0C9F43285848BBBB828742F834242C73D118
Authority key identifier: 73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/1ee5d5ef-3cf0-36e2-bf8d-0281942fcf99.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 149522
IP address blocks: 68.69.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 15:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:82:87:42:f8:34:24:2c:73:d1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ce937-b65c-4889-8a3c-145d71949e14
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=f0794b48-5744-4211-9fbf-23db61f3d993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:d7:fd:4b:79:37:a6:20:8e:8b:ff:0e:25:
26:d0:7e:d6:85:05:ea:45:cf:cc:d6:03:86:13:2e:
f6:8d:80:b6:10:dc:bb:14:58:8f:b6:7e:0c:42:60:
9e:10:ec:08:79:b4:63:8b:88:ec:63:08:24:10:89:
c9:d5:14:70:12:42:26:b7:8d:95:18:f6:c3:80:96:
93:2b:d7:15:34:a2:6d:5c:3b:55:9a:5c:de:8e:02:
3f:84:a7:48:f6:38:18:1a:19:5d:d1:6d:cc:04:71:
71:f6:d6:3c:c9:5f:3a:31:36:f0:fc:ae:eb:05:5c:
49:1c:7f:2a:af:42:7c:5b:9b:f1:72:af:b5:77:b9:
86:8a:bb:e7:70:ff:58:9e:86:41:d4:69:25:ae:08:
13:01:53:09:88:d1:5a:07:86:d5:c9:44:ae:f5:18:
12:61:c5:2a:b4:08:ad:a9:21:81:26:24:7a:d6:37:
8f:00:c8:9f:b0:56:8b:37:cc:e5:d2:16:0b:a6:2d:
66:9b:bc:4c:c8:0a:f8:4a:fe:52:9e:b3:21:be:24:
6a:a9:90:ad:a9:c3:5c:2c:05:9e:eb:2e:6e:14:0b:
cd:60:c4:c1:95:b0:f0:f9:ba:e8:21:01:cf:ed:a9:
91:f4:9f:13:07:a1:39:96:75:cc:7c:fb:c5:e5:c6:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:68:C1:77:D5:B7:E7:26:9F:BF:95:EE:DB:AE:78:4C:C4:36:7D:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/1ee5d5ef-3cf0-36e2-bf8d-0281942fcf99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl
X509v3 Authority Key Identifier:
keyid:73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer
sbgp-ipAddrBlock: critical
IPv4:
68.69.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:04:5c:3d:3c:be:b9:a8:5e:c4:d1:e5:09:03:cc:6b:6a:0f:
14:3c:19:5e:4a:26:c3:1c:92:e6:09:dc:0a:5d:53:84:48:34:
06:eb:e1:01:c2:03:74:d0:3b:8f:5e:dd:9f:75:2c:9d:db:1c:
9d:a3:c8:c7:db:eb:7f:d6:2f:8e:31:cf:16:d8:02:93:c2:aa:
f9:6c:9e:8e:8c:81:ac:19:86:2f:50:fc:c2:48:3e:3a:08:0e:
3f:47:d7:17:99:48:05:13:25:74:dd:ec:7c:ab:89:d4:65:af:
b6:a5:45:e4:39:7c:60:39:47:a8:8c:d0:e5:32:d6:21:44:97:
c1:f9:b8:ce:82:df:81:e3:91:12:1a:c8:ae:99:5d:2f:19:cb:
56:74:b0:21:9f:94:4b:d4:59:26:3b:02:31:68:e6:37:a7:8a:
90:ca:f9:71:94:64:05:b8:3c:00:34:ee:83:b9:c6:fe:1c:b2:
f7:e1:4f:dd:d5:a2:1c:1b:8f:f5:7b:a6:ca:78:f1:80:0d:f2:
6b:2e:0b:5c:9c:d1:70:52:14:b1:69:5e:7b:c9:c4:0d:fd:d6:
01:10:5a:a2:2b:89:3e:b0:ec:0b:ef:df:f0:b2:cb:35:4b:ba:
97:7f:ca:86:c3:a7:45:c6:6b:91:e7:a6:d4:91:e4:5d:b3:fb:
1a:ed:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:50 2025 by rpki-client