Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/614b5dc1-48a7-36e9-96c0-a8af087fa864.roa
File: 614b5dc1-48a7-36e9-96c0-a8af087fa864.roa (raw, json)
Hash identifier: FDewHX1e2pNa520/o07wTyoF88DDEZ9heXJfVHWZYJg=
Subject key identifier: D5:AA:90:E6:72:15:1D:27:0C:59:D9:C9:DE:87:19:B9:68:F8:2E:2A
Certificate issuer: /CN=73d32729-3efa-4a4c-a5ce-85790b40d100
Certificate serial: 010D0C9F43285848530AEE96C7173E6557D3E940
Authority key identifier: DE:E4:57:18:9A:AC:6B:28:6E:26:A0:14:E0:8B:4C:F3:29:B9:8E:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/614b5dc1-48a7-36e9-96c0-a8af087fa864.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 59426
IP address blocks: 23.175.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 14:11:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:ee:96:c7:17:3e:65:57:d3:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d32729-3efa-4a4c-a5ce-85790b40d100
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=3b67bc7c-c44c-43bb-9c95-c7519d802a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:2a:93:1e:ba:96:ed:23:e0:c0:ec:37:1c:
7d:99:c1:92:ad:fd:28:49:bf:bf:8a:7f:82:58:fc:
8f:db:3a:8c:f4:89:d7:b1:19:aa:dd:42:59:79:d6:
6c:7f:b2:5b:b4:8e:89:2a:ce:ff:c6:c2:55:d4:14:
69:43:5c:bb:96:ee:98:05:b4:38:fc:9b:fc:b8:31:
d2:dd:61:96:5d:ba:1a:31:c1:31:15:a5:29:dd:4e:
cd:76:61:d5:6f:27:38:37:01:0b:53:3d:de:38:1d:
55:39:93:67:9d:76:1d:a8:48:7e:d2:4d:c7:16:c0:
8c:be:2c:fd:4b:05:7f:88:27:e4:0a:a4:b0:33:7b:
63:e5:a0:ae:5f:02:e7:5a:c1:b9:fd:6e:a8:f4:5b:
89:4a:09:64:eb:64:40:95:27:79:77:57:f6:9a:8b:
6c:01:05:3e:d1:67:21:e3:a3:2e:15:61:5e:9e:1e:
34:19:6f:75:32:1a:52:8a:b3:f2:8a:ab:23:c6:3e:
44:58:0b:e3:21:5d:a6:aa:af:c1:0b:d1:aa:77:a7:
db:03:0e:4c:0d:4a:8d:31:2e:58:c6:aa:91:c0:22:
a6:65:39:ab:d2:b0:c5:85:af:77:b2:5d:e9:1b:83:
3f:9a:68:f6:68:f3:20:9e:1c:72:75:ba:f3:51:0f:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AA:90:E6:72:15:1D:27:0C:59:D9:C9:DE:87:19:B9:68:F8:2E:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/614b5dc1-48a7-36e9-96c0-a8af087fa864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.crl
X509v3 Authority Key Identifier:
keyid:DE:E4:57:18:9A:AC:6B:28:6E:26:A0:14:E0:8B:4C:F3:29:B9:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer
sbgp-ipAddrBlock: critical
IPv4:
23.175.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:ff:fc:5b:97:de:77:ab:2e:8f:15:d8:d2:fa:52:c8:b2:74:
9c:8f:db:a8:c1:3c:44:e7:59:42:ef:39:41:9b:14:6a:3d:4d:
6c:54:c1:a6:b7:fd:8b:00:f2:f7:26:da:5c:0a:84:dd:ac:02:
1e:4f:34:b8:13:c5:ea:19:63:59:aa:e3:d4:87:fb:18:cd:ba:
18:ee:05:24:d3:20:ac:b4:bf:7c:a2:67:9f:45:23:72:60:9e:
60:19:17:d3:2d:a1:f8:02:07:2e:98:9c:d1:a2:e1:08:8a:5f:
23:a8:b1:39:e4:c4:d5:3b:65:5a:d3:53:50:05:94:70:c1:69:
4d:25:7d:6b:f2:bd:f3:13:70:65:7d:8f:b7:ca:a4:7e:64:f5:
c8:15:6a:f1:18:d9:e8:fb:2f:a7:ac:4c:50:25:3b:7e:31:ed:
08:ef:0d:19:28:42:ea:a9:96:69:f1:b4:a1:bb:78:3a:2d:ed:
c8:70:0e:bd:ae:ae:dc:92:b8:f1:89:fc:4c:67:8b:46:a1:11:
89:44:33:3a:c9:65:88:7a:40:2c:77:d8:f4:c8:81:3f:25:38:
9b:0f:04:59:a9:7d:bf:d9:1a:91:97:2a:b9:18:c4:ac:fb:03:
42:1e:da:ad:1e:97:cf:f6:42:8b:df:f6:94:0b:9e:66:cc:cd:
db:90:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:26 2025 by rpki-client