Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1d080e64-ad23-3f26-a5b9-62938424d93c.roa
File: 1d080e64-ad23-3f26-a5b9-62938424d93c.roa (raw, json)
Hash identifier: 8CQdI5d77LH22WunCQe9CNhpt2sJpUblmb9mt76ClsA=
Subject key identifier: 2E:5A:82:5B:A8:DB:36:26:65:B3:F8:EB:6C:3D:BE:53:5F:E4:9D:56
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848EC969B2BE9D751CE54653648
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1d080e64-ad23-3f26-a5b9-62938424d93c.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 7018
IP address blocks: 130.254.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 09:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:9b:2b:e9:d7:51:ce:54:65:36:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=cf2e2411-1d42-49e7-98cb-213988a76edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c0:7e:e0:f3:24:ed:a6:81:e3:40:69:58:ec:
f9:30:99:90:8c:b3:c6:cf:f9:98:56:ed:83:9b:ca:
53:ae:6b:70:ad:3a:5d:61:40:c1:27:4a:12:c5:c2:
a7:1c:05:1f:ee:36:e3:07:22:e9:50:71:3e:57:4a:
b2:4e:ad:7e:1d:31:38:75:2d:71:87:56:b8:d5:7c:
a7:e4:b2:92:90:55:fb:c5:da:72:60:d3:a6:c6:ee:
43:56:92:91:97:8c:1b:e1:c6:14:ff:73:d9:82:a2:
09:74:81:65:ab:d2:0b:69:ae:39:69:e0:78:3a:cd:
7e:be:dc:57:76:38:a4:c1:bf:63:11:59:c2:88:30:
02:0b:0a:65:c9:68:6d:8b:e2:7f:10:be:d0:ee:9d:
66:62:30:4f:69:a2:1f:83:ed:e1:03:c9:24:d9:79:
7a:10:70:40:dc:a4:30:f5:c0:4b:f2:0f:0d:0f:44:
41:0c:99:91:ac:89:5f:20:5b:a1:c7:e7:e7:89:b8:
bd:1b:8b:18:a4:72:95:99:5d:4f:48:bb:e4:45:3e:
0d:ae:36:da:7c:81:40:32:c7:5a:ca:20:58:fd:e9:
20:4d:07:70:d0:48:9b:47:c4:18:ec:35:c5:aa:9c:
cf:62:1e:91:8c:49:ce:ef:bf:4c:d7:3c:70:4e:47:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5A:82:5B:A8:DB:36:26:65:B3:F8:EB:6C:3D:BE:53:5F:E4:9D:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1d080e64-ad23-3f26-a5b9-62938424d93c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
130.254.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:5e:d2:d8:64:66:2e:94:25:a9:03:73:72:cc:a8:f1:c8:d9:
42:5c:90:f3:9f:30:96:c0:ce:b1:ad:f3:ba:3f:fa:de:52:8b:
d5:a1:62:9c:f8:c6:c5:14:7b:41:a3:7e:50:84:ab:4b:2a:49:
41:78:78:1e:28:55:f6:8f:81:28:3e:53:dd:55:ed:b9:3f:ab:
6a:a5:76:de:43:4c:f6:11:05:84:97:22:6d:f0:60:24:65:07:
2e:58:ce:a4:f2:a7:66:8b:b4:e3:c5:13:c5:a6:a8:93:9d:69:
ee:0e:b9:41:2c:8e:06:61:cf:c3:72:6b:6e:7a:f2:93:db:58:
7e:e2:a6:c4:bc:2d:c2:d8:30:b6:4b:2a:b4:b9:27:27:1e:ca:
ca:b4:91:3e:ea:e4:cb:85:58:21:e6:23:e5:7f:84:c2:5f:fe:
25:14:cc:19:7a:25:0a:39:7a:26:21:d7:e5:6e:41:60:50:0d:
ed:aa:77:4d:30:97:6e:2e:b0:f6:7a:8b:cb:52:0f:85:6b:eb:
9b:47:20:ba:96:5f:be:3c:92:f4:f9:13:c0:4d:e4:89:0d:20:
e0:6c:2a:fa:fa:23:a3:0c:aa:2b:d3:9c:6f:42:20:5a:5a:15:
ab:ca:62:a8:47:7f:f5:e7:35:67:be:53:ce:1a:d1:19:54:66:
d3:e0:97:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:11:08 2025 by rpki-client