Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/36ec94fe-ca47-3260-b205-fa7ba368981a.roa
File: 36ec94fe-ca47-3260-b205-fa7ba368981a.roa (raw, json)
Hash identifier: pRVx64thOyJULEQEQOOnMDb136dMuHNo2eLwfda94p0=
Subject key identifier: 10:32:F8:6B:01:B0:F0:55:B7:A3:D7:0F:A8:E3:43:66:C9:23:44:33
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848EC969B68A56C1440A3A63700
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/36ec94fe-ca47-3260-b205-fa7ba368981a.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 7018
IP address blocks: 208.89.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 09:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:9b:68:a5:6c:14:40:a3:a6:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=0566f039-23fd-454e-9148-edb387373e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:03:b9:22:69:87:c5:f3:11:02:ee:6e:04:
1a:01:42:04:37:62:61:d0:05:ec:2b:fb:28:bd:a3:
99:81:52:34:aa:bf:71:62:76:b2:99:ef:f7:25:c0:
de:94:ac:38:9c:a9:d9:7c:76:c0:6e:70:01:22:8c:
83:1a:53:9c:97:3c:36:10:ee:3c:ee:fe:02:60:09:
d8:1e:6c:06:f0:05:84:c7:a7:a1:83:db:6d:fc:c9:
6f:98:74:d5:1a:fc:3b:d0:b6:10:9c:81:94:2d:b7:
65:32:6f:48:48:2f:48:50:63:4a:51:68:a1:80:99:
b0:b4:12:72:2c:02:0f:81:6f:af:ae:fc:e1:e1:3d:
72:72:b8:10:f0:c6:10:37:5e:0e:74:d4:4b:81:ea:
c7:3a:da:f0:f0:30:38:b3:34:da:bd:0f:e2:51:6b:
04:6a:12:dc:d0:ed:24:f0:6c:8d:4f:c6:63:d6:c2:
4b:d1:28:ba:2f:9d:3b:eb:7e:c5:f4:f3:ce:76:8d:
0a:dd:97:a7:ae:c3:b8:e7:e0:fd:a4:0d:51:05:d8:
0e:bb:fc:97:fd:7d:c8:4c:c8:71:df:06:66:d0:5b:
39:ef:b9:88:15:bb:36:bb:f5:0d:e5:a0:c5:56:b5:
f0:00:94:b8:7d:13:26:15:fa:e5:77:fe:a2:45:e4:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:32:F8:6B:01:B0:F0:55:B7:A3:D7:0F:A8:E3:43:66:C9:23:44:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/36ec94fe-ca47-3260-b205-fa7ba368981a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:c9:08:e8:7e:c9:0b:0f:49:de:af:b4:90:5b:8d:1b:71:b8:
4c:d7:3d:55:0b:f2:9c:29:cf:44:39:ff:6c:e6:ff:9b:c9:f0:
ac:04:52:85:20:ac:5f:af:90:b1:62:9e:f7:d3:4c:36:06:30:
e9:52:4b:f5:59:f5:d4:6b:75:d3:f5:d0:e0:99:5e:19:5a:1d:
7e:a7:e4:88:d3:2e:5e:fd:94:4a:15:4c:8d:0e:13:ab:9b:77:
38:49:8e:6f:bf:15:74:83:11:a4:d0:a1:67:26:f3:9a:16:e6:
32:77:8d:7c:46:9f:eb:82:0c:eb:8e:10:94:d1:de:5d:02:d4:
ec:19:64:b3:a4:94:d3:41:09:68:cd:9f:0a:40:3b:65:b7:74:
1b:51:d9:21:8d:01:a2:04:87:34:ab:89:b2:6f:4c:36:07:5c:
4c:a7:31:9e:9f:d8:c9:e9:f3:b3:5c:a7:0e:02:73:08:4d:55:
16:c3:48:ef:00:95:5a:ad:d5:7c:32:47:4d:47:ea:cd:1a:5b:
92:0c:cf:40:25:24:96:5b:74:1d:aa:4c:26:d0:1b:66:52:10:
bc:4a:ae:50:d8:ad:ab:12:61:97:eb:6a:7d:47:1e:7b:71:8f:
16:e8:63:bf:f8:06:d0:77:0a:f8:e0:ec:34:35:a7:92:73:4d:
a3:89:63:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:37:34 2025 by rpki-client