Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/90ee013e-00a8-37fa-b84f-a76b8a952c88.roa
File: 90ee013e-00a8-37fa-b84f-a76b8a952c88.roa (raw, json)
Hash identifier: XJHkTy8en3sC6KCCq6DpmB+//+U02m41BJlg0UxXUdw=
Subject key identifier: EB:BF:45:BB:69:30:14:3A:95:FA:8C:57:82:67:27:96:90:1E:80:49
Certificate issuer: /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial: 010D0C9F432858481F6535E5E3A91C407366D400
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/90ee013e-00a8-37fa-b84f-a76b8a952c88.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 30456
IP address blocks: 23.145.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 03:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:35:e5:e3:a9:1c:40:73:66:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=bd41bc3e-78ac-486e-bac4-d07589929ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ec:ff:f5:6f:72:e8:1e:71:3b:f9:f5:a4:4d:
94:94:8f:4b:67:b2:c0:76:4e:32:43:8a:fc:ea:35:
d8:6b:83:ad:67:35:97:71:e0:f2:99:b2:67:0d:02:
eb:e1:7a:c6:f4:e5:f4:8c:02:73:87:1b:3c:10:d5:
ba:df:73:b4:8a:c0:f0:e2:eb:db:f2:f4:7a:73:d9:
f9:4e:51:fc:f9:31:08:f7:3f:46:72:fa:e8:ff:5e:
74:f1:d7:5e:92:c5:01:06:ca:ce:1a:e7:2d:bc:14:
9c:ba:de:65:88:d4:2c:bc:0d:71:b1:18:29:1b:71:
a6:84:9a:e8:02:d3:8d:5b:73:62:ea:f4:fd:0d:8a:
81:e5:23:cf:25:24:81:58:63:f3:cf:13:e4:3a:2d:
da:dc:da:aa:fc:e2:45:1d:1b:3f:ff:33:0e:34:7f:
42:14:a3:9e:c6:b3:95:13:3f:8a:5b:d5:10:dd:e6:
19:54:1d:f9:e6:0c:a3:df:5a:7b:60:2c:4d:85:44:
48:76:5b:7d:8d:6a:b7:83:c6:44:89:15:f0:15:38:
41:e7:7d:7a:83:e9:90:7a:c0:db:be:4d:36:80:0c:
ed:22:54:4a:e8:da:17:9a:0e:17:0b:fe:6f:4a:03:
9c:ee:67:3b:fc:1d:dc:01:11:3b:6f:ab:62:98:96:
a1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BF:45:BB:69:30:14:3A:95:FA:8C:57:82:67:27:96:90:1E:80:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/90ee013e-00a8-37fa-b84f-a76b8a952c88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
X509v3 Authority Key Identifier:
keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:95:57:c5:3a:1c:4e:56:8d:04:67:e9:e4:0e:fb:72:2b:c6:
ed:92:a5:e2:92:aa:6d:76:91:4a:fa:50:14:d2:54:1a:cd:03:
f3:46:3b:cf:7e:83:c0:a0:30:2f:3c:d2:0d:02:b4:0d:03:2d:
22:0c:90:17:21:2d:4b:db:57:31:d5:b6:9e:8e:5f:93:d7:cd:
99:8a:49:dd:82:50:08:bb:ea:4e:5c:fe:84:57:99:f6:ad:83:
43:c3:a4:84:6a:92:11:4d:cf:58:c4:8a:dc:af:1d:e6:37:78:
bf:cf:89:1a:71:54:5f:29:fc:85:a5:da:f5:7d:e1:79:0b:c6:
e0:96:f7:7f:9c:fc:87:4d:92:db:1e:d6:d3:36:8f:6f:22:60:
fc:ff:f5:cc:52:35:39:37:fa:cf:1d:17:7b:2d:5c:9f:75:4c:
cd:07:31:f6:2b:33:52:bf:71:a0:df:80:42:3b:1e:de:a2:80:
85:78:7d:28:d5:8f:af:9b:98:7f:07:74:9a:53:eb:e4:fe:d0:
d8:a0:75:8b:3c:fa:51:9b:51:cd:c6:1c:7d:e1:fc:cf:5b:8c:
05:c5:c7:b1:f2:74:f2:ea:6e:01:32:b6:40:72:3a:7d:b5:04:
84:0b:14:41:d9:bd:61:12:3e:b5:2c:ba:ea:3f:bf:73:31:51:
a5:68:f2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:19 2025 by rpki-client