Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4db004e1-40ab-3696-a28e-ecbc94b5f16e.roa
File: 4db004e1-40ab-3696-a28e-ecbc94b5f16e.roa (raw, json)
Hash identifier: Y9GnqDJvc8liaLtPFszSFoX+0KOFUSazb+h4fEIcCeY=
Subject key identifier: 70:CE:AA:A0:27:57:CB:A1:69:DC:0A:99:42:4F:5C:17:2E:98:86:3C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6942A346628C37F59E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4db004e1-40ab-3696-a28e-ecbc94b5f16e.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 199.192.113.0/25 maxlen: 25
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:69:42:a3:46:62:8c:37:f5:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=f0673150-593b-472e-8532-b9e1669c5b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:15:b8:d8:65:82:70:10:5f:82:8e:96:a7:75:
bd:2a:b9:57:fb:39:02:2d:8b:c5:9e:d4:29:56:fe:
58:9f:6b:97:93:14:1c:b2:0e:28:6b:67:f4:c5:b3:
a6:39:c6:8b:47:88:ea:75:76:81:36:3a:4c:26:39:
87:cb:af:a7:d5:43:cd:f5:69:1a:bc:2f:0d:4b:d3:
65:6b:f3:9a:91:a5:bc:2c:02:ad:b7:c6:4b:fd:d9:
7d:4c:71:14:fc:78:a7:24:1f:a8:73:d6:66:1e:51:
94:6a:13:0b:50:b9:bb:a2:d5:58:50:66:93:b6:f2:
37:cb:37:21:9a:d6:d6:5e:be:0d:81:57:c3:c6:25:
7b:1f:ca:28:04:7b:33:9e:ac:a9:80:44:15:2d:f0:
a8:3e:61:9f:c0:65:50:d3:43:67:ed:2d:95:e5:db:
31:74:df:05:f0:0f:81:b0:43:b3:31:d7:a0:30:da:
14:0b:6f:44:3b:ce:db:5b:e7:27:3b:b7:95:1d:73:
cc:a2:3b:fb:5f:a1:fd:db:7d:ec:2f:5e:01:51:b2:
d2:93:26:71:f9:13:05:45:b6:ef:e7:3c:db:65:c1:
b5:7a:7b:23:ef:a8:69:e6:52:a9:c6:c2:55:2c:10:
74:31:b7:9e:a5:10:bd:30:ba:95:81:d8:6e:a9:c1:
93:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CE:AA:A0:27:57:CB:A1:69:DC:0A:99:42:4F:5C:17:2E:98:86:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4db004e1-40ab-3696-a28e-ecbc94b5f16e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.192.113.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:d8:c2:6e:95:ed:b7:5b:a9:91:2c:97:12:91:ee:31:b1:4b:
48:f7:c0:58:91:2c:f0:53:6c:33:41:b8:a9:21:57:a0:b4:a3:
bf:dc:f6:7d:df:15:b4:47:27:e1:ef:b3:09:93:aa:ba:3f:26:
b5:4a:9f:c8:21:94:4f:31:b6:77:64:47:ea:3f:f7:03:f8:e3:
3f:de:54:ce:a8:82:da:01:dc:6d:dd:36:2d:df:b0:ed:62:1b:
5b:9a:99:fb:6c:83:37:16:7f:e7:74:92:1d:90:e6:ca:b6:cb:
cd:f7:cd:67:52:78:21:ae:df:5c:fc:6a:a9:a1:12:08:c5:5d:
77:a8:0d:21:90:e2:30:f0:49:f0:92:5a:f5:1b:4c:63:dc:92:
22:42:dc:f5:0a:08:5c:c3:a8:2f:d4:3c:19:b6:73:f7:1d:37:
7b:b8:7e:fc:05:6d:25:b6:3e:31:f7:9f:a5:3d:0b:08:64:58:
c8:60:3c:fb:2f:37:7e:2d:0d:f4:b2:78:c1:cd:4b:c6:c1:9c:
c7:86:54:9f:d7:48:ba:b0:89:22:47:aa:68:96:4e:b0:ab:32:
ff:dd:d2:f6:0b:cf:59:92:db:a6:4a:78:80:95:99:bd:a3:70:
76:2d:b0:5b:fb:4d:b0:5d:2e:b0:db:85:07:b2:ed:74:26:7c:
fd:8e:08:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:42 2025 by rpki-client