Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54e4582e-ec54-3705-b7fc-6a5fa93620b3.roa
File: 54e4582e-ec54-3705-b7fc-6a5fa93620b3.roa (raw, json)
Hash identifier: NYPQR1dgyiwqScjBql7xxe6p9tpig+dLBiM7HfRbN+Q=
Subject key identifier: 69:F5:EF:CE:D7:52:B5:37:C1:D9:49:FF:9A:A7:80:17:7F:96:CB:15
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A566E43F44EECC8BEE100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54e4582e-ec54-3705-b7fc-6a5fa93620b3.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 199.223.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:56:6e:43:f4:4e:ec:c8:be:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=dc4ae4fd-dc55-40b9-b4d9-991c0d976ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8c:5e:db:27:29:42:2a:76:70:f7:32:0a:ae:
5b:f7:1c:ae:19:64:14:ec:e8:a7:5b:4c:f8:73:31:
bb:58:c1:ab:00:1b:eb:bf:a0:f7:af:c5:86:8d:0c:
35:3b:ea:3f:f7:fe:83:8b:42:fd:46:2a:96:f9:83:
c1:9c:34:17:f1:73:41:ad:d8:b4:c6:67:6c:3d:53:
f8:3d:13:aa:c0:1c:be:10:48:e7:3f:8f:04:d6:8c:
ea:3f:bc:8d:d7:75:ef:e1:44:87:52:c4:ab:0c:36:
ef:98:57:ab:2b:99:89:2f:0d:ab:c7:7e:51:00:80:
8b:63:a3:07:f9:c2:d1:d6:1e:99:8e:6b:6b:88:ed:
66:80:aa:3d:4a:75:70:90:f8:6a:dd:d5:79:58:3e:
60:73:a9:91:bc:e4:00:96:a1:70:fe:3a:74:86:73:
38:74:c5:4e:f0:0b:33:ed:ea:28:78:65:05:d8:dd:
38:80:52:31:e3:d8:a7:b2:c6:f9:3c:00:f8:99:8f:
d1:03:19:83:9d:52:00:7f:33:6c:da:05:05:6f:b1:
14:25:83:72:9b:d4:9e:29:4b:f9:38:6b:7f:de:47:
90:c2:cd:52:92:0f:de:bf:fe:12:17:8f:0c:53:fc:
e8:8d:30:92:f3:b1:f5:52:03:06:d7:9f:59:3d:7f:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F5:EF:CE:D7:52:B5:37:C1:D9:49:FF:9A:A7:80:17:7F:96:CB:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54e4582e-ec54-3705-b7fc-6a5fa93620b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.223.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:b1:55:81:92:dd:28:3a:12:81:f1:e1:2c:e6:39:dc:82:6c:
b6:7e:1b:a8:7a:18:be:1a:53:3c:10:e6:b5:71:f8:a9:a9:9c:
ba:2b:db:dc:f3:c5:e5:8e:64:02:e5:89:01:96:46:91:d5:60:
6c:e3:4a:ae:c0:b2:2b:09:42:99:f2:d6:af:30:d2:64:ce:a0:
fe:17:bf:68:10:e1:5c:89:c7:0d:cf:9b:fe:6a:22:f2:16:b9:
fc:3d:c8:55:cd:b5:08:1e:1d:db:62:43:6e:ea:60:9f:26:87:
10:1d:16:ac:63:ba:22:b8:ed:de:13:6f:23:17:a7:ec:0d:4b:
f1:6d:f1:6c:29:27:e7:94:4b:29:7d:fb:52:b6:26:f3:32:1f:
6d:61:d2:f0:84:cb:26:bc:94:8c:eb:f8:13:79:bf:05:9d:af:
54:ff:7c:15:11:12:17:9b:fe:1d:92:2d:93:39:3c:0f:97:b3:
3a:2c:c4:59:b0:02:67:0b:07:ee:32:62:65:78:1e:90:f6:4a:
88:da:a4:57:83:39:07:7d:5e:ad:9b:7d:ce:0a:d3:8e:79:85:
08:2c:f0:45:88:e3:02:e4:52:80:0a:a5:a0:fe:bf:99:a7:83:
7f:61:28:d4:60:4a:c7:fd:3f:bc:29:16:de:af:6a:52:63:5f:
4f:4c:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:53 2025 by rpki-client