![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8565204e-4338-3f56-943c-12a24cdfdc0b.roa
File: 8565204e-4338-3f56-943c-12a24cdfdc0b.roa (raw, json)
Hash identifier: W+8aH3DgnVV+UbPuD0arCcVvqc0c6Hq0pDiJwF2p/zw=
Subject key identifier: 1E:B8:E7:13:B1:3C:CF:52:DD:7C:E6:8C:06:0A:5F:25:A4:74:5F:7B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A79AD82C62D5F5AD3C080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8565204e-4338-3f56-943c-12a24cdfdc0b.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 104.154.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:79:ad:82:c6:2d:5f:5a:d3:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=65b3a277-9b89-416f-b7ac-7705b63de6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ae:96:20:26:72:bb:16:a9:f2:55:2e:77:06:
f4:f6:5e:1e:a9:9c:2b:f0:4d:80:33:67:97:f5:97:
f6:04:51:ae:e7:56:53:49:f2:07:56:d8:0d:47:f6:
ca:5f:4d:b8:c4:a7:7f:44:cc:8b:d0:00:27:63:c5:
cc:dc:22:cb:d5:33:86:a5:31:25:aa:68:fd:14:e9:
2d:e1:7e:01:4b:d8:19:6f:a0:3d:a5:a5:08:13:61:
31:34:d9:6f:9a:2e:58:3d:e1:79:19:2b:93:8a:7f:
01:48:c8:72:f9:bc:fd:9c:94:d9:bc:e5:82:dd:62:
34:e4:fa:68:19:06:c1:d2:fe:2c:8d:9b:cb:57:f1:
70:c7:04:5a:e4:5f:4f:0f:28:19:9b:57:cb:cc:c7:
49:5e:10:a7:18:37:3e:5e:05:a9:3b:a9:77:2b:cf:
6e:04:ef:c9:5b:40:6c:84:d1:5f:96:f7:b8:fd:aa:
a0:65:d0:a7:81:48:0d:06:a5:c5:4b:b0:be:70:61:
fe:4e:2a:87:cc:2f:ac:58:eb:a9:75:ce:2c:62:ae:
98:8a:17:5d:3a:a7:dd:3b:5e:bb:b7:8a:5f:93:ea:
12:8f:f8:6c:a2:41:32:47:45:2d:a3:c1:92:a9:e7:
cf:e2:72:ac:5d:79:16:f9:98:0c:97:64:03:7d:be:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B8:E7:13:B1:3C:CF:52:DD:7C:E6:8C:06:0A:5F:25:A4:74:5F:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8565204e-4338-3f56-943c-12a24cdfdc0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:b8:58:59:d9:04:60:37:56:51:3e:da:a4:12:f4:f9:9b:32:
a6:c2:ac:09:49:0a:5c:63:fc:1e:be:3b:c1:af:89:70:47:93:
bc:c1:3a:07:cd:b7:ab:bd:ea:9c:0f:79:88:46:e2:f2:d8:39:
fb:86:a3:7f:03:e9:9e:71:21:52:01:df:59:ea:b1:04:94:56:
b7:14:2c:a4:1e:f5:49:44:68:7f:a9:44:24:71:59:2f:e6:f3:
88:92:5f:63:7d:23:56:3b:24:3f:6a:ba:5d:db:f9:3d:ed:72:
88:46:c8:46:2e:84:70:c7:fa:c8:44:ab:f6:87:d8:95:2d:b1:
6a:f5:1e:79:5a:6a:e4:f6:4b:c0:ab:94:5a:1f:85:ab:a1:38:
6c:a0:eb:b8:73:eb:ec:af:28:e6:3c:1d:00:36:cf:35:3f:ff:
67:79:e5:bb:b7:97:72:29:c3:f4:c0:c0:c4:27:49:7d:61:78:
5b:34:93:85:6e:10:55:5c:17:88:3d:84:0d:86:e6:eb:71:bd:
98:a1:2b:e2:d0:00:e9:da:94:f8:35:23:96:89:d7:f3:90:18:
23:61:bc:9f:82:37:fc:d7:28:7a:1b:dc:c5:0f:fa:f5:21:31:
93:68:2d:8a:8f:43:a9:74:b2:f1:62:ba:a1:77:85:71:71:1d:
b8:80:1a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:28 2025 by rpki-client