Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a3d6af5-af08-3b1d-9d6b-c9f583c3056b.roa
File: 9a3d6af5-af08-3b1d-9d6b-c9f583c3056b.roa (raw, json)
Hash identifier: 5KvY2WYEnDMcjQbSN9x8K5/ME1ntTJyrtajqlnXWwmQ=
Subject key identifier: 0A:BF:7C:F5:CD:56:AF:E2:C3:19:7D:8B:11:9D:3F:57:98:4A:A9:1F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A7576335AD5BBF0BF4040
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a3d6af5-af08-3b1d-9d6b-c9f583c3056b.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 108.59.88.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:75:76:33:5a:d5:bb:f0:bf:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=d2d1a1c5-3124-4208-815e-9704d857147b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:ec:23:20:2d:82:0d:38:59:e5:7f:d7:bb:
9d:d1:eb:58:0b:9c:27:27:b5:86:67:16:07:5d:38:
15:74:b6:8c:4a:77:fd:a4:d8:bd:13:76:80:48:80:
38:3a:fc:33:d8:71:19:cb:17:2f:d4:16:22:12:f0:
a7:9d:be:37:a1:55:99:90:94:30:a8:30:bd:34:a1:
e9:cd:aa:e7:17:24:18:44:dd:35:54:23:c0:a4:54:
82:8c:5d:ee:7b:81:e7:e9:ae:94:2d:cc:72:df:13:
fb:b6:b8:25:3a:c8:b2:38:0b:b2:ad:84:c0:33:7f:
ce:6e:bf:e2:a4:4e:8d:59:76:08:18:12:9a:4e:1c:
89:7a:4a:22:84:f4:d5:4c:e7:8d:ae:ba:0f:aa:01:
53:a7:05:45:b2:e7:7d:b1:10:1a:3f:6e:95:a9:50:
15:25:9c:9e:54:7d:69:b5:9c:32:36:5c:af:a4:c9:
52:1b:b4:c2:b6:cf:d9:89:97:32:68:23:a7:6b:97:
14:34:bb:a8:f7:55:11:9e:39:37:0c:05:a7:f8:71:
a4:72:b0:c9:a9:6f:71:ef:4c:0f:a1:16:26:32:78:
00:93:ce:46:da:c7:10:a1:f3:99:d2:6f:b2:61:b8:
9e:c0:ee:4e:f7:90:e3:c6:3e:7b:52:c6:18:e8:36:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BF:7C:F5:CD:56:AF:E2:C3:19:7D:8B:11:9D:3F:57:98:4A:A9:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a3d6af5-af08-3b1d-9d6b-c9f583c3056b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
108.59.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:54:f1:c2:af:35:da:35:a2:0f:84:4f:aa:69:25:b1:66:f7:
2d:4c:0a:bb:9d:81:be:2d:8e:91:33:62:de:29:2a:76:74:ac:
3a:1b:98:f8:23:df:8b:3b:e6:9f:15:cd:1b:80:9e:ba:3f:be:
4b:b4:4d:55:19:9e:c1:fc:f3:79:2e:c1:ad:4f:d3:cf:cd:a6:
a7:b8:52:0d:37:44:3d:e1:13:35:3d:2f:6a:53:7c:ea:57:a8:
6b:bb:ae:55:74:a0:4f:6f:c9:cf:14:49:cc:a7:5f:8e:73:fe:
fa:1d:5a:f6:ef:a1:af:9f:6e:1e:fe:71:a1:9e:10:cd:5f:b7:
96:96:6f:18:29:20:40:b8:34:ed:6a:e6:5c:08:02:ec:34:57:
35:06:79:a6:dd:ba:ca:ea:c1:56:d8:7f:2c:c3:c9:38:65:97:
58:d8:b5:cd:62:7c:f1:10:17:36:9f:02:f5:2c:e2:3e:72:14:
d6:d2:a0:61:80:52:0f:c8:7c:ad:72:a6:31:2f:07:80:0b:e0:
cb:60:2a:de:30:72:99:76:50:78:8d:a6:56:68:d1:55:bb:e2:
16:dd:24:10:e9:e4:9e:9d:fa:d2:67:4c:4f:17:d4:cb:67:53:
81:b2:0e:60:83:00:2a:7b:14:00:f7:32:55:76:ce:0b:3b:a7:
3f:06:cb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:49 2025 by rpki-client