Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cecc6aa5-98a9-3b69-b763-7222629e7bfa.roa
File: cecc6aa5-98a9-3b69-b763-7222629e7bfa.roa (raw, json)
Hash identifier: eIu1g6BEADFWh2m0iFKMA5UHWFgzTD06/kog1+QK0XY=
Subject key identifier: 0D:0F:CC:C1:EA:35:B2:5B:54:9F:AC:6E:83:06:4F:7C:A1:BD:55:6F
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285840EEBAF7E38E7E2C59933FC080
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cecc6aa5-98a9-3b69-b763-7222629e7bfa.roa
Signing time: Fri 16 Sep 2022 20:27:08 +0000
ROA not before: Fri 16 Sep 2022 20:27:08 +0000
ROA not after: Wed 21 May 2025 04:00:00 +0000
asID: 0
IP address blocks: 149.19.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Feb 2023 17:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ee:ba:f7:e3:8e:7e:2c:59:93:3f:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Sep 16 20:27:08 2022 GMT
Not After : May 21 04:00:00 2025 GMT
Subject: CN=da39bc3b-73e6-46ce-a673-a34a6bce815e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:53:ef:b3:b0:d5:f9:cf:77:cf:b7:1d:7a:
c6:1f:90:77:23:eb:b3:0b:d6:a2:1f:47:f0:70:86:
fd:cf:a5:f0:74:19:e5:0b:f9:c0:77:d0:5a:0a:8e:
16:cd:58:ee:a6:aa:ef:e0:a5:36:d8:4a:63:a2:5d:
e4:7a:4f:0c:c6:cb:13:a9:0f:e9:31:b7:44:2b:e0:
1b:d9:69:d3:57:78:48:8f:86:5b:ae:ae:b1:26:8b:
e0:42:3f:94:24:ce:17:dd:60:5b:15:79:c2:d3:e9:
b2:76:48:b4:ce:f0:94:11:a4:e1:be:76:de:f6:96:
ce:18:35:96:7f:f4:ba:24:c2:53:8d:3d:a3:00:cf:
5b:6f:79:eb:44:5c:81:c0:97:b4:4b:db:9a:5e:96:
d0:e6:42:6a:16:b2:1e:30:e4:1d:8a:0f:0e:b6:bf:
84:6a:87:e1:34:c2:69:2b:6d:45:df:5f:72:82:0b:
ee:8b:0b:49:bd:32:2c:cc:82:f0:01:8f:d4:ed:75:
4d:4a:10:60:86:f3:2e:da:49:b9:09:c7:eb:2b:09:
de:3e:54:72:f9:dc:06:d0:6b:e4:6d:e1:3c:cf:dd:
b5:41:08:ce:91:7c:fc:4c:57:d1:78:3b:78:37:78:
fa:d5:2f:9f:3c:ba:07:7f:d8:e4:fa:2b:13:34:45:
83:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0F:CC:C1:EA:35:B2:5B:54:9F:AC:6E:83:06:4F:7C:A1:BD:55:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cecc6aa5-98a9-3b69-b763-7222629e7bfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
149.19.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:15:28:cf:f0:2d:e9:f8:d1:a0:79:da:76:90:78:56:17:2d:
57:93:83:45:d0:bc:56:56:68:c2:23:55:1c:c1:e3:eb:86:dd:
71:6e:ca:d5:20:8a:89:b0:1e:e4:23:ae:71:ac:1d:9c:bc:d2:
d7:dd:97:4b:30:3c:2c:df:53:53:59:dd:d4:45:a5:7e:c2:14:
ae:38:7d:6e:38:d6:26:98:9b:12:30:bc:20:de:f9:e8:e4:53:
23:51:46:fd:87:c0:33:ff:1f:ab:95:3f:16:c9:88:fd:79:d2:
45:f4:68:24:23:49:a9:44:dc:6b:ea:97:4b:71:a2:22:2e:40:
93:d7:75:53:78:9c:e1:bb:9a:7a:fd:f6:ec:fd:af:17:4d:b9:
1f:ae:86:d9:d3:6f:4f:21:35:6d:0e:99:fd:67:12:73:9e:db:
09:2a:f8:b5:50:e7:66:9d:61:b6:9b:20:94:fa:81:06:c2:02:
1d:35:b7:c2:ae:c2:85:a6:26:0a:7f:4c:25:81:75:3f:e4:8e:
66:87:c9:24:d1:bb:3d:d3:db:e7:35:c6:90:e2:f3:b5:41:7b:
32:c5:d3:c8:e5:af:52:89:59:cc:54:f9:ec:0f:2c:c6:4f:c2:
bb:a9:67:74:c7:e1:a2:43:77:e6:90:97:76:11:45:0f:80:09:
66:29:82:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:50:17 2025 by rpki-client