Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/4525d8f0-f689-3085-ae49-7f69eb95ca2e.roa
File: 4525d8f0-f689-3085-ae49-7f69eb95ca2e.roa (raw, json)
Hash identifier: JMKaTKQK78jREUDJsANmvZErDAfv9/SIKEiCIALbGC4=
Subject key identifier: AE:45:CA:D2:44:60:A2:97:48:38:DC:CC:48:98:D6:D2:80:47:62:3D
Certificate issuer: /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial: 010D0C9F432858481F651BEF28272AE2D2AD3560
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/4525d8f0-f689-3085-ae49-7f69eb95ca2e.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 46288
IP address blocks: 45.59.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 23:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:1b:ef:28:27:2a:e2:d2:ad:35:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=2d5eceb4-7985-474e-86aa-8c96af86053b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c4:08:47:ca:88:d4:52:69:58:98:e9:88:aa:
37:ed:3c:47:a6:f3:c9:ac:9a:64:08:60:38:5a:4b:
62:3c:e9:e2:e8:a1:78:41:8a:c9:ee:cb:41:bb:d7:
a0:b4:e8:76:15:60:76:62:10:cf:69:ad:10:f9:e3:
b9:38:a3:a5:b0:ca:82:6d:d1:cb:ce:76:50:97:f5:
85:4b:59:11:f0:0b:72:43:75:1b:a5:b0:c7:e9:26:
8c:0f:91:78:83:6d:02:53:22:0d:6d:43:5a:ad:e9:
54:9d:19:16:3d:55:2c:3c:89:c9:41:1c:c5:ea:28:
fb:ab:56:c9:15:e0:86:23:4e:bc:79:f3:8d:b8:70:
19:67:f0:35:92:1c:4f:cf:48:f1:36:97:a2:bd:07:
fb:62:19:83:43:f3:65:09:82:61:6e:9f:12:17:4b:
c8:c5:fe:42:55:40:e3:6d:0c:75:be:68:89:43:33:
2c:bb:a0:70:9f:06:0c:06:70:f8:87:e7:af:77:41:
b3:e0:f9:e4:d2:c0:3c:15:6a:a7:4b:3a:66:25:0a:
b8:81:8b:8a:66:40:94:86:32:01:6a:67:77:9d:17:
f0:e0:2e:90:ed:3a:d5:42:8d:e8:f7:8e:40:4d:41:
96:90:c0:c9:e8:19:ff:eb:eb:da:f3:b4:cd:4d:03:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:45:CA:D2:44:60:A2:97:48:38:DC:CC:48:98:D6:D2:80:47:62:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/4525d8f0-f689-3085-ae49-7f69eb95ca2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl
X509v3 Authority Key Identifier:
keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:50:34:9d:5b:c4:8b:00:a4:e2:e6:e8:60:4a:77:85:a7:2c:
24:1e:72:ce:d1:1c:3c:78:c5:5d:87:93:2a:a0:75:c8:a9:99:
15:06:7c:ef:dd:c6:d6:89:cc:c8:4e:70:c6:6c:ca:63:44:91:
a9:83:3c:a8:18:91:fe:05:5d:62:d2:a2:99:c2:79:e3:97:ad:
20:11:46:fc:34:05:0a:bd:98:bc:04:27:b0:90:89:be:a0:1f:
f3:c7:02:d7:21:ac:d9:ee:0a:b7:7a:62:95:7e:73:18:02:4b:
bc:a3:65:69:62:4a:7d:3a:12:26:0b:21:ad:0c:20:17:2b:c0:
b1:c5:4d:e4:32:01:2c:61:32:2f:47:22:fe:16:42:3b:94:c8:
73:0f:e7:f5:5e:a0:b5:d2:5a:67:3d:30:9b:f9:56:43:03:2b:
f4:c2:48:83:1c:65:74:69:2e:77:44:d1:ea:87:ba:47:29:98:
8d:d7:3d:5e:fa:b1:03:9c:7b:02:cc:69:9b:e1:79:af:ff:00:
28:d6:a2:fc:f3:a8:6c:db:21:e5:b9:4e:7c:7d:08:8f:b2:31:
ce:8c:f1:e5:e1:bb:38:5c:0e:a5:b9:48:98:6f:27:99:81:ee:
1b:63:ad:e0:33:29:7f:70:bd:f0:f3:51:f6:db:3f:07:2c:2b:
de:61:e2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:50 2025 by rpki-client