Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/a83946a3-4f84-3fac-b1da-2cd2eaa511b6.roa
File: a83946a3-4f84-3fac-b1da-2cd2eaa511b6.roa (raw, json)
Hash identifier: TIu9tYLuNxWZL7jEfuP4XhimT0dFoS7koPw2fAY0bOE=
Subject key identifier: 78:AA:DB:4A:B5:06:ED:79:DA:72:0F:8D:40:80:54:8D:DF:49:8B:3E
Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial: 010D0C9F43285847FF4A6CDC2CF3E55D1F73A9C0
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/a83946a3-4f84-3fac-b1da-2cd2eaa511b6.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 36040
IP address blocks: 207.126.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 02:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6c:dc:2c:f3:e5:5d:1f:73:a9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=3d1a2f5a-0551-477d-86f7-547dfcfe5ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:23:14:01:6b:50:71:34:b4:03:30:e3:70:
96:54:c2:2a:71:4d:1c:05:f7:42:83:1f:73:3f:14:
9b:8a:a1:1d:0b:66:ee:1e:99:07:e6:9e:71:72:68:
cd:48:5d:be:4f:39:d2:ae:55:7a:fc:88:a1:3d:e9:
23:07:4c:de:2f:cc:df:6b:61:98:32:f0:91:a1:7d:
3d:f1:82:38:f0:75:51:f1:e8:e5:94:7f:70:bc:0b:
83:86:73:ee:42:18:eb:de:c7:62:ad:cf:cc:02:23:
9c:4d:9c:cf:0b:92:50:c3:ae:6c:51:76:fc:e7:cc:
dc:4d:53:3b:27:f1:d4:1e:f5:12:6a:99:77:16:b4:
f1:35:b3:03:b4:29:77:11:33:29:86:47:1b:5e:f4:
3d:e1:89:bf:a9:cd:95:21:71:f5:9a:6e:c1:48:12:
bc:5f:5d:a4:ad:bc:2b:39:85:68:c1:fb:60:ad:b3:
bc:0e:82:62:cb:c4:a2:fa:f9:9a:c9:b9:86:65:9d:
13:a1:cc:e2:dd:db:91:f6:0c:ee:ce:c4:5d:9f:39:
26:7b:fc:d3:de:1e:2d:b1:cd:8b:e5:1e:30:64:df:
97:7f:dd:ad:2f:c9:3e:36:5c:09:e3:e6:d0:d7:94:
e5:94:d4:ee:a9:e6:cd:35:c8:e3:fd:6d:2a:55:46:
4e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AA:DB:4A:B5:06:ED:79:DA:72:0F:8D:40:80:54:8D:DF:49:8B:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/a83946a3-4f84-3fac-b1da-2cd2eaa511b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
X509v3 Authority Key Identifier:
keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
sbgp-ipAddrBlock: critical
IPv4:
207.126.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:f4:7d:c4:57:26:e5:a2:fb:81:75:ed:22:3a:54:93:b2:1b:
b1:a8:ce:74:ef:b7:22:95:8f:30:34:0c:8e:b8:17:fd:31:15:
9e:42:a8:cc:a5:8b:94:87:b4:70:b8:5c:52:75:7e:39:ca:3c:
e8:aa:aa:a1:ab:85:56:0e:7f:23:c9:c4:16:45:4e:4c:e8:5c:
dd:a0:d7:eb:36:7d:0a:19:91:cf:9a:5b:84:c3:91:be:d3:7e:
58:85:1e:45:fd:55:5d:82:ee:81:2f:6f:ab:9f:cd:fd:6f:64:
00:e5:a3:df:cc:f2:60:52:2c:fd:99:cd:a7:7b:02:92:2c:11:
e6:88:19:6f:42:e3:dc:8f:51:4d:13:7c:f4:c4:60:39:c8:2d:
67:9f:d0:78:6a:b5:2d:19:c0:0c:28:f1:c5:3e:64:b5:6f:2e:
25:18:96:d3:0e:ef:12:3e:4a:a0:cd:de:65:2d:9c:3e:6c:91:
3f:3f:86:33:e2:84:9a:05:f8:a1:c8:fa:27:e5:7b:83:fb:48:
a6:fa:90:56:38:d0:45:c5:cd:fe:17:91:18:ae:81:01:b8:a6:
c5:a0:ea:cb:59:de:55:0a:69:1f:4d:56:55:45:4d:ad:c8:ff:
b5:45:b4:52:82:94:1d:b6:34:9a:b1:7b:b3:d1:2c:3a:d3:0d:
fd:6e:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:00 2025 by rpki-client