Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4968fb81-26e5-38d9-8b1f-3c449fe94d85.roa
File: 4968fb81-26e5-38d9-8b1f-3c449fe94d85.roa (raw, json)
Hash identifier: +n1CQU6CaQ4cPDLdUShCgWUzi8d+GHpILsn/5I8Omxw=
Subject key identifier: AC:AC:CF:01:A5:DE:FE:67:FD:9B:5B:45:29:C1:A2:FF:A2:B7:B6:16
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285847ED24BB0ECB49A46E5B6EA900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4968fb81-26e5-38d9-8b1f-3c449fe94d85.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 43641
IP address blocks: 173.211.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 01:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:bb:0e:cb:49:a4:6e:5b:6e:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=4b013b2c-029e-4b68-aa57-ef7bde43794a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:85:90:85:4f:50:67:40:ef:36:ee:3b:9f:fb:
ad:e2:0c:45:49:ae:5b:b8:9b:fb:09:26:4a:67:02:
30:15:ff:3b:55:87:8e:f4:46:65:20:d4:66:6f:d2:
fa:a4:ed:59:27:9a:d5:0d:f9:1f:c9:6c:49:98:33:
4e:d3:4c:ea:fe:d7:ab:fa:14:11:43:c3:87:2c:47:
c4:a6:15:6a:12:ab:bc:ba:ad:20:17:01:27:af:70:
67:41:21:d1:b7:d3:1b:28:91:33:e3:48:00:1c:5f:
fa:04:be:57:9d:d8:96:3a:bc:b8:b9:11:8b:68:cb:
3d:c5:55:75:23:ad:b7:58:90:3a:16:eb:58:bd:7b:
08:19:95:7f:79:7f:7a:6c:43:48:6f:a9:c4:9a:b4:
b7:0b:f3:48:62:ea:6c:cc:fd:b4:64:61:58:48:3f:
1c:71:44:35:26:ef:a4:1e:03:36:33:69:1c:e1:2e:
e7:27:cc:b3:f0:1d:e1:f9:c6:6a:f2:7e:2d:fd:fe:
bf:bc:18:74:03:52:19:f3:f7:78:d7:5e:36:6b:d3:
fb:11:d4:bb:38:b2:7a:a5:6b:9c:2b:ef:c3:94:7b:
9e:09:13:cb:e7:9d:58:03:5a:62:cc:98:c0:0d:db:
e7:a7:e0:a4:e0:77:5a:ff:8b:e4:eb:75:37:72:b1:
77:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AC:CF:01:A5:DE:FE:67:FD:9B:5B:45:29:C1:A2:FF:A2:B7:B6:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4968fb81-26e5-38d9-8b1f-3c449fe94d85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.211.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:50:1e:ea:f7:e8:33:32:4e:1f:e7:a7:e4:40:11:98:2e:98:
03:89:f9:fe:68:6e:71:fd:27:03:25:1d:0c:a5:29:5c:d5:d6:
0c:d3:53:ea:b1:21:60:dc:66:f8:8f:b2:c4:80:54:c0:7d:6f:
2c:8c:70:1f:02:e9:d5:7f:83:17:01:85:ac:01:3d:66:5f:b6:
fd:1b:31:86:a4:05:86:ea:1c:81:b9:42:9b:0f:3d:29:bf:de:
de:cf:8b:2b:a7:c7:55:60:51:80:4b:e7:cf:57:16:83:56:ae:
fe:ba:14:0e:af:00:8b:76:f9:8c:ac:55:ff:78:6f:07:ea:25:
97:04:5d:f6:b2:69:66:58:ce:57:ed:bf:d6:98:eb:68:bd:57:
3c:cd:eb:cc:a5:c1:88:ce:a3:ac:83:52:f2:80:5e:79:cb:8d:
e2:18:16:a5:c6:70:2d:ff:44:11:2f:52:fb:38:8b:5c:59:53:
3e:04:f7:62:44:3f:42:32:b2:0d:58:75:62:58:23:ed:cc:6e:
3d:e9:14:17:b3:6b:53:41:d7:eb:26:9a:67:49:ae:fc:d0:33:
5c:38:25:21:3a:da:3e:d0:53:76:3f:20:14:7b:07:cc:47:1a:
4a:f2:03:4b:45:c7:59:9c:ca:14:49:57:e7:1d:e5:db:73:11:
f6:84:3b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:36 2025 by rpki-client