Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/502b52de-2ce7-3e29-b73d-84a2052f81d6.roa
File: 502b52de-2ce7-3e29-b73d-84a2052f81d6.roa (raw, json)
Hash identifier: Xgy6Fj0MHFwdO1zl0kWFTL1S56Kiqku8cuRCVY4eFIw=
Subject key identifier: 65:72:9E:F7:12:E9:FD:9E:8D:93:9F:36:F3:51:39:CB:2C:20:F3:C5
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858415B4E4805FAEA430961831E80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/502b52de-2ce7-3e29-b73d-84a2052f81d6.roa
Signing time: Tue 13 Dec 2022 18:27:09 +0000
ROA not before: Tue 13 Dec 2022 18:27:09 +0000
ROA not after: Sun 29 Jun 2025 04:00:00 +0000
asID: 30881
IP address blocks: 173.211.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Mar 2023 05:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:5b:4e:48:05:fa:ea:43:09:61:83:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 13 18:27:09 2022 GMT
Not After : Jun 29 04:00:00 2025 GMT
Subject: CN=862d1345-9c7e-406b-aecd-e32acddc48d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:3e:78:d0:da:9b:de:b2:2e:4e:0b:7c:1d:
04:7a:a4:fd:78:e1:11:db:38:f6:dd:a5:0e:07:11:
65:b6:15:bd:c7:40:1e:40:e7:7f:95:9e:88:e5:5f:
ba:ec:89:d2:c7:7c:00:d0:8f:b9:20:da:46:0b:4a:
0a:3d:ae:45:6a:ef:54:c8:4a:dc:f4:b5:71:53:ce:
58:01:a0:a9:9c:71:0f:5c:38:94:04:be:60:69:83:
78:78:14:c5:a0:6a:a4:75:6e:8a:9e:01:c0:e8:46:
7c:53:02:a7:ca:2b:31:a1:32:7a:f9:ea:ae:73:f1:
c7:fc:fb:6b:ee:84:27:44:54:27:fe:9c:e5:5c:bf:
07:6a:bf:0e:2a:07:b7:2d:63:f1:6d:1a:ad:83:49:
98:f6:cc:ea:1f:98:fc:a6:1a:ad:03:01:8e:df:1f:
46:36:e8:95:59:57:ce:c9:ba:ec:71:6a:a0:79:a0:
4d:95:ed:12:ce:21:cf:c2:fe:85:7f:80:0f:da:6a:
0a:df:6f:26:1b:7a:19:7d:ab:e6:5f:dd:d7:bf:b0:
14:8e:e6:d5:f9:cd:80:cb:e3:f3:a8:fe:f8:e7:91:
1b:fa:7b:b4:c9:cc:3a:d8:00:cc:ae:e3:28:f7:76:
fe:95:38:61:f4:0a:d3:23:e3:b9:37:9c:78:14:4d:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:72:9E:F7:12:E9:FD:9E:8D:93:9F:36:F3:51:39:CB:2C:20:F3:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/502b52de-2ce7-3e29-b73d-84a2052f81d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.211.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:65:81:45:7f:d5:24:03:a8:2a:c6:c1:5e:8a:5d:11:d7:6e:
98:7a:c3:a4:1a:d2:26:65:72:02:ba:e6:be:1c:af:39:b5:3d:
0b:7b:f0:c4:9c:df:3a:9f:ad:02:4c:c6:7a:0d:ca:84:89:ee:
f0:75:d1:53:c1:c8:96:dc:e3:e9:7f:f3:ff:fc:4e:10:4f:3b:
de:7e:1f:fc:2b:99:e6:d5:00:35:81:45:37:e4:4e:42:82:03:
53:10:51:ed:34:8c:db:95:ac:84:9a:ac:f5:98:b7:0f:66:c6:
a6:5a:85:19:61:50:44:57:7b:30:2e:4a:f4:42:6e:24:93:b8:
92:34:46:ed:0b:31:c5:93:c5:9e:3d:e9:af:cc:33:5e:36:df:
8b:59:6a:24:2e:d6:01:4f:50:05:9d:5d:75:1e:3b:db:a2:f7:
f6:66:ad:1a:b3:75:98:df:e2:c5:d2:34:ed:8b:2f:50:b0:cc:
47:5d:80:65:14:b6:c2:f7:9d:31:cd:23:5e:f2:24:ca:23:02:
bc:65:4a:a1:6f:17:d6:97:b4:7d:ee:46:56:de:ca:50:55:a0:
5f:41:87:94:41:6b:bc:32:44:6e:de:1f:bd:0f:99:a8:b0:f1:
d4:5e:b6:8b:8d:76:ff:b3:e4:e4:0c:f5:2e:42:44:32:6d:b2:
82:35:ee:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:05:23 2025 by rpki-client