Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bef29a27-caaf-36f8-8545-b86611fc596f.roa
File: bef29a27-caaf-36f8-8545-b86611fc596f.roa (raw, json)
Hash identifier: 9KscEFQeuiHB4/AZkqHgzRiG/mOs2wjom8J6OngA05I=
Subject key identifier: 15:2F:BC:DD:CD:D9:FC:FF:AB:2D:23:42:12:C4:AB:CC:39:81:21:0E
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285847EFE33E323EBA907CF0FCCA80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bef29a27-caaf-36f8-8545-b86611fc596f.roa
Signing time: Wed 20 Nov 2024 01:36:01 +0000
ROA not before: Wed 20 Nov 2024 01:36:01 +0000
ROA not after: Tue 18 Feb 2025 01:36:01 +0000
asID: 834
IP address blocks: 173.211.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Nov 2024 00:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ef:e3:3e:32:3e:ba:90:7c:f0:fc:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Nov 20 01:36:01 2024 GMT
Not After : Feb 18 01:36:01 2025 GMT
Subject: CN=fc95c664-7cd8-4141-898d-c39da20b0e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f8:e7:9f:57:1c:e5:cd:a5:fc:41:c9:31:6d:
cf:35:2b:54:ed:ea:9b:ee:c5:64:57:94:cf:c1:08:
9d:7c:22:db:c4:9f:10:e8:d9:46:5f:4d:cc:a6:b9:
dd:ee:a3:ec:1f:bd:9d:04:9f:c4:72:34:65:2a:da:
dc:13:19:c6:7e:02:28:15:29:bf:00:04:f0:f6:9d:
6d:9c:79:eb:ac:1b:3b:e1:76:df:13:1c:ff:88:71:
b2:ba:77:2d:3b:39:76:5c:4d:6c:98:b8:ef:76:25:
07:8c:dc:b8:2e:18:96:53:8b:5b:ea:d4:ca:79:7c:
ee:57:86:cd:40:65:6d:c0:c7:44:ac:f6:bd:78:a4:
05:3d:b6:45:c1:15:a7:15:e3:e1:f7:3b:b2:b5:99:
93:76:77:ee:97:28:f2:46:81:04:06:e7:df:78:c8:
0b:84:b2:41:5a:ce:a5:bc:0f:c3:ee:0f:9e:e1:3c:
97:84:81:f6:30:c4:ac:9e:69:45:19:db:f5:c0:88:
81:ce:06:73:66:35:62:36:d4:9a:fe:f0:0f:3a:47:
9f:4c:26:3f:49:e2:d9:7b:86:7a:92:fc:aa:20:5e:
5c:90:ee:67:d4:17:2a:3c:55:bf:e1:34:b5:2e:d6:
a3:7a:ca:ff:6a:24:39:0a:a6:e3:8c:a5:ad:6f:f7:
69:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2F:BC:DD:CD:D9:FC:FF:AB:2D:23:42:12:C4:AB:CC:39:81:21:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bef29a27-caaf-36f8-8545-b86611fc596f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.211.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:35:df:d8:48:24:19:dd:fa:83:4b:c2:9e:30:65:f7:76:6b:
73:93:15:78:db:c0:3f:c8:79:d4:00:cc:c1:56:2e:ef:a6:d0:
3c:e9:1e:85:1c:8f:4b:41:45:7e:f9:73:84:1d:bd:14:ab:78:
b4:82:26:96:73:da:42:d5:82:1c:18:f8:ad:9a:f3:c5:59:19:
90:c3:9d:2c:ec:bf:08:3e:98:39:6a:25:09:1d:e0:b0:a6:a4:
ba:b5:53:3c:38:a6:e9:0b:d0:80:9f:e4:79:98:5f:fa:f2:07:
2b:1a:de:0b:7c:e4:2c:c2:75:62:6a:17:69:08:a2:3f:0c:76:
1e:10:d9:c3:91:8a:13:c0:34:63:bb:2a:03:d6:c0:e8:9d:c3:
af:61:27:0b:ed:c5:d7:7e:87:3d:24:dd:e9:5a:48:48:3a:3f:
cc:39:be:30:4b:98:1f:7d:88:fa:d6:8c:3d:60:51:fc:64:7b:
c5:15:ac:ab:af:bf:fe:07:f1:a7:ae:de:00:c2:46:91:f3:28:
a0:e2:b7:7a:4e:ea:d6:6a:86:7d:32:79:7c:d3:a7:21:ef:a9:
69:77:b2:1c:7b:72:47:03:80:b8:c0:d9:fb:b6:99:58:6a:9c:
16:d2:c5:74:e8:25:30:d3:89:9f:f3:0d:5b:a2:14:3a:09:42:
47:79:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:39 2025 by rpki-client