Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ef6978b8-7d78-3a28-b932-8b12b9c9139e.roa
File: ef6978b8-7d78-3a28-b932-8b12b9c9139e.roa (raw, json)
Hash identifier: rbM2JZkyuFQoV8NpCLCWZ9EwZmtQbalxMrqdeZaljGE=
Subject key identifier: C1:EF:62:5E:AC:86:E4:42:5F:88:03:FD:E2:4D:25:A8:F3:65:9F:48
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858485C97D8FE7D5AA672880C3BC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ef6978b8-7d78-3a28-b932-8b12b9c9139e.roa
Signing time: Sun 29 Dec 2024 00:07:13 +0000
ROA not before: Sun 29 Dec 2024 00:07:13 +0000
ROA not after: Fri 28 Mar 2025 23:07:13 +0000
asID: 215287
IP address blocks: 216.122.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 17:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:97:d8:fe:7d:5a:a6:72:88:0c:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 29 00:07:13 2024 GMT
Not After : Mar 28 23:07:13 2025 GMT
Subject: CN=4f78a8b6-1db1-4cd8-b3a7-fb85494f1d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:52:ce:c5:37:c0:c4:24:e1:1e:76:3c:2c:
fa:19:0a:30:c4:ee:63:94:27:5c:56:a0:97:19:94:
ca:ef:2e:6b:5a:c9:c5:7e:90:59:11:d9:c6:23:20:
3c:ad:6b:e0:57:08:df:b4:35:6b:a4:f4:f9:a6:3a:
5b:86:64:3c:5d:be:f8:90:4a:74:2b:e4:61:ef:5d:
e7:95:f9:01:23:0b:13:5a:aa:07:e9:97:d3:cb:e7:
38:c6:85:b8:12:d5:ff:74:59:6f:fd:3c:d7:f1:d1:
b3:5a:b0:6e:72:1a:82:c3:83:7b:dc:28:b7:3f:c6:
6b:29:f3:d1:5f:e0:14:c1:88:ce:7f:b0:aa:8b:56:
57:66:47:39:6d:f2:01:f2:ed:1b:bc:99:86:53:dd:
d6:41:05:08:9a:5e:ff:3d:53:b9:0d:6a:de:66:1e:
09:2d:51:80:96:47:a3:af:45:5c:b3:8c:bd:b1:cd:
c0:66:5e:c3:0a:4d:05:22:f3:1e:bd:c9:10:81:c1:
f9:20:6f:88:1a:58:c5:8e:9a:02:ef:59:bc:77:9e:
7c:df:8c:dc:cd:a9:f9:d1:fe:09:f7:7d:fb:50:45:
33:46:2c:03:31:3d:93:81:24:d4:2c:d5:a1:85:d7:
5f:c0:dd:51:c9:b3:03:4b:25:f5:d6:9d:4f:29:83:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EF:62:5E:AC:86:E4:42:5F:88:03:FD:E2:4D:25:A8:F3:65:9F:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ef6978b8-7d78-3a28-b932-8b12b9c9139e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
216.122.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:e9:10:1d:e6:19:a0:3e:9f:3f:0b:07:db:0d:c2:b9:89:13:
b7:b5:56:7d:fd:ab:42:9e:4d:00:0c:0b:88:11:f1:dc:af:93:
39:c4:77:1d:b4:2b:dd:ad:ae:ba:c5:ab:66:34:f1:73:1a:35:
a4:f5:86:1c:88:cc:b9:95:b6:ad:1c:4b:a6:d3:e0:01:ad:63:
c1:d8:15:ac:25:62:35:f2:fb:67:78:8a:1e:6e:60:54:0d:a2:
f3:ff:ed:9a:8a:22:7f:44:5d:bd:5b:43:ae:0f:27:51:00:4e:
97:9f:d3:7d:94:e8:ae:57:6c:3c:dc:18:98:32:ed:82:d7:b1:
4f:77:d9:d2:68:5d:1f:f9:27:6f:96:ee:fa:4c:d3:bb:bb:d4:
4a:30:14:e1:39:18:7f:e2:eb:6f:e1:14:2a:58:45:86:cf:2f:
58:8e:87:5d:40:59:a8:25:14:1e:e5:1c:83:a3:85:17:e9:8b:
1d:7b:6d:98:04:df:c7:98:44:f9:25:02:f7:cb:2f:70:00:a5:
02:9b:1b:4c:a1:6b:cc:ac:d2:cf:53:57:c4:32:56:21:ea:5a:
bc:d5:05:6e:fa:50:d2:12:14:3f:56:ce:26:af:8f:77:f8:aa:
95:36:76:0f:50:ea:5b:13:7c:7e:45:bb:80:14:0d:18:48:73:
61:16:f5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:41:30 2025 by rpki-client