Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/e77d29e5-04e6-3da9-adc6-715e5a5f01b4.roa
File: e77d29e5-04e6-3da9-adc6-715e5a5f01b4.roa (raw, json)
Hash identifier: EhQSX4iyJ6Rv4Nx/nH3jSq6bKtHLia0kmTYTyoo1jMg=
Subject key identifier: E9:9D:78:03:7B:99:C1:0F:8F:2E:54:50:EB:F3:DB:2B:FE:0A:4F:69
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F43285848C2B646161C0231ADF7E13B00
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/e77d29e5-04e6-3da9-adc6-715e5a5f01b4.roa
Signing time: Mon 03 Feb 2025 14:00:52 +0000
ROA not before: Mon 03 Feb 2025 14:00:52 +0000
ROA not after: Sun 04 May 2025 13:00:52 +0000
asID: 23470
IP address blocks: 45.59.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 17:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:b6:46:16:1c:02:31:ad:f7:e1:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Feb 3 14:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=fbda76bf-654c-4736-bc14-5dfcf6c0f1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:c6:2f:a6:1b:61:bc:c3:4d:e2:48:4f:b5:
af:f5:0e:f4:5e:9a:c2:6d:50:e5:8d:71:26:93:bd:
d5:ef:d0:54:cc:af:a5:6c:d9:9d:dd:00:bb:f2:c7:
b5:1c:3c:5e:34:9c:61:7a:2f:38:2c:81:ae:28:a1:
ff:57:a5:0b:cb:7c:20:15:18:12:1c:0c:bb:fd:3d:
63:c0:ff:ac:c5:54:7b:ce:75:51:4e:88:fd:37:30:
0f:7e:18:0e:e2:42:73:38:78:01:48:05:67:24:a2:
06:68:9b:d2:2f:9e:98:9b:19:38:22:9f:e1:3e:ee:
f9:f7:2c:ff:44:ce:52:81:a1:05:c9:09:24:93:ac:
27:10:8b:6a:cc:72:95:10:3f:90:f0:12:fd:22:fb:
26:00:f0:ba:79:2c:8c:19:ea:de:58:97:98:4e:ab:
4e:85:9e:76:68:91:30:92:8c:98:df:0d:83:e3:95:
67:e3:d8:92:79:3a:70:4a:5c:da:f6:c3:83:5e:fd:
17:b7:37:a5:e7:2c:fe:73:f2:38:e8:ed:02:95:2e:
f4:e7:ee:f6:8e:69:9a:11:44:56:e2:cb:8b:6a:bd:
ea:62:41:d4:8f:f6:0f:ae:55:1f:ce:f1:0f:fe:23:
8c:66:28:30:74:58:d9:36:39:6f:3c:d8:24:43:ba:
53:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9D:78:03:7B:99:C1:0F:8F:2E:54:50:EB:F3:DB:2B:FE:0A:4F:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/e77d29e5-04e6-3da9-adc6-715e5a5f01b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:a3:d8:64:e1:81:4e:c6:80:56:42:02:c4:51:67:78:99:b5:
0d:3d:64:3a:ee:09:93:45:37:0d:ea:42:b9:d5:14:5b:04:3c:
20:24:6c:5d:5c:5e:aa:6c:5b:4d:4e:6e:08:99:bb:8c:1a:6f:
0e:b8:48:21:5e:e7:50:68:bb:36:2b:47:a1:e6:92:c4:6a:f3:
56:4d:4b:d4:23:28:64:ef:3e:b2:d7:be:39:e5:2c:03:ce:7a:
e0:37:04:a1:ee:c0:6e:c1:13:70:87:90:46:2e:1a:19:32:0a:
83:24:12:23:da:0a:47:a8:5d:74:4e:e8:89:96:ad:55:e9:54:
b4:9a:a0:4b:a3:6c:e7:d6:36:99:02:6f:f6:5a:aa:12:d8:8e:
fd:35:cf:ee:22:46:89:3c:0d:35:70:94:0c:10:29:79:74:50:
4b:42:d6:fa:5b:cf:45:87:ee:48:b5:f9:27:ec:b8:5a:30:70:
7e:d3:7d:71:e7:7d:ba:27:55:91:30:1e:ce:17:4f:a6:0b:01:
48:75:13:56:9e:53:db:e6:79:82:ba:8d:42:be:d2:8a:62:ab:
fc:88:65:fd:b6:f7:c0:f8:1d:2b:30:ca:95:be:41:e7:e8:a1:
fa:4c:6a:4b:a5:e3:a3:dc:dc:83:40:a8:22:a4:66:06:84:db:
09:5b:08:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:58 2025 by rpki-client