Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8a333af1-12dd-36a7-b1ad-7f7b22a85a2a.roa
File: 8a333af1-12dd-36a7-b1ad-7f7b22a85a2a.roa (raw, json)
Hash identifier: mAhjOIdl+MSNv8/BsKGV1xB+1YgpJMYxR0aSH1qJWcs=
Subject key identifier: 1F:E8:00:06:25:7E:84:0F:63:CC:54:48:C2:47:2A:4C:2C:53:CF:E7
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285848C9B0D8BE3003EB5E44DC0660
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8a333af1-12dd-36a7-b1ad-7f7b22a85a2a.roa
Signing time: Thu 06 Feb 2025 02:00:39 +0000
ROA not before: Thu 06 Feb 2025 02:00:39 +0000
ROA not after: Wed 07 May 2025 01:00:39 +0000
asID: 11325
IP address blocks: 141.193.99.0/24 maxlen: 24
172.98.168.0/24 maxlen: 24
172.98.180.0/24 maxlen: 24
207.230.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 16:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:b0:d8:be:30:03:eb:5e:44:dc:06:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Feb 6 02:00:39 2025 GMT
Not After : May 7 01:00:39 2025 GMT
Subject: CN=3573c9fd-1534-44eb-89b4-74b291dbf547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:ea:d6:82:50:de:a3:b4:4e:e9:ab:e3:e4:
b6:3b:e7:9c:21:3a:60:05:b4:86:42:df:f5:49:34:
d1:6e:34:ea:a6:cd:43:33:a7:8e:f2:31:24:60:47:
9e:f3:91:74:4c:06:2d:c6:41:3c:6f:63:a7:e9:62:
16:f8:db:d9:2c:1d:0c:a2:a9:82:f9:e9:cb:0c:fe:
49:e7:a0:c2:a2:6b:40:c0:27:3b:53:ce:46:4a:c7:
10:97:9f:96:0e:9c:77:03:0c:f9:7e:4b:59:1a:b5:
11:6e:40:5f:b7:24:be:47:6f:7c:ad:88:1f:47:89:
a8:75:23:c9:68:aa:98:9e:7c:16:d4:69:70:aa:d8:
e6:d2:31:e4:c3:07:55:39:42:f7:da:a4:39:8c:e7:
c5:35:03:20:37:73:82:d2:4c:fe:d6:42:94:37:42:
c6:ea:bc:cc:8b:3f:ce:5d:b2:f2:3d:4b:86:e4:6c:
c7:c9:94:16:4c:0a:f4:1c:28:5e:70:0c:4b:89:5d:
44:9f:74:6c:7e:29:e8:e0:e9:67:c9:34:a2:f9:a6:
49:68:cd:2d:4b:8a:1c:51:1d:4c:57:4d:d6:c3:57:
ff:ce:90:19:de:68:b7:a7:b5:5b:32:d0:0d:f2:cc:
c2:a5:77:ba:be:59:e4:1a:c9:c4:8c:06:ac:69:5b:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E8:00:06:25:7E:84:0F:63:CC:54:48:C2:47:2A:4C:2C:53:CF:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8a333af1-12dd-36a7-b1ad-7f7b22a85a2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
141.193.99.0/24
172.98.168.0/24
172.98.180.0/24
207.230.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:44:2a:8b:eb:75:33:03:a8:a9:cf:3c:88:ff:c3:fc:7c:c0:
af:16:5e:c6:01:d0:78:90:b4:d3:45:ef:e0:82:32:b2:e2:59:
74:7a:7a:70:4e:23:24:71:69:a5:7d:4f:78:07:70:5f:f0:a8:
7e:61:0d:a3:9d:a8:81:9b:58:25:9e:91:c9:5f:b5:d2:9d:f5:
c1:04:1e:c8:7f:fc:81:09:fd:c2:93:f7:e6:bf:f1:f3:6d:5b:
9d:25:2b:94:e7:48:47:e1:71:f5:22:ca:8e:64:d8:a2:ef:f2:
10:8f:71:bc:9e:e2:94:49:36:c9:58:89:6c:9f:a2:78:87:ce:
a0:9f:81:73:b4:c4:0f:0f:57:ed:74:05:da:2b:9e:13:41:0f:
ff:06:ab:08:34:b2:fb:4d:4c:dd:cc:84:84:1a:81:7e:3c:0f:
b0:fe:07:9f:a3:58:ac:9e:64:8b:60:a0:82:d7:a5:79:58:2d:
26:7c:07:8d:2a:e0:c0:77:29:42:dd:94:00:98:66:68:77:8d:
01:76:3a:67:c2:39:67:75:4a:41:7f:49:72:d0:f6:bf:76:12:
8d:7f:c8:1c:dd:0b:06:b3:ce:fc:a4:18:4c:cf:b0:8a:df:d8:
c0:02:18:c4:06:e7:cb:93:a7:b7:81:a7:eb:ba:54:11:8f:ec:
ca:61:60:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:13:12 2025 by rpki-client