Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/30346318-7579-379b-bcd4-142e91b105b3.roa
File: 30346318-7579-379b-bcd4-142e91b105b3.roa (raw, json)
Hash identifier: vL0I3LYZjhL9VG7j5EkYuYwFveRvC4C3Mg9Sc3OxyzE=
Subject key identifier: CD:27:D4:AD:D1:CD:63:CB:B7:95:7B:CA:CD:A8:10:65:1D:9D:20:A0
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285848862A4A29DA7AA2D9ABA1FA10
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/30346318-7579-379b-bcd4-142e91b105b3.roa
Signing time: Sun 12 Jan 2025 21:30:25 +0000
ROA not before: Sun 12 Jan 2025 21:30:25 +0000
ROA not after: Sat 12 Apr 2025 20:30:25 +0000
asID: 834
IP address blocks: 141.140.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:2a:4a:29:da:7a:a2:d9:ab:a1:fa:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Jan 12 21:30:25 2025 GMT
Not After : Apr 12 20:30:25 2025 GMT
Subject: CN=afdd50d9-557a-4edd-b6dd-42ee2695f099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:ee:73:d8:cf:05:8b:ce:2c:4b:b3:95:ca:
95:5e:f4:6e:b2:f2:24:3d:e1:2e:b5:fb:7d:35:39:
87:c1:d8:1f:58:ee:32:05:e9:55:36:b9:62:5b:88:
3c:5b:c1:ba:c5:00:fd:f3:f5:5d:5d:f4:15:e9:b1:
18:1d:fc:e1:3b:44:58:28:11:10:93:f7:17:0b:e0:
d4:38:07:9d:f3:8d:18:fc:b8:f2:9d:08:78:39:cd:
d2:17:e2:aa:b3:6e:5f:eb:36:94:73:63:57:ce:a4:
bc:5f:9a:6e:f1:52:83:62:25:02:e5:cf:71:7d:1e:
76:7e:32:19:1c:5c:9f:b9:64:a7:19:ca:67:f1:65:
e5:52:b5:76:dd:09:31:c1:90:30:bc:ce:26:22:71:
34:13:0d:5b:e0:2f:48:71:ea:3b:6e:5c:35:60:de:
68:92:e8:6a:bf:f6:d6:e8:64:1e:61:bf:12:d3:35:
de:b5:20:a9:bb:7a:a4:d2:b3:a1:45:1a:d3:2b:f9:
1e:c0:dd:ad:5e:00:9a:b2:fe:f1:00:7a:bd:a4:e8:
06:26:81:b9:21:e9:fd:fd:c7:12:6c:29:f7:61:8b:
e3:11:da:c8:25:38:14:9d:48:7b:e8:e2:2d:92:0a:
cb:1b:09:4d:cb:ab:23:b2:95:3f:10:3f:a0:67:89:
b0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:D4:AD:D1:CD:63:CB:B7:95:7B:CA:CD:A8:10:65:1D:9D:20:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/30346318-7579-379b-bcd4-142e91b105b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
141.140.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:43:07:00:b3:1d:54:8e:66:08:d1:7c:8f:9a:8f:9e:25:9f:
4b:0c:11:a3:81:d5:97:93:e6:a9:ac:43:2c:c4:17:9a:5e:af:
a6:ad:96:73:fe:c4:2f:e1:ef:22:05:b4:12:da:af:26:8c:51:
a2:1d:ef:1d:7d:43:f5:97:ed:58:69:57:de:60:d6:e0:77:a3:
45:28:51:25:22:41:20:9d:ca:13:f6:ba:19:e6:e4:58:2d:7b:
b6:87:bf:cd:d5:b5:35:60:e8:d3:a6:1f:4b:b6:f0:47:ed:bb:
cb:eb:61:29:93:f5:9c:da:07:80:1a:97:78:28:04:26:a2:cb:
1d:a5:6b:d1:2c:e0:f3:c2:50:8f:5a:d3:f7:a6:7f:6f:fe:cd:
9d:6a:58:1b:61:2e:d1:6d:3b:78:b9:ba:9b:2a:b1:c1:75:74:
ba:e1:00:00:fe:0f:3a:1a:f8:31:b9:d4:1b:81:54:0d:f0:59:
00:29:fd:db:10:9f:1d:c3:dc:97:40:23:5b:a0:7f:4a:44:1d:
85:e3:c1:75:71:00:c6:d7:16:cf:8c:8e:86:0a:1e:c3:58:86:
87:f9:0d:62:47:69:7c:fc:cd:f4:fd:46:0e:b4:27:64:f1:52:
d7:23:ed:88:68:18:64:de:6b:4f:db:30:96:23:e2:04:26:40:
67:8e:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:38:56 2025 by rpki-client