Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/389d2b75-83ef-395c-9387-8cbfb6341d28.roa
File: 389d2b75-83ef-395c-9387-8cbfb6341d28.roa (raw, json)
Hash identifier: p5iL0bnxwwDdHuvQVbmv4CpOuViC/CZOlBVgu0Pf/20=
Subject key identifier: 94:1B:89:9C:53:CC:7A:B4:3F:EC:FB:16:1B:DF:10:2A:D7:FE:BA:93
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F4328584910E17F0B38899716CCAF3380
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/389d2b75-83ef-395c-9387-8cbfb6341d28.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 53356
IP address blocks: 209.178.232.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 15:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:7f:0b:38:89:97:16:cc:af:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=f9230738-5d82-4775-9017-a06c1b990b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:e3:d1:c0:6a:14:93:8a:6e:f7:ae:ff:29:
3d:70:96:3c:49:17:ab:46:c3:f5:53:8c:60:5f:89:
08:ea:02:8f:cc:89:71:f1:a5:45:38:16:9e:4d:73:
08:fa:be:ba:19:eb:9e:fe:d8:36:72:68:c1:60:a4:
83:cd:a6:53:fa:ae:d1:94:4b:31:36:53:c1:7b:db:
de:00:7b:2a:4f:8a:01:70:6d:67:9e:a3:e1:96:4d:
ef:1c:f1:c0:57:a0:52:c9:93:1d:05:b8:59:b9:45:
58:c3:2c:5b:37:ce:e8:91:dd:8d:e0:74:16:34:09:
be:b9:91:46:cb:e8:f7:d9:64:63:72:50:13:0e:bd:
c6:72:56:cc:eb:54:ce:31:5c:a8:6c:ef:0c:15:29:
e4:c9:9d:1e:75:16:4f:86:cc:e3:70:fe:e4:21:2f:
fb:6e:2c:48:f5:5f:5b:3d:53:df:6a:3c:e1:82:7d:
77:29:eb:6c:c7:63:d1:b3:de:da:b6:da:5d:14:4e:
01:08:87:72:36:75:8f:5c:04:cd:36:29:9b:02:e9:
d0:74:e0:01:ff:be:f7:26:85:fb:8a:32:83:c6:71:
a5:d0:af:6d:0d:10:74:46:bc:18:a7:07:f1:dd:dd:
7c:b8:17:83:04:41:9e:54:fa:1c:94:2f:05:0b:54:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1B:89:9C:53:CC:7A:B4:3F:EC:FB:16:1B:DF:10:2A:D7:FE:BA:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/389d2b75-83ef-395c-9387-8cbfb6341d28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
209.178.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:fb:90:29:83:74:7a:3d:ee:33:e1:6f:79:5b:31:a8:c5:77:
2d:a5:14:3d:ac:63:76:98:7c:f5:85:75:d1:b3:db:1f:6d:f7:
cd:dd:01:1a:2d:3f:30:ab:80:6a:64:a4:43:6a:78:92:56:b8:
25:5f:a2:35:1c:bb:dd:cd:65:01:e3:ad:11:83:72:c3:35:09:
89:ce:31:74:99:95:1c:be:36:c2:65:5e:64:5e:13:06:0e:75:
88:99:bc:24:6a:33:ee:2f:6c:e0:7a:8f:7a:44:a9:9a:7c:56:
99:2f:c7:cb:a6:4d:bf:9a:af:59:0d:48:20:bb:95:b1:42:21:
7a:12:1f:a3:70:53:0d:a1:8b:ad:b9:93:5e:5d:8e:d4:2c:bc:
65:0c:b4:af:bf:9f:02:3a:b8:d9:5a:27:b1:1e:da:c7:78:72:
7b:bf:09:68:42:8c:d2:62:76:40:5a:95:78:07:02:1f:fe:12:
7c:e1:61:8d:48:c0:42:ea:38:0b:be:f0:3b:85:62:bf:57:e0:
15:6a:07:ca:c8:35:74:3a:36:bf:1d:fd:64:db:56:42:55:7a:
f8:ab:b6:aa:be:e3:d7:ff:f6:1a:db:d9:02:d0:0f:ed:c6:ed:
b4:6e:db:c7:89:79:f5:d3:f3:58:60:37:ef:22:e2:0d:54:18:
88:29:0c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:14:11 2025 by rpki-client