Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/38b24cc3-bacf-353a-8801-51f8670b848a.roa
File: 38b24cc3-bacf-353a-8801-51f8670b848a.roa (raw, json)
Hash identifier: POTYjK6+CTW0G4/r3eTKAae1XtApM/YEFHtINDcCgDA=
Subject key identifier: F9:7F:DA:2F:1A:EB:1B:66:A8:7A:59:6A:EB:E7:97:1E:C1:0A:AF:C0
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F4328583DB289AE6AA54EBDCD89691B10
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/38b24cc3-bacf-353a-8801-51f8670b848a.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Mon 28 Apr 2025 04:00:00 +0000
asID: 7018
IP address blocks: 141.140.16.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Feb 2023 13:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b2:89:ae:6a:a5:4e:bd:cd:89:69:1b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : Apr 28 04:00:00 2025 GMT
Subject: CN=920f0d84-40e5-48ae-af79-388238024675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:0a:b2:fd:5c:00:bc:7f:fd:f1:a3:74:e8:
ca:77:7b:34:8e:cc:dc:46:f0:5d:88:8d:79:d6:60:
52:c5:65:ee:6f:a2:89:21:c2:7a:93:a9:1c:44:49:
ec:86:09:54:7e:34:cd:3b:2b:eb:73:34:5d:6c:8c:
f2:47:96:bb:11:93:f7:f4:26:6a:04:31:f2:82:fb:
ac:4c:79:8a:ba:e0:b1:33:3c:85:f8:49:96:ee:30:
69:8a:05:ae:7d:4a:ee:4d:48:de:df:f1:67:45:af:
5b:6d:b6:f8:45:02:b0:4d:21:c5:a8:49:5b:aa:22:
e9:41:7a:e1:70:ad:c7:49:0c:1d:45:7c:4a:7e:e2:
71:59:2b:1d:08:6d:2d:15:5c:da:84:0b:e4:85:a9:
9e:a8:03:45:81:89:42:72:da:6e:a7:c6:f5:bd:96:
5b:35:8c:c8:a9:81:e7:4c:ce:85:31:e4:18:23:ee:
29:33:bd:84:56:7a:ed:86:14:b9:07:0e:7a:64:34:
af:04:8b:92:d5:f6:88:7d:c6:f8:2b:73:a0:52:0a:
ff:b2:ff:96:88:3e:88:a5:98:92:47:49:fe:87:ec:
83:7c:d6:28:59:0f:4f:ef:a7:30:75:1e:d1:78:9f:
bb:ce:57:76:44:cf:1c:57:09:bb:c0:98:45:67:00:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7F:DA:2F:1A:EB:1B:66:A8:7A:59:6A:EB:E7:97:1E:C1:0A:AF:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/38b24cc3-bacf-353a-8801-51f8670b848a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
141.140.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:d4:29:6f:0b:ec:ef:c8:86:a8:b7:b7:49:cc:88:ef:aa:e3:
ac:0b:7d:05:b2:c0:d7:ea:c4:a7:31:bf:36:b6:b9:6f:ec:42:
e0:70:49:a6:73:a9:d4:52:6d:31:42:ab:c4:c2:92:a4:db:64:
e1:ef:66:2a:58:30:30:ee:3a:5e:19:8d:6f:d1:10:f4:4c:58:
f2:e5:9e:b9:0a:c7:6c:44:f6:cf:50:32:3b:41:84:f4:6e:9d:
46:1b:8f:43:2e:2f:71:2c:44:a7:ff:11:2a:e0:0b:fb:2b:d7:
d6:74:38:45:bc:b7:77:93:8e:0b:91:1f:a9:cd:4c:0d:6b:33:
de:84:bc:ee:ab:49:5a:30:cb:4b:2f:5c:d5:91:f4:3d:1e:45:
b9:b0:e3:44:16:48:c1:e8:49:8e:3e:60:5d:60:e6:29:42:f8:
69:b1:ea:c9:54:ed:d2:8f:ce:df:ec:e0:eb:a3:3a:5f:22:18:
96:6f:db:89:90:b5:2f:81:5c:d4:07:0f:9f:c8:7f:70:0c:3c:
40:cd:17:2a:91:32:bb:44:56:f1:d0:06:e9:0d:24:e2:ea:37:
1f:ee:be:be:69:d3:6c:db:5d:ae:34:7f:da:07:ce:09:00:ea:
dd:f3:49:97:f8:56:29:52:61:6d:1d:07:35:db:39:3e:23:c3:
52:25:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:27 2025 by rpki-client