Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a5260111-a139-3cf6-afea-d4b6927f5d69.roa
File: a5260111-a139-3cf6-afea-d4b6927f5d69.roa (raw, json)
Hash identifier: ReGh/PjC2/fpM/l+JmEdetDt+rvICBA3V1MuRycJFsk=
Subject key identifier: C4:9A:02:3D:E6:C3:65:F2:B1:E7:2A:C3:DA:DC:64:D0:43:68:7B:2A
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F4328584855D59FA6424E9E405C705F54
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a5260111-a139-3cf6-afea-d4b6927f5d69.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 21700
IP address blocks: 141.140.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 21:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:9f:a6:42:4e:9e:40:5c:70:5f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=2249e396-291a-4986-b4fa-0a642f3dae18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:9f:f8:a4:e5:2c:3a:01:1a:c3:ed:6a:a5:
bd:26:c1:ff:ab:6f:d9:78:9d:51:1c:8a:d2:86:38:
47:cc:aa:16:20:6a:c3:e7:dd:fc:c2:04:b9:07:03:
84:ac:15:bf:ce:5f:8b:1c:8b:f5:b0:54:47:18:ea:
49:25:04:35:38:36:ff:74:f9:b5:3a:db:3c:93:58:
27:3a:95:05:15:5e:00:25:40:75:a2:6c:e9:36:b2:
f7:f9:ff:4b:6a:11:03:17:51:e5:ed:27:b5:45:e5:
27:60:39:12:82:df:ef:f5:e5:e1:3d:05:ca:db:d9:
08:61:9d:b2:16:6c:17:9d:24:12:62:34:37:75:a6:
5a:f1:fe:ea:15:e5:3b:ff:ee:c0:ff:43:10:24:d6:
b0:97:39:0a:1a:a7:0b:a2:57:05:1f:79:e9:3b:84:
96:3e:c9:0d:bc:25:a4:1d:b8:65:87:5b:54:05:58:
7e:1e:96:e8:b7:05:65:bc:42:de:1b:06:ee:9e:6c:
10:38:03:ce:99:ce:cd:c2:31:da:41:3e:d6:f8:d0:
03:4a:5d:f5:91:54:f5:24:04:69:7c:a3:99:0d:86:
b2:8d:8c:37:ac:5d:dd:bb:a2:73:69:ab:45:55:d5:
ae:9c:ae:08:be:b0:a9:4c:10:07:16:51:c9:a5:74:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9A:02:3D:E6:C3:65:F2:B1:E7:2A:C3:DA:DC:64:D0:43:68:7B:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a5260111-a139-3cf6-afea-d4b6927f5d69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
141.140.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:96:53:5a:b2:94:d1:0a:ab:1e:9d:59:4d:0e:49:a5:c0:b8:
17:27:8f:15:35:67:de:7d:a3:ca:4d:0d:0f:44:d4:83:04:e7:
8c:f3:9f:01:f5:e6:f9:82:7e:07:55:af:28:31:b6:8b:ca:79:
0b:fe:45:13:35:0b:fe:6b:a0:cb:67:b7:3d:d7:c5:33:69:b0:
f0:1f:f2:e6:78:9a:a9:dd:72:4a:16:31:61:41:ee:44:78:5a:
83:f6:52:ea:41:87:49:c3:cc:9f:7d:c3:3a:2d:6f:71:64:53:
c7:17:d3:0c:11:af:5c:b7:c8:9f:3e:ec:7f:e0:af:19:89:9a:
b8:1b:b0:db:e8:79:4c:47:c2:4e:8c:f8:52:59:4e:49:f6:f3:
7f:89:90:0c:09:25:0e:97:a1:ca:f9:1f:b2:da:fe:d3:72:5c:
98:2b:68:5b:7f:7c:55:a0:b1:9c:45:b8:3a:49:1f:0c:8a:41:
88:69:8d:56:ea:12:e3:50:ec:b1:03:77:ea:17:49:e0:3a:60:
c6:7d:75:30:2a:9e:e5:ac:a6:63:23:ea:bb:42:42:cd:3d:56:
bc:7d:fc:f7:18:a8:28:87:11:df:0a:b7:e4:b1:11:c0:d2:76:
d4:b3:26:a7:33:1c:55:6c:2c:ed:41:04:9a:08:46:01:48:2d:
13:71:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:27:24 2025 by rpki-client