Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c3131f5d-5550-36e6-8ee9-8957c3b0ad24.roa
File: c3131f5d-5550-36e6-8ee9-8957c3b0ad24.roa (raw, json)
Hash identifier: Z7CZhylbU2xhwJCD6kYR8qcv9bXWiiniMk6CDfVXtFo=
Subject key identifier: EB:F6:90:38:7A:3C:78:8B:CB:A4:FA:C5:1A:46:2A:E1:0F:1A:89:6D
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285849166C587521178C525B0B24E0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c3131f5d-5550-36e6-8ee9-8957c3b0ad24.roa
Signing time: Wed 05 Mar 2025 13:39:55 +0000
ROA not before: Wed 05 Mar 2025 13:39:55 +0000
ROA not after: Tue 03 Jun 2025 12:39:55 +0000
asID: 53356
IP address blocks: 209.178.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 23:24:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:16:6c:58:75:21:17:8c:52:5b:0b:24:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Mar 5 13:39:55 2025 GMT
Not After : Jun 3 12:39:55 2025 GMT
Subject: CN=cd62c80e-572a-4954-af9f-fc7fd68b9d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:2e:23:82:43:34:39:db:4b:6f:8c:da:e0:
9d:24:a2:bd:29:b2:09:70:dc:40:60:99:f9:47:48:
69:74:75:4e:75:d3:1c:82:70:57:9f:bf:a3:23:10:
52:cd:39:db:fc:07:89:28:0a:e7:02:90:5f:54:9a:
68:a0:c0:59:7a:66:f0:6d:3b:f7:88:53:2c:bb:c1:
48:33:ca:6f:20:3e:0e:64:41:2e:36:49:d4:f9:01:
a7:51:87:45:9b:53:a6:c2:36:43:b8:43:2f:c2:be:
b0:25:c8:92:51:ea:75:ef:bc:b2:a7:8d:15:55:c4:
c1:8e:f3:d6:4e:a2:34:29:64:6f:1e:6e:84:7d:59:
8d:2b:c4:7a:b1:69:ad:81:64:36:aa:f1:e4:76:73:
c1:72:49:a4:dc:0f:66:59:18:da:fd:c8:99:2b:3f:
60:3b:da:10:d5:08:81:b9:75:28:d0:8d:87:66:f0:
f2:c9:1d:da:d3:46:60:be:62:a0:93:cd:5e:39:f6:
0a:43:71:13:da:ee:57:dd:13:5c:19:c7:16:14:e0:
0e:24:a7:32:9d:2a:3c:dc:ab:6d:b6:8b:42:7d:7b:
68:d2:d0:69:c7:5f:f2:68:53:71:b5:8a:3d:47:6b:
7c:d1:79:45:8b:fa:92:21:4d:90:a6:1b:86:f4:44:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F6:90:38:7A:3C:78:8B:CB:A4:FA:C5:1A:46:2A:E1:0F:1A:89:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c3131f5d-5550-36e6-8ee9-8957c3b0ad24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
209.178.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:98:e9:86:19:57:a7:27:7d:b8:ed:e9:24:59:e5:e9:85:86:
33:88:fe:14:81:81:b0:49:93:1f:a3:45:92:ce:78:d4:2b:0b:
31:e8:b0:55:4b:2a:82:69:16:da:10:a5:ea:78:e6:c4:a2:8d:
c3:e6:3b:05:79:bc:39:73:09:d7:af:31:e0:7f:70:1f:61:ad:
a3:34:58:80:79:b5:96:c0:ee:e9:b5:1c:c1:9b:30:33:4e:0d:
4b:d7:91:bc:ad:ec:3b:61:0d:89:8d:59:b7:75:1d:fc:aa:2a:
06:54:42:1d:0e:4a:56:73:39:fc:50:56:95:c9:0b:9b:ac:4a:
fb:ce:05:94:d7:48:0b:9f:d7:6b:76:53:4e:13:b7:af:6e:b9:
8b:91:8f:79:d1:5f:ec:15:4c:64:b4:54:c2:dd:a2:74:e7:77:
06:3d:7c:af:8a:fd:f8:5a:40:8d:9d:af:fb:94:de:21:63:45:
54:0b:41:cb:d5:a2:ce:5d:a9:49:1c:12:59:12:d4:74:3b:99:
6e:e6:1a:58:40:62:77:20:9f:df:47:27:65:3c:52:37:72:cf:
bf:66:b3:75:b9:41:7d:81:55:c4:96:2d:dc:28:3e:28:86:88:
ff:cf:a9:42:32:31:15:56:85:73:58:3c:f9:c1:67:6a:5f:fe:
98:40:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:24:57 2025 by rpki-client