Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/e634579b-6e4b-3ed5-ac64-032059379762.roa
File: e634579b-6e4b-3ed5-ac64-032059379762.roa (raw, json)
Hash identifier: 2JwNU1mYFeZ+EifBTID6m8NGn5ADC10kZKzHJKxJVvQ=
Subject key identifier: 70:6B:99:28:4E:26:1F:58:F5:0B:A2:4D:AE:77:15:C1:35:AB:37:BC
Certificate issuer: /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial: 010D0C9F432858489D05EAC94587B3B83D4071E8
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/e634579b-6e4b-3ed5-ac64-032059379762.roa
Signing time: Tue 21 Jan 2025 02:00:39 +0000
ROA not before: Tue 21 Jan 2025 02:00:39 +0000
ROA not after: Mon 21 Apr 2025 01:00:39 +0000
asID: 14618
IP address blocks: 160.79.108.0/24 maxlen: 24
160.79.109.0/24 maxlen: 24
160.79.110.0/24 maxlen: 24
160.79.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 20:59:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:05:ea:c9:45:87:b3:b8:3d:40:71:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Validity
Not Before: Jan 21 02:00:39 2025 GMT
Not After : Apr 21 01:00:39 2025 GMT
Subject: CN=323e5080-4d7a-42f3-8181-13a389e42b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:f4:ff:93:dd:6e:04:ed:7e:7b:77:a6:f1:
13:28:00:89:7d:8b:f6:34:97:60:fb:37:61:6c:ca:
3c:d0:d7:b7:21:49:02:79:57:dd:c2:f7:61:db:16:
3a:81:53:dd:8e:f8:7c:88:94:b1:97:c0:26:71:58:
bf:2f:8c:c3:5f:ab:22:38:a3:4e:2a:0f:81:98:37:
5a:5c:5d:69:e7:d2:f0:ca:b4:c7:c2:d6:4d:5e:56:
0c:2e:12:e3:90:92:05:f8:3a:a8:df:32:b6:b5:2a:
7e:8d:0e:26:8d:06:b2:53:b1:8a:3a:f1:18:e5:f7:
c6:27:0f:06:67:cc:97:b5:0a:2e:3c:d1:f0:19:0b:
f1:26:d4:fe:80:1f:4a:6a:82:80:65:d4:d9:eb:58:
3c:37:f0:56:39:8d:9e:07:dd:8b:4b:23:86:84:99:
b0:25:c1:41:e6:1e:c5:c8:db:f0:fe:c7:a0:9c:17:
75:60:d2:86:9d:fb:df:12:74:fb:52:d3:f4:30:e0:
0f:c7:99:3e:22:0f:d7:16:c2:4b:c4:8f:45:73:dc:
6a:3d:d8:51:cb:99:5e:82:e8:08:8e:c7:2a:11:3d:
02:5b:0c:0a:39:19:01:21:71:69:f6:10:49:e7:4e:
cc:c7:2b:b9:5e:9f:26:48:a5:75:9e:79:ed:54:a3:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:99:28:4E:26:1F:58:F5:0B:A2:4D:AE:77:15:C1:35:AB:37:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/e634579b-6e4b-3ed5-ac64-032059379762.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
X509v3 Authority Key Identifier:
keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
sbgp-ipAddrBlock: critical
IPv4:
160.79.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:50:27:a0:de:28:f9:02:8b:18:17:6e:75:10:f0:8e:ba:84:
e7:50:5b:6f:a7:f1:82:33:8c:b1:e4:a8:a2:3d:b7:09:55:ff:
7a:8b:86:f5:5e:11:7d:16:8a:5e:65:da:9a:84:ad:3c:0c:b6:
15:df:b8:a0:cd:46:7e:a5:85:2e:32:57:98:9f:90:73:65:eb:
de:ee:82:e7:3b:8d:97:ab:af:87:74:c9:17:db:87:e8:4f:d8:
a1:93:be:fa:9c:c7:a0:25:ce:33:71:aa:cb:5e:70:6b:a6:5f:
2a:71:a6:b2:65:7d:c0:49:47:62:e2:1b:04:0a:93:75:91:1f:
7a:5e:8b:a9:24:13:25:f7:36:03:c0:7c:14:bb:31:41:80:4a:
cf:f2:0d:68:e1:8f:b2:7b:02:69:b1:a1:cc:96:a0:1b:9c:eb:
5e:e9:a5:63:96:35:70:1f:4d:d2:e6:b2:6e:49:20:49:1f:15:
3a:5f:a2:0e:f1:0d:c6:48:b1:77:f5:09:cd:d6:d3:7d:ff:bd:
1f:6e:aa:50:5c:04:75:3e:40:44:94:16:ba:85:ff:d2:90:db:
3a:48:e1:42:29:b4:0e:a5:d8:ef:56:d9:7c:1c:4e:a3:a5:70:
94:8c:8c:7d:d0:1a:2f:d9:40:49:53:46:82:c9:00:aa:8b:b2:
81:6d:0c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:26 2025 by rpki-client