Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/03a59b69-8594-3ddf-85d7-8fd1d2acafd3.roa
File: 03a59b69-8594-3ddf-85d7-8fd1d2acafd3.roa (raw, json)
Hash identifier: efLMZwHBWZa/dS1vwFKFZFM5rOqmKstgDKUiYGp2tFU=
Subject key identifier: 8E:9C:07:2C:D2:B7:63:FB:F6:BD:DD:84:2C:BB:83:AE:FE:B7:C3:40
Certificate issuer: /CN=01498755-7057-4d26-ae43-80f30a8a9011
Certificate serial: 010D0C9F43285849419E8B5837B2FB7920755980
Authority key identifier: B8:10:C2:28:C8:D8:4F:E0:65:7D:2B:8F:17:F2:80:2A:43:99:3C:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/03a59b69-8594-3ddf-85d7-8fd1d2acafd3.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 199948
IP address blocks: 23.148.200.0/24 maxlen: 24
23.148.201.0/24 maxlen: 24
216.21.4.0/22 maxlen: 24
2602:2a9::/36 maxlen: 44
Validation: Failed, certificate revoked on Sat 22 Mar 2025 01:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:8b:58:37:b2:fb:79:20:75:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01498755-7057-4d26-ae43-80f30a8a9011
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=2e02bf07-00ec-4a4f-9943-edea13963583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ab:b3:4b:52:2b:f4:5f:90:71:99:2b:39:3c:
9a:0b:8c:6e:bb:84:f6:bd:88:9d:93:b8:63:2a:c2:
10:b9:ae:f8:29:e1:c8:b3:16:88:4e:69:74:b8:3c:
f8:77:72:81:f0:e1:a2:82:7b:b3:09:6d:a5:58:e0:
82:0d:3c:b3:77:e7:27:f9:2e:6d:67:8a:90:1a:b8:
da:f2:f0:50:5f:54:b8:58:d9:af:83:2c:34:77:d0:
53:b9:ee:ac:bf:be:f2:87:4d:28:94:99:e2:71:c7:
85:55:f7:bc:6d:3f:ba:35:7e:4f:be:7a:7b:f1:9c:
50:96:b3:b8:99:7d:48:76:0d:c6:32:4e:ee:95:68:
60:11:31:84:1d:c6:9e:7c:dd:aa:1e:3d:46:eb:ea:
2d:15:2e:99:ac:ba:4f:98:75:69:91:5e:56:c4:d2:
46:26:0c:09:22:8f:e9:c1:2f:0a:af:26:1a:ac:11:
cb:10:8b:f6:35:91:7c:1d:d1:36:d8:96:a5:e4:ee:
b3:53:06:2a:a5:ab:46:37:39:03:fa:67:3c:86:17:
2c:c1:f4:13:6a:71:6b:d1:7c:53:0f:e7:0e:c6:f8:
ef:aa:a8:75:e7:20:16:f4:20:6a:a9:e4:4d:52:a5:
67:49:96:2d:8c:7f:81:b3:2a:3a:7d:1d:6f:3c:ef:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:07:2C:D2:B7:63:FB:F6:BD:DD:84:2C:BB:83:AE:FE:B7:C3:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/03a59b69-8594-3ddf-85d7-8fd1d2acafd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/01498755-7057-4d26-ae43-80f30a8a9011.crl
X509v3 Authority Key Identifier:
keyid:B8:10:C2:28:C8:D8:4F:E0:65:7D:2B:8F:17:F2:80:2A:43:99:3C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.200.0/23
216.21.4.0/22
IPv6:
2602:2a9::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:c6:a4:cc:22:1a:67:bd:fb:10:15:5e:7d:c3:43:2b:3f:ad:
0b:d7:71:c6:43:da:9f:0a:a2:47:4a:7f:7c:52:45:51:c8:3b:
0c:ea:c9:9b:e6:f1:9e:d8:06:81:59:04:a6:9e:1c:7e:57:c8:
7b:0a:60:d5:88:09:3d:47:61:b3:d3:13:1f:0c:ed:f2:e5:05:
1e:d4:d7:b4:f6:e5:0e:b4:61:5b:54:b2:2d:62:17:a4:92:20:
a0:43:b1:a7:50:69:00:f6:85:dc:55:b7:6e:7e:11:39:ae:a6:
37:40:50:3e:6a:d0:06:be:6e:c3:f7:c2:89:2d:a4:09:b2:3e:
5c:47:b6:99:f0:20:69:b4:29:e0:95:bb:0d:b7:c2:d3:29:65:
96:de:94:89:6a:a4:7e:b5:d7:66:27:af:39:26:5a:2f:09:4c:
cd:b7:0d:11:d1:c4:29:74:a2:6e:33:45:95:8d:72:7e:67:c0:
56:d6:18:51:d4:9d:7d:e2:38:cd:24:35:27:1b:17:2b:cc:61:
d7:27:0b:aa:f0:ff:39:e9:e9:85:3d:55:cf:a3:cf:fb:29:16:
c4:e5:c4:46:eb:34:f9:9d:f7:80:5e:d3:43:6f:75:de:85:32:
59:e7:ae:fb:77:3d:8e:94:e4:62:cb:73:63:72:8b:90:ad:a8:
33:a8:1a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:49:38 2025 by rpki-client