Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/ca371707-dbd4-359f-8b3f-ad2bbbd94dca.roa
File: ca371707-dbd4-359f-8b3f-ad2bbbd94dca.roa (raw, json)
Hash identifier: yIB0K1WcHXI2WrlfZd/KkRz2D1THWX5FNvTVvKGaihM=
Subject key identifier: 08:F1:E8:E6:4B:12:BE:B3:3D:65:EE:B8:D0:15:EB:DC:76:B6:E6:F4
Certificate issuer: /CN=2e8a2dcd-c473-4343-ab03-233f389ee575
Certificate serial: 010D0C9F43285848C60878D98A356B84ACF22100
Authority key identifier: E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/ca371707-dbd4-359f-8b3f-ad2bbbd94dca.roa
Signing time: Tue 04 Feb 2025 18:34:01 +0000
ROA not before: Tue 04 Feb 2025 18:34:01 +0000
ROA not after: Mon 05 May 2025 17:34:01 +0000
asID: 8079
IP address blocks: 23.133.108.0/24 maxlen: 24
2602:f718::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Feb 2025 03:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:08:78:d9:8a:35:6b:84:ac:f2:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8a2dcd-c473-4343-ab03-233f389ee575
Validity
Not Before: Feb 4 18:34:01 2025 GMT
Not After : May 5 17:34:01 2025 GMT
Subject: CN=5d7f249f-458f-4e84-aa2f-d9a6fd6eab49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:c3:17:ef:08:ee:da:07:f6:32:5f:3c:57:
6b:02:52:13:c5:de:e7:f4:4a:2a:8a:6b:59:0f:d4:
b6:24:f9:a3:0c:1f:4b:8b:73:4b:f1:17:99:6e:d1:
ed:b7:27:c0:78:2e:bf:40:ac:a7:f0:72:5a:5b:ce:
06:82:42:3b:8e:7e:84:ba:3b:18:fb:a0:24:d6:e6:
8d:22:8f:da:fa:3b:98:2b:ef:8f:8c:3e:f0:85:dc:
65:ca:61:80:56:8b:28:db:71:96:10:ad:e8:7e:36:
df:67:76:57:da:cf:8d:c7:d6:86:07:75:74:cf:b3:
96:88:e9:37:24:3e:73:11:be:41:0a:88:a7:a6:70:
5e:41:9d:aa:54:4e:13:bc:64:f7:1e:a5:82:e5:7c:
64:2e:0e:75:94:2e:ad:38:c4:1e:d4:c1:a4:e2:1a:
8e:f1:3f:bb:9e:c4:dc:73:2d:8e:50:85:5d:75:6c:
58:d2:b7:ab:d5:ff:1b:ca:9b:dd:5a:df:6e:70:c2:
d8:09:e0:5c:45:d9:34:6a:47:ba:aa:96:00:f4:9d:
8c:80:f2:cc:2c:d7:25:53:4e:38:99:8f:7a:44:c6:
a4:ff:f9:0b:56:69:f5:5c:d2:fb:3e:d5:0b:c5:22:
56:86:a0:66:5b:4e:8e:29:01:2c:cd:d6:d9:44:eb:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F1:E8:E6:4B:12:BE:B3:3D:65:EE:B8:D0:15:EB:DC:76:B6:E6:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/ca371707-dbd4-359f-8b3f-ad2bbbd94dca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl
X509v3 Authority Key Identifier:
keyid:E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.108.0/24
IPv6:
2602:f718::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:a8:d7:f2:7d:d4:5d:e9:6e:78:5b:b2:d5:ee:03:f4:a2:08:
65:88:5a:74:dd:4c:e4:5f:19:f3:9a:a3:1f:4b:66:90:6c:93:
69:9f:76:6e:25:62:a9:ef:2d:70:34:08:35:eb:49:67:b1:40:
7e:2a:c9:93:b6:f8:77:5d:56:c1:8e:f4:ec:be:17:94:b6:84:
18:d4:89:63:c2:3f:c7:c7:ac:bd:59:65:e2:0d:e0:7a:a0:3f:
96:6c:a4:12:27:32:66:65:bd:9a:68:81:33:db:64:c6:37:05:
81:a9:83:bc:e9:42:6e:8b:7f:dc:d8:a6:46:7d:ba:6e:8a:2a:
f5:e7:b3:76:81:af:23:be:53:c8:cc:40:99:80:5c:a3:d1:7b:
b5:a8:2e:f3:ae:e0:7e:f7:1f:f1:96:c9:18:ae:d5:64:86:2e:
7e:39:69:3a:06:ed:70:ca:64:67:ae:c3:f6:bf:3a:ca:8e:b2:
6d:c7:e6:c9:51:75:56:02:df:7d:0e:3c:c9:f6:2d:19:9b:97:
8b:c8:2d:34:24:31:24:10:de:5e:72:7f:95:af:ba:a2:41:bc:
07:e8:e9:74:81:94:39:bc:03:c3:66:5b:76:fc:fd:27:01:ae:
cf:d3:18:bb:5f:14:d7:01:1f:a5:cf:6e:20:3e:18:ab:08:26:
3e:68:b1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:50:38 2025 by rpki-client