Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd/476620d3-6f72-3438-8b82-64a3ad624dad.roa
File: 476620d3-6f72-3438-8b82-64a3ad624dad.roa (raw, json)
Hash identifier: sk0c8AztEsUYMxm9//aBsi0xB0BpzzRpfODa9ZFSXvA=
Subject key identifier: 2E:F9:62:8A:0F:B0:6E:07:13:C8:E3:EB:F0:C2:FD:C9:A0:2D:10:D4
Certificate issuer: /CN=4f74ea5d-ed82-4ec7-ba82-247305c841cd
Certificate serial: 010D0C9F43285849142C3EEC9D4D2A906E205880
Authority key identifier: 07:2E:09:3F:E4:BD:49:99:43:C9:B4:2D:E2:2F:2F:2C:0E:60:4E:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd/476620d3-6f72-3438-8b82-64a3ad624dad.roa
Signing time: Tue 04 Mar 2025 18:19:08 +0000
ROA not before: Tue 04 Mar 2025 18:19:08 +0000
ROA not after: Mon 02 Jun 2025 17:19:08 +0000
asID: 25731
IP address blocks: 23.145.216.0/24 maxlen: 24
142.202.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 22:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:14:2c:3e:ec:9d:4d:2a:90:6e:20:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f74ea5d-ed82-4ec7-ba82-247305c841cd
Validity
Not Before: Mar 4 18:19:08 2025 GMT
Not After : Jun 2 17:19:08 2025 GMT
Subject: CN=06ea9386-9e83-4a5a-bac2-4b8844256c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:11:76:5c:75:73:9c:f7:27:66:8c:74:22:38:
2d:05:0d:1b:9f:4c:b8:85:de:1c:9e:f8:5d:67:88:
fd:c2:b2:44:55:48:5c:28:6d:aa:5d:d7:de:2e:ed:
13:43:2a:8d:a1:3b:b5:5d:a0:f8:c2:0f:fa:78:38:
d9:80:16:7c:35:c1:f8:33:ec:d1:58:41:8c:3d:f7:
1f:57:1d:c2:99:20:74:3d:29:3c:01:19:4e:f4:4e:
3e:bd:8b:f5:ec:c9:b2:a6:a7:cf:8d:e9:b8:08:2c:
a9:85:ce:4e:7e:9d:84:df:c8:f8:4c:bc:03:e9:72:
dc:64:e8:5d:b7:36:38:ec:34:6c:6d:11:65:a1:a6:
de:6f:ba:b2:75:fd:55:8c:87:39:9e:3b:5b:af:a4:
22:22:8d:16:b3:82:a0:3f:cd:a2:27:5e:35:04:92:
c6:69:81:ff:f3:37:d2:34:36:f9:98:87:a0:4b:40:
94:dd:6a:c9:df:ca:c3:3a:b4:f3:f5:13:f4:90:36:
47:e5:aa:97:d4:bb:ab:c3:35:d7:62:c8:12:a8:47:
11:86:70:e8:08:18:3b:43:89:1e:f1:3c:cd:75:41:
cc:e7:b6:74:3b:5a:b3:26:43:f6:fd:e9:f9:fe:c0:
2f:68:ea:eb:e7:84:fd:9a:25:dc:4d:e0:4f:5c:e1:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F9:62:8A:0F:B0:6E:07:13:C8:E3:EB:F0:C2:FD:C9:A0:2D:10:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd/476620d3-6f72-3438-8b82-64a3ad624dad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd/4f74ea5d-ed82-4ec7-ba82-247305c841cd.crl
X509v3 Authority Key Identifier:
keyid:07:2E:09:3F:E4:BD:49:99:43:C9:B4:2D:E2:2F:2F:2C:0E:60:4E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.216.0/24
142.202.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:ab:5f:54:50:10:ca:7d:dc:0c:dc:8c:f0:3b:7c:b8:6c:f2:
19:12:4f:9a:64:42:71:a5:7b:fc:9e:15:7d:28:26:47:48:cf:
af:00:4a:39:ee:c8:00:9d:eb:ba:d6:68:ef:58:d5:4b:c5:5f:
1c:a1:28:dc:71:51:45:b6:29:0f:71:ff:48:2f:f3:8a:83:53:
a2:63:c6:a2:41:bf:a2:26:9a:13:f4:09:f1:90:62:29:86:fe:
08:21:e9:d6:6e:c8:eb:c9:c4:58:27:b3:50:34:b1:56:33:6d:
aa:f0:db:e7:c5:e6:3e:67:d8:c5:84:13:b7:2b:29:37:02:1e:
ad:8d:30:95:e9:dc:a5:15:05:5c:d3:8a:31:45:40:2b:e9:85:
54:69:e5:da:3d:7b:2a:25:18:47:36:55:88:9d:ab:c0:f6:13:
77:e2:d7:b1:93:3d:7c:53:d1:23:d3:86:c5:06:55:15:66:0d:
4a:4a:10:b7:bb:31:83:e8:4c:fd:44:76:da:e0:42:4e:ca:a7:
61:31:76:3b:24:18:a2:2e:ed:64:67:7a:aa:46:58:6e:e7:6a:
57:35:a7:c6:12:89:9e:01:66:21:ee:ea:f4:25:df:07:20:75:
f4:45:67:e4:e3:47:45:39:e8:d5:31:9c:ce:ad:8d:42:b6:b0:
cd:0f:c2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:58:23 2025 by rpki-client