Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/074dbb47-3ff1-36c3-85f4-f55511adaa85.roa
File: 074dbb47-3ff1-36c3-85f4-f55511adaa85.roa (raw, json)
Hash identifier: 1RSQJlXneombM1M4vRUYUzVCc9lMvM+8pohfvYowTew=
Subject key identifier: 86:0D:81:C3:54:98:C5:CA:33:28:E4:31:40:20:11:E1:1A:B9:B2:2D
Certificate issuer: /CN=9c74a627-7577-4f11-89e0-589500621344
Certificate serial: 010D0C9F43285848CD109CBDDE96529865A5D540
Authority key identifier: D6:44:B8:32:E0:03:37:FD:A1:6A:62:DE:AE:42:CF:56:27:4A:A1:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/074dbb47-3ff1-36c3-85f4-f55511adaa85.roa
Signing time: Fri 07 Feb 2025 07:01:04 +0000
ROA not before: Fri 07 Feb 2025 07:01:04 +0000
ROA not after: Thu 08 May 2025 06:01:04 +0000
asID: 3356
IP address blocks: 23.133.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 17:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:10:9c:bd:de:96:52:98:65:a5:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c74a627-7577-4f11-89e0-589500621344
Validity
Not Before: Feb 7 07:01:04 2025 GMT
Not After : May 8 06:01:04 2025 GMT
Subject: CN=ea078fec-a855-485e-a126-913f57bcef22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:1a:d3:2b:38:b2:74:4a:aa:e0:95:4a:97:
b8:92:79:df:54:7a:78:fc:f6:92:f7:79:83:23:23:
bc:38:20:11:4b:9b:c0:e6:a0:4f:ac:bc:aa:44:c9:
51:7b:82:11:60:ac:9d:41:c5:e9:4d:aa:c6:fe:18:
b6:16:27:3c:7c:d9:a7:e1:94:25:6e:80:de:3d:77:
48:c9:39:a2:9f:da:fd:5e:67:b5:52:fe:55:f0:54:
74:0c:4c:58:17:0f:56:06:69:48:e7:7d:2c:f8:0e:
4a:4a:05:03:71:cd:97:04:fc:18:55:ae:36:e3:6d:
ea:05:1b:88:fd:78:3f:7d:9f:de:50:b1:57:d4:48:
a4:84:38:7a:90:5e:69:5c:a0:09:b7:d3:da:9c:d5:
4b:c4:b5:86:d5:f4:73:20:fb:f6:5c:26:60:93:89:
c0:cf:76:fd:07:35:77:6f:90:c8:ab:af:11:3c:5e:
4b:4b:fa:7a:0c:1b:9d:e1:3d:b5:0f:a8:cd:d9:21:
ee:ad:b4:b8:35:37:4a:2c:26:12:7d:c6:01:74:5b:
13:de:07:2a:c9:3f:c3:8c:c8:3a:ec:c2:e5:80:c2:
6e:8b:fa:77:02:4f:0e:1e:6a:1c:ea:fa:17:2a:06:
73:80:db:33:9d:51:cf:f7:a4:31:c1:42:5e:ce:d3:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0D:81:C3:54:98:C5:CA:33:28:E4:31:40:20:11:E1:1A:B9:B2:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/074dbb47-3ff1-36c3-85f4-f55511adaa85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.crl
X509v3 Authority Key Identifier:
keyid:D6:44:B8:32:E0:03:37:FD:A1:6A:62:DE:AE:42:CF:56:27:4A:A1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:d9:64:cd:b3:4e:b1:0d:9d:14:09:2f:0c:8a:b8:68:ae:a3:
0e:3a:3f:ae:7a:4f:e0:1a:a5:85:e3:c3:82:64:84:62:ef:b0:
28:25:d9:e7:90:4f:50:e9:c1:a6:6e:1f:6a:7a:13:e8:06:f7:
1e:9d:76:47:e3:a2:5a:b1:bf:d7:9f:1c:f6:3a:a8:66:7b:ed:
74:14:8a:b0:42:9e:67:6b:41:4e:df:66:5b:35:1d:da:09:c7:
bc:f6:c8:b6:7b:62:ce:66:ab:0a:fc:6c:4d:51:21:b0:20:e8:
65:d2:e7:b8:29:8d:fe:18:5c:89:f8:a8:f7:29:00:39:3f:2c:
64:5a:10:f3:fe:cc:11:7d:5e:9d:c5:fb:34:d4:52:c3:6a:d5:
3a:97:00:db:cb:df:3a:47:83:d5:2d:2c:6f:45:ec:77:5c:3d:
33:ea:f7:1e:f7:eb:bd:04:3a:57:30:0a:a6:24:fe:c9:77:48:
81:c7:2e:e1:7a:28:d1:18:ad:0c:e1:3d:db:0f:e0:4e:98:aa:
ee:4b:de:45:66:77:82:cc:9f:70:8f:a2:83:a5:94:f8:e5:8a:
24:bc:fa:d9:a2:4f:81:f6:7b:36:b4:2b:10:4e:df:9b:03:f7:
ee:b5:17:d1:79:dd:85:15:17:d7:1d:bb:97:50:aa:51:9c:72:
6f:b7:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:04 2025 by rpki-client