Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/06ec7faa-4232-3b93-ac6f-636511d58f9a.roa
File: 06ec7faa-4232-3b93-ac6f-636511d58f9a.roa (raw, json)
Hash identifier: pY8mjP2avnZXw4EbbPaJzRRsAQo1DI+GZwp9aS85gW4=
Subject key identifier: D9:D7:31:90:3F:5C:72:4C:A1:FB:BF:3E:6B:97:BE:DB:DF:C1:5D:35
Certificate issuer: /CN=acc14dc4-6768-43c1-9d95-c89a552020c1
Certificate serial: 010D0C9F43285848AA0F224AD960C617B9622080
Authority key identifier: 22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/06ec7faa-4232-3b93-ac6f-636511d58f9a.roa
Signing time: Sat 25 Jan 2025 18:04:48 +0000
ROA not before: Sat 25 Jan 2025 18:04:48 +0000
ROA not after: Fri 25 Apr 2025 17:04:48 +0000
asID: 834
IP address blocks: 45.150.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 20:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:0f:22:4a:d9:60:c6:17:b9:62:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc14dc4-6768-43c1-9d95-c89a552020c1
Validity
Not Before: Jan 25 18:04:48 2025 GMT
Not After : Apr 25 17:04:48 2025 GMT
Subject: CN=1036aa0b-a4ae-443b-9cbf-f4102beb546c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:04:c6:49:5b:fc:5d:d5:ee:21:fb:5c:d1:
66:3d:8b:29:2c:22:be:a1:1c:e8:3f:2a:75:8b:ab:
3a:46:36:68:ae:a1:1e:ee:24:00:5a:16:2c:7c:99:
85:c5:f4:62:fd:82:d4:7a:5c:b2:06:68:52:92:d8:
ac:0f:23:2e:3e:c4:10:3d:44:61:ff:94:8a:3e:31:
6d:0e:8d:23:bd:30:47:67:2d:5a:dd:f7:6b:16:ce:
a9:8b:31:40:32:cc:17:89:e5:94:9a:83:7a:39:82:
38:34:85:0d:e7:36:44:cc:d3:33:db:17:59:f7:99:
b6:03:5e:dd:9e:02:14:c3:83:9f:0a:62:b0:b2:7c:
46:51:d7:e1:f1:e6:45:ae:fd:04:1f:b1:2b:2e:9d:
91:f9:b9:7e:90:42:9b:4b:58:5a:1d:7b:88:02:cc:
87:21:3d:32:dc:a7:ef:cd:5b:61:4f:b6:88:58:69:
9a:bf:16:d4:1c:d7:4b:97:c7:a3:99:c9:cc:40:d0:
d5:a0:27:52:69:28:0e:ef:84:c9:32:4d:01:70:1c:
b3:10:31:cc:13:5e:53:68:d3:b8:af:c0:18:e4:42:
fa:e2:79:a7:cb:12:c7:98:90:90:30:30:a0:db:8e:
c3:10:23:ac:72:70:ec:7e:26:38:73:36:8e:1e:eb:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D7:31:90:3F:5C:72:4C:A1:FB:BF:3E:6B:97:BE:DB:DF:C1:5D:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/06ec7faa-4232-3b93-ac6f-636511d58f9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.crl
X509v3 Authority Key Identifier:
keyid:22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer
sbgp-ipAddrBlock: critical
IPv4:
45.150.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:8a:5d:e4:0e:77:4d:75:92:3f:5d:29:09:fd:aa:df:d8:d3:
d9:05:a1:42:e0:f5:4a:66:db:b5:fa:0f:a3:fa:a5:7f:7c:41:
65:74:51:de:de:a9:cc:27:61:b9:e5:d7:b2:4e:cd:ee:76:19:
da:ae:78:4a:9f:43:67:93:29:72:de:40:c1:1b:37:16:9e:7f:
37:0f:20:b4:c3:76:6b:50:e7:8e:3d:41:19:cf:e0:fe:74:f7:
9f:9f:e2:b8:63:9e:79:7a:fb:6d:54:6e:91:67:25:61:66:f6:
c3:f1:f1:07:ea:0c:79:08:3a:86:8a:7d:3c:64:8c:0f:83:63:
dd:96:f0:eb:b6:41:1f:bd:1e:8a:a9:e9:ce:8b:df:cd:cd:7d:
de:98:57:1f:f3:c2:36:df:e0:cb:59:3e:a4:1a:21:c4:4c:6f:
d4:f7:39:cb:a5:a4:ea:87:c3:91:2f:01:94:82:a6:78:83:fb:
3f:49:2d:6f:4b:7b:e5:ad:ca:17:26:65:a8:7d:57:dc:da:09:
3e:de:29:56:83:e2:04:61:18:1c:70:b6:c2:4d:17:56:46:96:
aa:87:74:fb:66:3d:a9:1a:79:04:6b:3c:4a:59:78:ba:12:7c:
56:d9:23:aa:ad:a7:ad:65:40:99:dd:62:ae:bf:7f:3c:65:e9:
3d:aa:74:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:00:29 2025 by rpki-client