Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/91454fbc-49a0-3ff0-99a1-4f63c786639c.roa
File: 91454fbc-49a0-3ff0-99a1-4f63c786639c.roa (raw, json)
Hash identifier: eFqvvOQKC/Ji9YHQB9sCs2YxXlh8w2USB3VWI3uTyKk=
Subject key identifier: 04:0B:2F:81:49:20:95:FB:3D:84:72:E1:CD:55:A2:92:FA:05:BC:00
Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial: 010D0C9F432858488AE9B5BDAC9E6899EB88ED80
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/91454fbc-49a0-3ff0-99a1-4f63c786639c.roa
Signing time: Tue 14 Jan 2025 14:19:20 +0000
ROA not before: Tue 14 Jan 2025 14:19:20 +0000
ROA not after: Mon 14 Apr 2025 13:19:20 +0000
asID: 9232
IP address blocks: 198.1.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Feb 2025 14:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e9:b5:bd:ac:9e:68:99:eb:88:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Validity
Not Before: Jan 14 14:19:20 2025 GMT
Not After : Apr 14 13:19:20 2025 GMT
Subject: CN=14dfe30b-8d68-4782-b316-c8a55e8358d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:80:56:f5:f0:e6:ac:82:94:2d:d7:cd:5c:a8:
87:93:ff:05:47:b6:03:d6:d3:d9:ed:7e:30:d6:d1:
be:ea:7f:94:77:6f:80:1a:12:f2:96:1f:db:6e:0b:
18:6a:29:c7:16:54:df:4d:e1:33:15:44:70:37:6c:
4b:b7:fc:6c:49:18:e4:52:5b:5c:8f:5c:74:fc:15:
6f:c8:3d:51:2a:08:1a:8a:4e:9e:25:96:a2:d9:b5:
8a:e3:78:38:3f:b2:2b:5c:55:69:10:48:21:7e:34:
78:b1:36:a0:f8:62:50:83:40:ad:ae:cf:ef:d0:e8:
85:e7:66:e3:c5:f0:81:59:7c:02:fd:b1:5b:c5:a8:
70:37:22:d7:71:5d:44:5d:c4:53:90:71:b5:c8:d9:
13:9f:a4:85:20:bb:a9:d0:a0:cc:eb:4b:5f:1b:e6:
6c:bf:0b:21:51:96:35:26:07:34:13:85:5f:a1:51:
bf:58:8e:27:51:39:77:8c:0e:df:fb:0e:a0:4f:b3:
95:09:99:85:de:66:a1:41:69:e8:eb:80:d1:2a:ad:
d8:0e:35:88:6a:4b:27:c8:1a:e4:f5:61:59:a2:8a:
e0:43:08:ca:a9:4b:2b:33:04:44:10:c5:15:36:56:
db:f1:29:d2:78:54:3a:38:5c:7b:42:36:92:82:22:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0B:2F:81:49:20:95:FB:3D:84:72:E1:CD:55:A2:92:FA:05:BC:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/91454fbc-49a0-3ff0-99a1-4f63c786639c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
X509v3 Authority Key Identifier:
keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.1.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:37:46:ee:0a:a8:83:9c:28:bf:d8:93:d7:0d:da:ac:8e:81:
cd:81:a3:05:a0:ba:80:8a:1a:e0:63:1b:6f:28:36:4e:48:52:
14:35:00:54:70:ca:14:1c:ea:42:79:2e:c6:0f:7a:60:78:87:
c0:9f:c5:e0:c3:50:f7:fe:8f:d7:f2:86:2b:c3:71:5b:5c:ae:
e3:93:d1:07:f3:22:2a:fd:00:6c:e0:4a:1c:53:4a:69:8d:fc:
f8:fa:c0:32:40:b4:35:9e:e3:f6:63:1c:40:21:8d:a2:49:c5:
c4:83:b4:1b:68:cb:5d:55:eb:ec:f5:bb:bd:92:97:0b:ce:5f:
f4:8f:7d:77:13:2c:ce:12:8f:da:00:b9:4f:5c:48:c5:f9:f8:
68:84:aa:2d:69:31:b3:94:c6:78:0c:84:5d:61:ae:62:98:71:
9e:a2:e5:c6:2b:6d:0d:13:c9:24:80:0b:da:6e:41:eb:3c:a7:
63:83:fa:56:12:bf:b5:3b:bf:33:0b:6e:43:fa:9f:2e:40:72:
4a:27:fc:f0:4d:f4:ac:ae:03:0c:75:91:15:87:62:50:3d:b1:
1b:0d:4f:29:7a:87:9f:ab:0e:b3:b0:38:6b:38:fe:c5:32:40:
a4:08:db:31:b3:d3:b1:c0:7e:75:49:0b:73:1a:d4:05:15:c2:
35:98:9e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:36:22 2025 by rpki-client