Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2807d58d-db2e-3986-a0a2-660b1639a615.roa
File: 2807d58d-db2e-3986-a0a2-660b1639a615.roa (raw, json)
Hash identifier: zrfJM0XK+PrAkAzbp85LXcHhjy6SR+H1E20hKhVHqiQ=
Subject key identifier: 34:EE:4E:D8:37:A2:63:68:42:14:0D:63:CC:EF:AE:EC:B8:A7:EF:AD
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584855D59E7A7B0ACF05B076FD90
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2807d58d-db2e-3986-a0a2-660b1639a615.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 13576
IP address blocks: 216.249.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 15:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:9e:7a:7b:0a:cf:05:b0:76:fd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=deb94719-2ba0-4a4d-810f-15f45865b01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:71:b8:8b:24:b3:da:19:70:c6:16:8a:bf:18:
4a:40:89:dd:7e:1e:3e:3e:c9:a6:8f:18:9c:ac:a7:
0a:be:a6:a9:af:f6:51:03:b1:36:48:55:b5:95:dd:
8f:75:e2:e3:c0:5b:f6:0e:9b:96:ed:2b:cf:cf:a0:
34:aa:34:3d:94:41:f6:10:74:43:d8:1f:cf:cc:3b:
31:24:4d:74:13:ee:8e:5d:c9:43:e9:36:2a:57:d0:
3b:4f:55:22:50:eb:27:a1:b2:bd:46:d6:61:e9:5a:
0b:f5:c0:0c:00:f8:b9:85:39:3c:c1:57:7b:a8:3b:
c8:4c:ff:e2:53:82:4c:1e:88:68:15:6f:94:67:6c:
b7:e9:ba:65:88:84:aa:57:2e:ca:6a:d1:8f:ed:23:
9a:34:e0:15:82:02:80:f3:d2:c6:8e:c0:7e:d6:2e:
e3:14:2f:71:96:8d:40:32:c4:65:ac:f6:ab:90:56:
b0:69:93:16:63:17:eb:dc:00:40:ee:02:ba:a1:75:
7e:58:ed:7d:45:29:e7:67:b9:30:88:d0:b5:4b:c8:
36:ee:ab:6e:45:b2:de:75:dd:16:fd:80:61:41:73:
82:72:67:80:e5:73:6d:49:01:bb:ae:3b:43:04:71:
71:69:11:13:36:b9:c5:4f:a3:91:10:38:d1:a8:de:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EE:4E:D8:37:A2:63:68:42:14:0D:63:CC:EF:AE:EC:B8:A7:EF:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2807d58d-db2e-3986-a0a2-660b1639a615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:b4:e9:d5:46:0b:d4:ef:d7:1b:2a:ce:d9:09:bc:43:12:24:
9a:92:d7:b6:6e:9a:5a:07:a3:a6:5e:48:8a:d3:46:2a:57:d5:
b2:8d:cd:31:fb:a3:ea:98:48:00:b4:70:66:97:2b:62:bc:b5:
d5:82:8b:08:17:6e:7f:cb:db:a3:3b:62:f1:38:d8:21:81:43:
d1:65:2f:eb:56:82:e2:28:5a:5c:aa:79:73:2e:31:6b:88:51:
4b:46:18:3f:bc:4f:31:48:3b:22:04:21:a0:07:63:69:f2:ad:
5b:23:0c:59:89:f3:19:58:e5:32:36:98:6f:15:72:03:9f:fa:
4d:ed:42:17:3d:02:e2:ae:cb:21:7d:4b:01:4f:35:ad:e4:f8:
9e:56:06:4c:35:bf:cd:94:38:c0:41:c3:29:c5:2d:f9:32:28:
96:2f:61:f8:6b:92:11:9c:6e:93:70:69:f4:06:90:56:ef:18:
a7:99:49:19:5e:53:d0:fc:49:65:c6:72:34:45:c7:5c:12:55:
63:86:c2:94:cf:26:f8:19:6b:95:02:5c:17:a3:3a:c6:66:7d:
16:cf:06:97:64:85:08:ea:f1:52:6a:9e:f1:29:44:96:e3:d1:
94:64:d3:b7:ee:81:1f:d5:2d:31:5c:ca:2f:28:20:b3:08:1f:
8b:d1:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:06 2025 by rpki-client