Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/647a2e1f-865a-3531-a682-9caa22a0420e.roa
File: 647a2e1f-865a-3531-a682-9caa22a0420e.roa (raw, json)
Hash identifier: nYimLvV1Q2rHqTreu4+H3Wu9R8HTkhOCsOhZqcD8CDc=
Subject key identifier: 5E:E4:ED:D0:FB:F7:6D:FE:08:96:92:1A:EA:02:A9:E0:AC:E1:33:2F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848F926A2A16A69BBC852FE7238
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/647a2e1f-865a-3531-a682-9caa22a0420e.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 35994
IP address blocks: 23.33.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 15:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:a2:a1:6a:69:bb:c8:52:fe:72:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=8a201dee-efe4-4b2c-a936-af02f21709ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:71:5b:a5:44:0a:76:5d:98:58:25:59:bc:
82:fe:57:f4:64:a6:83:42:d3:04:11:97:3e:72:7a:
35:58:80:ea:b5:6f:28:e5:6c:5b:63:f7:c1:e3:70:
81:ee:d3:d2:55:59:ff:e6:f4:66:15:7a:66:13:de:
20:ce:3c:32:64:e9:ff:05:a1:46:a7:c3:2d:27:f3:
a1:09:f3:fa:f3:ec:98:b7:44:6d:c8:c0:00:70:b9:
42:df:ba:5b:86:53:c3:6f:8e:dd:cc:21:1d:9c:bd:
bc:9c:77:2e:2b:81:15:01:10:4f:c0:e7:00:ed:f0:
0d:bb:d3:cd:98:c4:cb:8b:4d:8b:2d:7d:40:3b:bc:
a9:cd:04:39:5b:f9:be:ce:9c:1e:b7:0f:09:3d:88:
2e:70:3e:e3:ac:98:c6:73:b4:c5:2d:a6:9a:c7:49:
dd:83:ac:92:ec:e8:db:bd:c5:8c:20:80:09:13:3c:
a9:29:16:9f:3f:32:9f:d8:97:b4:0b:00:12:e0:c3:
89:c5:a6:9f:93:dc:93:79:42:82:0d:f1:92:06:e5:
e4:ed:82:22:88:16:a9:30:54:18:2e:77:1e:70:16:
d6:be:7b:35:43:d0:3a:6c:05:66:32:7d:18:1a:9f:
36:2d:df:c9:59:8e:1c:36:a8:b5:63:40:6d:87:63:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:ED:D0:FB:F7:6D:FE:08:96:92:1A:EA:02:A9:E0:AC:E1:33:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/647a2e1f-865a-3531-a682-9caa22a0420e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:3b:c2:94:b1:e8:33:88:3d:ed:9e:4c:86:27:7b:93:68:51:
15:af:4d:cf:c0:21:fc:59:54:58:1e:1e:99:65:ec:f8:ad:ed:
97:4e:80:d8:5f:c6:d6:d8:a3:1b:16:65:9a:4e:42:e1:8a:33:
86:09:7e:89:ee:e2:bb:f6:ba:1f:52:4b:78:3f:e9:66:6b:6c:
a4:8c:3c:33:0f:ac:57:16:4e:ed:67:78:ab:57:8a:f3:7a:43:
46:a6:57:57:e0:d4:80:3e:b8:55:be:0a:a7:eb:4b:d6:57:09:
61:25:e3:92:14:d0:9e:20:4a:cc:c9:0b:4c:7e:4d:0b:69:51:
f5:9d:f4:d5:bf:83:28:b2:7f:e0:8a:ca:6a:ea:dc:38:37:58:
c2:5a:33:41:6c:f4:37:10:81:0f:84:44:b8:cd:3c:f7:02:49:
81:5d:86:0a:99:60:9e:eb:5c:79:67:86:5b:8c:8d:00:5c:8d:
84:6f:43:85:a4:f7:0f:13:a8:58:79:51:c1:d9:52:80:7d:e1:
24:27:5d:59:78:a3:f4:e4:d1:73:8d:8a:90:11:4f:f9:40:5c:
8d:0e:4a:77:5e:57:8c:9c:e0:05:86:4f:44:cb:be:60:0a:c9:
f1:ea:e9:3b:e7:cd:cf:c2:09:d9:6e:5b:f9:4c:34:fd:6b:cb:
90:3d:e8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:56:13 2025 by rpki-client