Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c41629ae-0660-3fc1-b616-963f0e4a4b6a.roa
File: c41629ae-0660-3fc1-b616-963f0e4a4b6a.roa (raw, json)
Hash identifier: +YLDs6dZHZGQTtGNaEVbaSoZzAzsDr32qbiIM1VfwBs=
Subject key identifier: 0F:76:68:A5:36:DE:95:BE:DE:9B:39:34:1B:65:59:39:5C:E0:0A:FD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486D905CE9B83D638B2865A560
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c41629ae-0660-3fc1-b616-963f0e4a4b6a.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.32.38.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 21 Jan 2025 14:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5c:e9:b8:3d:63:8b:28:65:a5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=779613a1-2d67-4a16-bf6c-3ad2e5e88c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:35:5f:0e:b6:f0:08:7e:ca:ea:3d:19:c2:
3c:64:6d:c6:06:37:f8:06:84:ac:ea:2d:0a:3a:22:
bd:bb:28:94:8f:73:c8:f3:47:3a:bb:1a:7d:1d:2c:
ca:e5:c8:b9:e7:5a:e9:88:4e:ce:aa:da:58:bb:43:
90:2b:6a:92:af:b4:15:a3:f8:db:36:49:14:bf:52:
bc:b2:b6:c5:57:a4:8e:96:4e:4c:5e:c3:93:3b:a9:
7d:43:50:2b:ef:84:44:a1:de:13:68:fc:6a:91:1d:
26:62:00:59:13:da:e3:28:4e:4f:f7:ff:d2:7d:b9:
a5:ab:89:99:29:28:72:72:fb:ec:8e:4f:ea:6d:29:
2d:22:d9:bb:d2:67:d5:56:9c:35:7d:5c:b7:50:7b:
aa:64:6a:b2:3f:3e:8d:99:08:2c:78:c0:e3:4c:ea:
36:36:9b:30:a0:f5:b4:be:1d:07:6e:2b:da:f0:6e:
82:5c:06:59:9e:18:41:88:7f:ed:8b:e9:f4:b6:f7:
06:b0:ee:e2:c8:a9:fd:db:da:07:38:a8:2a:7c:b6:
70:c8:84:fd:f9:28:18:c8:55:2b:5b:67:83:c8:94:
f9:9a:a6:c4:e5:67:1f:08:1a:ec:1b:d7:e4:11:9f:
9f:dc:3b:3e:05:09:05:41:90:8d:6e:92:91:45:af:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:76:68:A5:36:DE:95:BE:DE:9B:39:34:1B:65:59:39:5C:E0:0A:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c41629ae-0660-3fc1-b616-963f0e4a4b6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:58:62:d5:d5:47:e0:ec:ef:f2:ff:1f:5d:f3:67:b8:94:75:
bd:7f:cf:32:d3:c0:9e:8b:1e:51:a3:c2:b2:12:82:56:40:88:
5c:e1:63:63:22:0f:bd:28:bb:34:c8:13:59:a2:39:d4:76:e9:
67:c9:55:c9:89:f8:f9:21:09:9b:18:c9:02:f2:3a:a4:ff:af:
62:f6:3d:be:c3:17:78:43:9e:91:8e:c6:ba:98:a7:40:6d:99:
15:d3:e1:83:79:3a:be:f0:79:1b:e8:51:3b:e8:c4:f9:0f:3e:
08:99:c6:ef:d4:4b:a5:2e:a6:05:e2:ef:e8:6c:01:24:a2:df:
fe:a5:5a:45:f7:12:71:46:00:f5:d6:31:4e:76:99:2f:49:7c:
4c:f0:50:9d:91:8b:7b:2f:eb:ee:56:4b:97:03:50:ef:7b:ec:
02:f0:88:b7:64:2c:54:a4:8c:85:5c:40:19:07:a7:c4:ca:7e:
c1:9c:55:38:5a:0f:e2:a8:60:6e:35:e2:e2:02:f4:c3:83:ef:
65:2c:ca:55:fa:3c:37:e3:72:fd:16:7c:6e:7c:51:4c:f4:64:
c1:af:2e:80:e7:ae:69:9c:cc:d7:ee:8f:7f:4b:cb:12:18:ed:
9e:3c:a0:f5:da:89:dc:53:51:86:75:31:49:94:10:5e:6c:45:
66:97:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:56 2025 by rpki-client