Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ceeb1c45-52cf-3adc-9f15-dffeef761a7b.roa
File: ceeb1c45-52cf-3adc-9f15-dffeef761a7b.roa (raw, json)
Hash identifier: l1V+ddYmF9bXhDG0pWkHvPAhaE9GoVYofgyWAc3KQIo=
Subject key identifier: 30:A2:5B:A9:3F:43:F2:9B:CE:CD:0A:25:D4:0F:87:B7:C4:AC:F2:E8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584890761110157B1B9E5EB97800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ceeb1c45-52cf-3adc-9f15-dffeef761a7b.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 16625
IP address blocks: 23.201.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 12:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:11:10:15:7b:1b:9e:5e:b9:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=bccf4c1b-cb2c-40d7-ab04-3cf9501ffd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:05:69:2a:a5:37:ad:6a:b3:60:9b:1c:57:f3:
44:d5:cb:76:5d:ea:32:cf:5d:8a:bc:d7:9f:85:1b:
5e:51:73:d3:4b:49:e9:16:27:c2:53:9e:3c:cc:c5:
e6:af:26:18:76:f5:9e:35:29:bc:c9:20:90:f6:5d:
0c:41:8a:3a:92:e5:83:fd:3e:46:b7:c3:c8:72:51:
82:d9:2f:78:2f:3f:fb:eb:ee:48:b1:26:d6:42:23:
d2:d1:29:41:69:55:44:39:55:ef:c8:d1:93:bb:69:
9e:8a:5e:06:32:5c:c4:9e:3f:4c:13:26:ba:e0:10:
f6:d5:5d:2a:c3:1d:d7:95:9b:41:1c:d6:83:8c:6e:
0f:0b:b4:d1:ac:3e:a9:25:81:93:a9:78:f5:3a:16:
85:a8:d2:c6:80:e7:b1:57:f9:cf:d0:68:c1:f1:19:
77:34:29:b9:55:43:be:2a:e1:f7:36:ae:27:50:3f:
93:3f:94:61:98:6e:c2:e1:81:3c:73:36:fa:73:a3:
4c:0c:8a:0a:02:a6:81:d3:24:8b:a2:39:64:45:cd:
27:2a:15:b2:70:c0:25:af:77:d8:6d:aa:b7:fa:14:
a5:87:06:52:82:aa:54:58:46:0e:23:86:da:ad:1a:
b6:91:12:fb:27:5c:dc:17:a9:a9:3a:7b:c3:75:0a:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A2:5B:A9:3F:43:F2:9B:CE:CD:0A:25:D4:0F:87:B7:C4:AC:F2:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ceeb1c45-52cf-3adc-9f15-dffeef761a7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.201.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:a8:3c:83:b2:7a:7f:c0:aa:18:19:ab:b2:f5:d7:a0:82:1b:
e7:e7:8e:09:05:bc:f6:5e:62:7c:56:d0:56:ab:66:9d:5e:36:
bc:d2:cd:eb:7a:77:a9:6c:bf:64:e6:05:b2:ba:c6:36:26:1d:
5b:57:f3:82:89:04:c5:f1:66:f1:47:24:1b:b7:cf:e7:89:8b:
25:69:0b:02:a0:ad:b6:0d:c8:71:f5:34:0a:15:7c:82:2d:18:
99:57:e9:9e:e5:25:59:d3:84:f3:4b:1c:e3:13:22:11:ab:1c:
76:7e:92:2f:3f:d4:63:9d:ab:bf:cd:32:4c:81:c6:fe:62:11:
67:fd:ee:b3:a3:05:4b:4d:45:05:62:10:56:1b:63:ac:07:fb:
1b:b9:11:ef:8d:3d:54:ae:10:af:24:f0:34:5f:1a:88:fe:97:
03:67:ce:df:6e:d6:79:12:21:4e:8c:b1:d0:78:24:54:6b:72:
3d:b5:26:49:c4:62:24:95:72:af:fd:d2:9e:86:91:47:d8:44:
c0:0d:dc:8f:62:e8:3b:a9:e4:2d:a4:ea:80:b1:10:17:cc:22:
5b:0b:94:09:5d:45:7a:67:41:d4:90:51:c3:20:13:31:bc:86:
8d:76:81:80:f2:c3:da:42:d5:0b:e2:d5:59:63:df:58:06:8c:
ba:44:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:29:38 2025 by rpki-client