Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e32221cf-4168-364a-9250-8bb27d412892.roa
File: e32221cf-4168-364a-9250-8bb27d412892.roa (raw, json)
Hash identifier: eYZzydwUccrOE8Pj/zY252dGQxlabwGE8XvzhGrKSng=
Subject key identifier: A0:1B:79:D8:02:E4:A0:9F:36:0E:DF:46:80:19:14:93:E6:03:83:B8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328576D51CC73C042CFC171C060FEAE
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e32221cf-4168-364a-9250-8bb27d412892.roa
Signing time: Tue 28 Apr 2020 10:41:54 +0000
ROA not before: Tue 28 Apr 2020 04:00:00 +0000
ROA not after: Mon 28 Apr 2025 04:00:00 +0000
asID: 0
IP address blocks: 23.211.114.0/23 maxlen: 24
72.52.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 16:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:c0:60:fe:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 28 04:00:00 2020 GMT
Not After : Apr 28 04:00:00 2025 GMT
Subject: CN=d0e416ac-0f4c-48c8-874b-7dfdbede27fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:93:c3:b6:d5:e2:5a:f5:62:4c:57:3c:85:56:
93:47:73:e5:0c:32:3f:01:1f:93:9b:3c:f0:cc:d8:
3e:aa:72:5c:f1:6d:fe:3a:e1:e3:be:2f:88:dd:74:
35:de:0f:15:0c:37:08:e8:88:6e:fa:41:4e:27:da:
71:32:97:6e:bb:62:f5:8c:fd:2a:58:9b:3e:4c:0c:
fe:ce:91:20:17:3c:f1:90:d0:95:5b:05:a4:5c:aa:
f6:13:6b:20:65:58:5a:bd:6f:9a:a0:69:d3:d0:19:
06:e1:00:b9:ed:6d:da:83:ef:fe:1b:db:72:11:6f:
4f:e3:86:1e:45:49:73:ec:48:d4:cf:23:c4:7c:b8:
e3:6b:1e:b8:a9:f0:04:4c:38:b1:d1:df:df:1f:13:
dc:b5:2f:23:56:b7:75:dc:ce:b6:2a:73:51:6b:f0:
6d:7b:e1:7a:bf:ff:23:62:ee:59:a1:d8:4f:a0:56:
f1:42:ea:ff:cd:06:ab:79:cb:44:26:33:7e:69:fa:
ef:8b:8d:9c:d2:46:dc:55:d9:70:32:ec:6b:26:8c:
e5:c0:d2:47:d3:04:42:b9:f1:dd:52:61:ea:13:36:
21:95:59:94:28:4c:bb:8f:8a:a2:71:9f:8b:ba:45:
84:88:95:b7:9e:d7:bb:64:46:ce:60:56:03:5f:0a:
6f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1B:79:D8:02:E4:A0:9F:36:0E:DF:46:80:19:14:93:E6:03:83:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e32221cf-4168-364a-9250-8bb27d412892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.211.114.0/23
72.52.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:c3:03:e7:56:bb:f2:86:62:39:07:25:26:8d:70:0a:04:70:
4a:0a:e2:d9:af:22:de:19:31:83:4e:2e:b7:6f:16:26:15:af:
ba:83:d9:b1:27:e9:aa:d2:24:66:de:97:82:15:65:d8:91:09:
5a:38:25:95:4c:6d:f5:57:1e:67:05:43:12:dd:64:a6:cc:54:
36:5e:98:b5:bb:c2:ef:a4:68:d2:c3:d6:07:5b:63:81:b2:62:
66:df:e2:a9:51:8c:cd:48:78:ba:d5:d7:2e:f9:0d:1b:db:a5:
87:82:66:48:16:83:d1:e5:24:6d:04:65:30:b4:c7:0c:4a:99:
dd:c1:0d:ee:d0:20:27:0c:3e:6a:6d:72:a7:e8:17:9a:dd:26:
22:84:9b:b8:49:24:df:95:13:4a:de:04:ef:84:7b:3a:98:78:
d3:ae:59:f4:77:06:82:d9:26:0e:4b:cd:0c:34:aa:ac:68:4b:
6d:15:39:fe:c8:34:a5:e9:e8:fb:eb:fb:9c:66:c7:b2:09:3d:
8e:1e:6b:bc:73:41:36:ce:4f:b3:ff:58:98:27:26:07:af:b1:
35:24:9e:cf:02:4f:8e:01:61:7a:71:a5:a9:0e:10:df:e8:49:
6a:d8:6f:23:4d:2f:35:13:7d:ec:43:96:81:5d:b1:5c:b5:30:
8c:b2:2b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:23:16 2025 by rpki-client