Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a37ec1cf-7a31-3db5-968f-854c82d16875.roa
File: a37ec1cf-7a31-3db5-968f-854c82d16875.roa (raw, json)
Hash identifier: Pk8j5akFx5axWZSh6wGjNMDq6uB3kkQ/hdYSHptRCaE=
Subject key identifier: CE:E0:3E:23:3B:CC:37:1B:44:86:DC:5B:AA:62:3C:39:21:29:FC:2F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A53F96C4D43B6D3C15680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a37ec1cf-7a31-3db5-968f-854c82d16875.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 108.170.223.128/25 maxlen: 25
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:53:f9:6c:4d:43:b6:d3:c1:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=0ca22231-5614-424b-b162-33636c9e4592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:84:b4:42:32:46:cb:b0:b7:db:f1:25:e8:
08:19:06:40:f6:c6:fd:0d:85:b4:78:8a:32:a4:18:
45:36:a8:74:07:fd:56:29:ff:51:d8:6f:f7:3e:45:
b1:ea:1a:a5:20:90:ce:46:18:a2:50:25:89:07:83:
08:fa:37:63:55:fd:d6:50:ff:35:8f:79:fb:75:0b:
ac:c1:64:d2:5c:89:99:13:82:44:ef:d4:ca:8a:2c:
f0:ab:17:a5:dd:4d:49:7e:8c:5f:b3:f6:04:b5:36:
b3:6b:73:9e:33:ec:4b:f0:40:03:78:21:e7:5f:ac:
3a:e8:8b:a5:1b:df:82:ee:ce:9d:6e:3a:63:55:de:
3d:81:75:8d:29:31:c4:17:6e:2c:94:2c:23:c3:9b:
82:83:ae:ae:85:ed:6b:bd:fd:31:81:02:e4:1b:65:
3b:45:cc:bf:ee:30:fb:08:91:72:3b:cb:7a:47:cc:
ad:50:a0:8f:6a:f7:25:f9:bb:c5:40:3a:29:b2:46:
e5:9f:a6:0e:2c:d7:45:b7:50:4e:62:53:d0:7b:17:
e8:5a:7a:98:9c:2a:2a:df:84:d0:89:5b:b7:54:b6:
d0:3a:77:02:67:68:3d:4e:11:21:72:f8:70:41:65:
52:c6:04:02:cc:3f:6d:dc:33:9f:a8:da:34:49:66:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E0:3E:23:3B:CC:37:1B:44:86:DC:5B:AA:62:3C:39:21:29:FC:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a37ec1cf-7a31-3db5-968f-854c82d16875.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.223.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:3b:b9:3f:32:64:62:78:e8:20:6e:91:7c:d2:29:04:7f:1a:
b0:03:a7:1f:52:49:a6:16:be:25:1b:c1:5b:e2:b1:15:7a:01:
f1:58:3d:64:5b:65:c9:af:5d:25:88:ce:74:aa:e7:ba:31:00:
64:c9:02:89:cd:c3:b6:16:ae:30:50:2a:7d:65:74:a1:a3:7f:
51:b5:05:a9:e9:ae:78:d5:a8:4d:04:b1:1b:b4:12:29:95:99:
c0:2c:26:29:c2:04:c1:8b:46:46:77:b0:1e:3a:0e:be:ca:51:
8e:7a:dd:ec:15:11:55:90:00:66:04:85:11:28:e4:1b:cb:1b:
91:9d:c8:d3:13:d1:dc:73:dc:46:74:ef:1f:e8:b2:be:11:e7:
5b:d2:c6:0a:ff:67:55:3c:5b:bd:92:13:74:80:07:ad:15:9d:
6e:a2:e1:46:bd:cc:a3:e2:84:94:76:98:e0:4d:53:57:84:99:
cb:a5:19:a4:d5:98:dd:e5:d1:9b:48:8a:08:64:44:7d:63:7c:
be:d2:fc:05:92:05:25:a1:ef:03:0b:40:5a:4a:87:af:d5:a0:
a3:2d:49:06:95:b5:06:11:e0:fd:cf:66:51:1b:83:9a:57:d0:
af:9a:37:20:a6:f8:98:eb:08:77:7d:11:86:d6:73:f8:82:61:
51:2a:a4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:16 2025 by rpki-client