Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ffb70f16-1146-3f97-a777-eac317aad8ad.roa
File: ffb70f16-1146-3f97-a777-eac317aad8ad.roa (raw, json)
Hash identifier: m4UyfNtBabD3hI7iceJ+lsGHh5SBKQjrC0UnipXC2ak=
Subject key identifier: 6A:27:27:B5:AE:98:AA:E9:4C:23:1D:A6:0A:AC:D6:C3:F1:41:7C:23
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A74590B41B2EA0B8BE280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ffb70f16-1146-3f97-a777-eac317aad8ad.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 208.68.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:44:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:74:59:0b:41:b2:ea:0b:8b:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=ed1bfdb5-e3be-4cf2-b330-78ad24e0a7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:63:7f:21:84:0f:b5:c1:dd:d7:77:8d:fd:
98:f4:18:7f:15:ca:a7:86:5e:ac:21:e2:fb:46:8b:
b7:e5:0d:58:ee:5b:fa:68:a3:29:9c:82:61:74:72:
ba:1e:99:14:23:4d:83:44:64:50:dc:2e:d2:f3:c0:
ce:56:ff:58:82:f4:84:60:cd:58:1b:c7:3b:e3:de:
59:e1:5c:75:8d:2e:29:4e:39:57:11:78:e2:75:38:
2a:72:72:28:dc:93:bc:c3:ff:2c:e9:af:4e:53:e1:
75:b7:56:6c:cc:57:53:14:fd:72:e2:b6:b0:6d:d7:
76:98:42:5a:69:49:1b:d0:dc:de:e5:c7:f3:d6:03:
e7:97:0e:89:db:1c:db:fb:fb:34:50:c2:ef:27:f9:
2c:e4:52:b5:c8:87:ec:bd:08:2d:9e:4a:3f:1d:96:
bf:1c:28:a0:29:8c:ea:6b:64:3f:11:92:39:56:60:
53:f1:f4:52:60:6b:5a:10:b3:65:1a:a9:ef:50:41:
36:e4:7c:74:c0:f4:b9:9e:ae:c1:be:8c:18:8f:84:
bc:39:8d:0e:33:70:ad:01:7a:5f:fc:53:36:f5:be:
c4:4b:cc:3a:6a:e2:92:37:ae:a0:36:a0:a3:d4:da:
34:13:da:d1:5c:b2:f2:47:7d:26:7f:09:f3:b5:f2:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:27:27:B5:AE:98:AA:E9:4C:23:1D:A6:0A:AC:D6:C3:F1:41:7C:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ffb70f16-1146-3f97-a777-eac317aad8ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:36:98:a8:da:79:14:6b:6c:40:7c:c5:dc:84:ba:13:38:29:
df:8a:ee:9c:d5:9d:89:75:3f:f2:00:70:76:86:b2:13:c9:10:
1e:0b:d6:8c:bf:87:4d:00:07:04:f2:38:2d:78:f0:b8:b0:a1:
28:c2:d2:0e:90:7b:f3:1e:50:08:9f:4d:14:28:91:99:aa:db:
da:b7:89:eb:3e:c6:b2:8e:dd:81:8d:14:c8:f6:05:c7:c0:92:
4e:73:47:7e:dc:42:5b:51:64:cd:dc:79:76:2c:db:4b:e3:ac:
31:06:4f:39:2a:35:08:60:ad:2e:0a:4b:66:4f:dd:ed:84:2c:
de:5b:25:3d:df:be:06:69:c1:95:b0:1b:9a:20:1a:30:fe:77:
4b:ea:e1:94:ac:31:c0:d8:65:cb:f2:79:88:83:8a:28:d3:a7:
c5:6c:f7:51:78:65:fd:22:53:69:1c:e9:5e:b3:79:61:c3:ee:
c4:cb:48:76:e1:7c:66:43:db:a0:9c:38:5f:47:08:1c:42:b9:
bc:da:74:9e:42:5b:b4:70:d2:f4:d1:43:b2:a9:ac:9c:a2:52:
ed:30:a7:a4:38:f7:8b:c4:7b:6b:3c:92:9e:e1:52:8a:84:f5:
15:e3:7b:ae:1c:60:97:51:d3:ce:45:45:c6:d1:63:e4:99:bc:
34:37:b6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:55 2025 by rpki-client