Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/9f103ecf-aca5-3c83-96a1-56cfaf7c3d2a.roa
File: 9f103ecf-aca5-3c83-96a1-56cfaf7c3d2a.roa (raw, json)
Hash identifier: YixySiHZhZvnFUm9xFX/nWH650fAfSZbuREJ5xIv6s8=
Subject key identifier: 6E:C9:B0:16:93:2E:4B:1D:10:E5:34:55:69:46:E2:E5:23:EA:72:13
Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial: 010D0C9F43285848D2113900159F638F79384440
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/9f103ecf-aca5-3c83-96a1-56cfaf7c3d2a.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 1239
IP address blocks: 104.243.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 20:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:39:00:15:9f:63:8f:79:38:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=9d717704-3448-4c98-a673-1ae6e6c1f1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:46:d1:ec:c4:27:2b:00:54:53:15:ca:13:
2b:31:72:78:4d:96:41:3c:8e:7d:31:08:2b:ef:53:
b0:7c:11:49:a3:da:22:ff:d4:06:ba:94:22:b3:16:
a7:26:d7:b9:1f:ac:32:d4:1b:e4:5a:4f:15:b0:ea:
80:66:48:3d:ec:75:77:c5:98:d0:1f:35:4b:f9:0b:
ec:bd:d1:e1:fa:53:ca:8a:9a:d5:57:b4:1b:88:00:
78:8c:c3:f1:22:7f:9f:d6:d0:9d:bb:84:c7:36:f0:
9a:55:4c:99:10:9c:00:38:77:93:d8:9d:7c:f5:a6:
30:b9:fa:28:45:c7:b7:bc:a8:b4:d2:23:d7:9a:70:
8f:95:54:36:8b:78:7c:f2:99:da:1f:8b:5a:86:68:
b1:c1:89:ab:36:dd:6b:d5:b1:56:26:23:78:f4:15:
17:91:a5:e5:c4:96:94:38:0a:11:e6:9c:e9:9e:3e:
fd:97:df:12:92:6a:f0:c4:21:42:74:ee:80:38:9b:
54:73:e2:af:0d:8d:03:db:33:c9:bf:e0:0f:9b:b0:
3a:24:22:85:bf:c5:ab:bd:d2:3c:06:cc:53:1d:b2:
cf:73:35:f1:48:e7:79:77:67:55:76:0a:89:df:db:
77:d9:86:4c:30:b3:e7:40:b1:06:e5:7d:91:ab:45:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C9:B0:16:93:2E:4B:1D:10:E5:34:55:69:46:E2:E5:23:EA:72:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/9f103ecf-aca5-3c83-96a1-56cfaf7c3d2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
X509v3 Authority Key Identifier:
keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:69:7b:63:a7:30:9c:b3:63:b3:e2:96:da:94:86:0b:d8:74:
8e:1c:f6:54:3b:01:10:00:60:0b:76:3c:b3:41:49:0a:ba:3c:
75:11:1e:b9:f9:e1:49:ce:9a:a0:0f:b2:a7:69:1f:5f:49:d9:
43:00:a0:99:61:c2:2e:60:1c:df:e3:63:cb:3d:91:5f:a5:2d:
9c:86:5a:91:58:ed:d5:06:81:8e:7f:37:38:7e:41:6f:9a:52:
ac:e0:02:60:27:00:19:e8:1a:b3:f9:dc:f8:df:69:e2:44:c0:
97:68:17:fb:31:51:f7:ad:c4:41:0d:55:35:c8:46:ac:5c:fe:
b0:eb:c5:dc:f7:66:7d:b2:40:e5:f4:c4:c7:69:6f:34:69:dc:
11:2a:b0:8e:9f:17:14:70:96:f6:85:32:c9:5f:90:ab:2b:70:
42:b7:08:5b:12:31:51:7c:cf:4d:32:08:05:04:f1:4f:0b:6e:
27:4d:e1:8b:b4:76:85:97:b2:09:75:c9:69:2d:ff:8b:81:67:
38:1a:0b:fe:b0:7e:fa:48:af:f1:89:f3:24:cf:f9:bd:39:79:
f2:b8:38:4c:5d:5e:7b:8d:8f:ca:da:f3:3f:78:8b:f5:9c:df:
ba:aa:11:8d:3c:e9:2d:73:77:d0:be:77:cd:49:a2:6c:ba:05:
db:0d:0a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:57:58 2025 by rpki-client