Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/8bed0afb-6eb8-3c80-826e-52b9d142288a.roa
File: 8bed0afb-6eb8-3c80-826e-52b9d142288a.roa (raw, json)
Hash identifier: 5SDWS14298KPKUCV0kB/RrAJrGSO7/X6u3bZL22WjXk=
Subject key identifier: 7E:4B:D9:72:5D:B6:BB:15:D8:6B:FA:8F:74:97:BE:EF:32:57:91:CF
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285840DE8A677C6FAAE9D372F06F00
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/8bed0afb-6eb8-3c80-826e-52b9d142288a.roa
Signing time: Tue 07 Feb 2023 12:42:07 +0000
ROA not before: Tue 07 Feb 2023 12:42:07 +0000
ROA not after: Thu 15 May 2025 04:00:00 +0000
asID: 7018
IP address blocks: 149.143.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Feb 2023 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:de:8a:67:7c:6f:aa:e9:d3:72:f0:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Feb 7 12:42:07 2023 GMT
Not After : May 15 04:00:00 2025 GMT
Subject: CN=22bb8aa7-7544-45b4-9722-ee0ad49e539c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:d9:3e:74:ac:7e:62:37:15:03:ea:67:93:
e8:c4:f4:d2:88:39:a6:1f:b6:83:9c:30:8d:ac:4c:
5a:36:8b:4a:53:76:a5:a6:02:15:c5:f9:5a:dc:7d:
5b:13:c8:87:68:29:1b:eb:07:0e:14:4b:f1:cf:b7:
47:be:ae:af:27:72:89:3c:d9:69:b6:f5:ae:7f:67:
84:44:b8:6e:84:f3:36:d9:c9:96:e2:25:2f:16:0b:
85:2d:84:df:bb:4b:63:17:03:81:3b:65:f0:78:dc:
95:46:0e:46:53:5f:e1:ca:00:a2:9f:7b:11:7a:8b:
f5:77:c5:5c:ab:04:88:9a:0e:a0:39:6f:b7:86:5d:
a2:b9:d7:ff:7c:df:5c:be:0c:c2:99:97:46:07:e0:
8a:18:25:51:87:8b:64:02:ee:0d:f0:46:1b:50:82:
16:3d:39:80:37:74:3a:10:e4:4b:ad:d7:9a:66:55:
8e:98:33:dc:b1:2b:d0:dc:a5:e4:8a:28:a6:53:cb:
82:81:20:c0:9b:84:33:1c:16:24:aa:c7:38:5e:e5:
6b:04:06:77:62:63:dc:58:62:de:b9:ff:97:d7:d5:
41:35:6e:e4:61:d0:01:9c:46:81:fa:f8:45:be:75:
ab:d8:d8:dc:bd:bd:d5:cb:92:fb:e4:58:18:a5:3f:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4B:D9:72:5D:B6:BB:15:D8:6B:FA:8F:74:97:BE:EF:32:57:91:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/8bed0afb-6eb8-3c80-826e-52b9d142288a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.143.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:a9:ff:ac:21:ff:bb:e7:c1:f0:d1:35:e1:a8:87:50:a7:9a:
8d:40:ed:50:8f:ae:19:6c:8c:3a:4b:bf:91:07:2e:06:c6:45:
de:8b:b3:79:b3:08:f7:af:12:dd:2e:33:3c:21:15:cb:ea:dd:
9f:78:7a:2c:f2:6e:08:04:52:3a:88:66:f4:6e:fa:b5:1e:dd:
5a:ce:72:c1:a5:d6:83:d1:36:33:2d:23:1a:6f:92:77:81:c1:
21:e1:25:44:2c:d0:26:d6:68:e2:f5:35:69:ee:a5:cd:cc:53:
1e:9c:4a:05:7b:ce:25:01:b0:3f:9a:9a:61:e2:84:f2:39:56:
21:17:61:5d:4a:cd:82:05:54:70:7e:4a:a2:d4:3a:ac:34:5e:
1f:4f:4a:08:8e:3c:f7:4b:25:fa:9a:48:21:d6:e8:7e:36:31:
5f:7e:d0:b1:c2:a7:c3:4b:e7:d8:72:86:03:4f:d6:9b:c3:6e:
6a:71:87:0f:fa:40:0b:38:b4:ac:4e:a0:dd:11:9e:12:36:7a:
a3:c5:67:93:c5:8c:d7:a8:d2:09:1d:87:43:16:3b:91:8d:a9:
5b:07:66:26:b0:5e:2a:46:b7:d9:8d:72:51:ff:d0:bc:57:a7:
ad:ec:8f:65:b4:1d:c6:8c:9a:2c:c2:21:4c:cd:58:26:43:42:
72:0e:ea:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:06:54 2025 by rpki-client