Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/33dae6ea-fa45-30ed-8a0d-686d21c131dc.roa
File: 33dae6ea-fa45-30ed-8a0d-686d21c131dc.roa (raw, json)
Hash identifier: kKTwB0jxxrihEf2IBJsBBRxujCbCwBcHEKfrk6N54DY=
Subject key identifier: 99:25:44:DB:93:1E:CA:7B:1B:60:24:03:E9:C2:E6:53:72:F8:C4:2A
Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801
Certificate serial: 010D0C9F432858498B47CE45CF0E2415558F4500
Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/33dae6ea-fa45-30ed-8a0d-686d21c131dc.roa
Signing time: Wed 16 Apr 2025 10:15:52 +0000
ROA not before: Wed 16 Apr 2025 10:15:52 +0000
ROA not after: Tue 15 Jul 2025 10:15:52 +0000
asID: 13886
IP address blocks: 65.75.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 17:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8b:47:ce:45:cf:0e:24:15:55:8f:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801
Validity
Not Before: Apr 16 10:15:52 2025 GMT
Not After : Jul 15 10:15:52 2025 GMT
Subject: CN=5e2f09d2-f43f-423f-8ece-b38bc305794b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:71:e2:88:2e:bf:22:0d:35:e6:e2:33:04:
f8:f9:09:48:73:51:87:81:1b:49:d7:04:94:a6:c7:
24:c0:65:30:47:93:bf:ab:31:4e:26:65:ef:3a:0a:
8a:e2:6c:65:fd:e9:9c:4d:2f:12:d0:c6:ae:f5:ad:
06:26:2e:fe:38:a9:61:e3:15:c1:cf:4f:cf:66:d6:
b7:1e:46:79:f6:9c:58:9f:45:ed:74:a5:55:9b:2c:
a3:fb:09:f9:e0:e4:d3:90:2d:4f:6d:5e:44:d8:73:
b4:4e:f0:c5:04:c3:97:5b:97:2e:3e:9a:4b:dd:cb:
79:34:07:f8:45:18:85:0d:8e:44:57:44:7d:27:b3:
14:a9:20:4b:8f:0d:43:b8:48:86:be:37:c7:be:a6:
9a:1b:1d:85:6a:2d:e5:f2:b1:3b:16:b8:d1:c2:99:
90:4f:58:84:89:51:8a:1c:40:61:d8:86:dd:3b:0d:
cf:b4:05:f9:4e:29:42:27:84:5f:8b:94:fd:55:fb:
ce:b7:3b:67:3c:6b:86:12:fc:2c:b1:d2:ab:d4:66:
d3:35:b8:2d:e3:79:c8:2e:c0:c4:61:af:89:53:c8:
d8:54:87:63:c4:d5:06:da:df:7f:17:40:fe:36:3e:
df:7b:38:08:4c:eb:4a:71:52:14:57:ed:c6:f5:78:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:25:44:DB:93:1E:CA:7B:1B:60:24:03:E9:C2:E6:53:72:F8:C4:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/33dae6ea-fa45-30ed-8a0d-686d21c131dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl
X509v3 Authority Key Identifier:
keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer
sbgp-ipAddrBlock: critical
IPv4:
65.75.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:e3:87:24:f0:89:74:f3:f8:5f:32:8d:96:ab:2e:18:25:01:
13:39:33:d0:dd:7f:31:50:55:97:12:e7:25:be:55:90:9b:36:
ff:d7:aa:64:6d:93:40:f0:c7:4c:b7:d9:16:3a:f6:2f:e3:b7:
26:77:25:6e:37:c3:ce:f8:f7:dc:6c:b1:bb:0d:73:2d:94:c1:
2d:70:8d:b9:78:30:f9:3d:ae:ab:4e:09:41:b9:97:40:aa:6b:
34:98:ee:2a:52:76:68:cd:db:ae:9f:33:9f:ee:09:e4:4d:05:
ca:ac:21:02:de:db:80:42:92:29:18:93:61:bf:b2:fe:b0:02:
95:5d:0f:37:48:24:d7:b7:c9:62:df:4b:bd:1d:5c:1c:ea:98:
03:94:1c:45:c9:2b:06:6d:40:e7:c0:7a:63:54:49:a0:e0:ea:
b9:d9:3e:3a:df:96:5c:f4:1b:34:52:3c:24:18:01:59:d6:a4:
0c:66:a7:0b:67:e2:0f:a8:23:7a:0e:f6:44:45:b4:70:59:7e:
10:ab:ac:a9:42:45:b3:2a:2f:a6:c2:81:70:69:5d:a3:7e:1f:
85:3d:d2:d7:78:91:94:b2:0a:07:98:4a:06:da:1f:58:b0:d1:
49:df:d5:ee:8b:20:ba:d9:ef:12:8b:c3:a6:82:e8:f1:37:7b:
a2:90:d3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:49:47 2025 by rpki-client