Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/528eadc1-d0ae-32b7-bfde-986abf3b023a.roa
File: 528eadc1-d0ae-32b7-bfde-986abf3b023a.roa (raw, json)
Hash identifier: lrUaa6brbTOSN6J47Sy53T+wxHlXf/PUuQvGIKqf+Z0=
Subject key identifier: F8:02:B3:0C:18:8C:8F:64:D2:10:77:DE:1D:2F:E0:5A:1E:72:ED:3A
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285848FB0CB25EF67B365626629940
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/528eadc1-d0ae-32b7-bfde-986abf3b023a.roa
Signing time: Sun 23 Feb 2025 18:20:22 +0000
ROA not before: Sun 23 Feb 2025 18:20:22 +0000
ROA not after: Sat 24 May 2025 17:20:22 +0000
asID: 834
IP address blocks: 216.107.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 22:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fb:0c:b2:5e:f6:7b:36:56:26:62:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Feb 23 18:20:22 2025 GMT
Not After : May 24 17:20:22 2025 GMT
Subject: CN=671ae87e-db3b-4537-be40-24197e032eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:56:e9:a7:79:a6:a4:97:dd:36:4e:fe:26:67:
6f:24:3e:05:a3:ba:81:3f:58:93:de:ad:cf:e7:27:
c7:fd:60:90:09:81:9f:13:1a:1c:a5:78:bf:15:00:
45:61:6e:6a:08:0e:6a:ba:f5:17:62:d2:9c:9e:3f:
cb:e6:af:55:46:3f:17:81:7f:31:3a:47:4c:76:e1:
c5:49:75:15:c7:5a:a6:92:c2:40:0e:76:d9:c1:28:
ea:0a:a7:c3:f6:06:b7:c0:68:0e:9d:b3:57:ee:0b:
bd:b0:9b:4b:af:88:5a:a0:f1:1c:93:bf:ca:fc:91:
dd:db:89:1b:3b:ac:e9:20:b2:c4:32:85:fe:14:5d:
9a:45:2f:df:5e:80:52:e0:02:97:2c:8c:73:a4:5b:
03:f4:fa:ae:a1:a3:9f:49:22:67:7e:95:d3:9f:81:
1d:b6:ce:6a:b8:1f:43:a7:26:e8:da:ed:48:d4:07:
fd:d3:c6:e5:dc:63:c4:f0:02:9c:d1:f5:cb:2f:a5:
0d:23:23:86:7b:13:58:bd:80:d6:5c:07:f0:fc:9f:
72:07:b2:e2:f1:18:9e:e4:d1:6a:66:2a:0d:04:13:
36:aa:09:81:89:1d:98:b4:eb:f0:1f:70:92:ec:97:
04:39:7b:bc:db:ee:47:5d:b4:e6:6f:1f:4d:6c:48:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:02:B3:0C:18:8C:8F:64:D2:10:77:DE:1D:2F:E0:5A:1E:72:ED:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/528eadc1-d0ae-32b7-bfde-986abf3b023a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
216.107.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:e5:5c:58:e1:97:37:20:27:ee:c2:05:d4:21:47:e0:25:bf:
73:70:35:a6:31:14:5a:02:a9:51:c5:0d:7b:ef:2a:bb:44:57:
87:2c:c4:52:18:e8:0f:bc:53:40:03:09:46:6e:31:28:52:63:
8a:61:f2:54:ac:17:df:cd:a2:9c:43:61:ae:5c:9e:7e:27:41:
53:e0:24:5f:07:c5:f7:be:dc:21:63:00:4d:ad:5b:68:58:7e:
be:50:ab:de:c4:4b:c0:29:5f:9f:49:38:39:b7:ab:60:28:24:
54:04:d2:bf:0a:76:b3:2c:e0:39:1c:0f:ce:c5:00:a5:84:e4:
f5:e2:2d:88:83:f1:33:80:e4:61:da:72:1b:12:a0:38:fc:d7:
7e:6a:27:ce:01:6d:4d:08:be:21:04:40:ea:b3:4b:b9:80:df:
c9:f8:63:87:f3:9b:4b:40:70:c7:38:c0:ef:ce:6f:96:47:3b:
80:50:1f:64:fe:c4:75:05:cc:2b:6c:db:42:cd:da:52:e3:fe:
11:2f:38:bb:23:eb:17:5c:08:e6:7c:4c:c8:f1:5b:27:ef:3e:
c0:10:9b:24:5a:a2:58:01:c6:12:9d:67:18:ef:23:1e:24:1a:
ec:60:48:7e:ef:59:e9:f8:e5:09:37:1f:b6:f8:f9:d9:37:15:
0c:a2:3f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:15:23 2025 by rpki-client