Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/52b0cd4e-6ff2-33ca-93b3-55d922745d57.roa
File: 52b0cd4e-6ff2-33ca-93b3-55d922745d57.roa (raw, json)
Hash identifier: YCpA1LdsBaslUa+5QqlXsyXa/k2kI2lzoCwdXLWaOdI=
Subject key identifier: DD:E5:A1:EC:00:04:CC:BD:97:AF:97:6B:E4:78:79:D3:B6:0F:69:C8
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F43285848C2FE7BFA13B3DDE8DBCBA4E0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/52b0cd4e-6ff2-33ca-93b3-55d922745d57.roa
Signing time: Mon 03 Feb 2025 16:26:28 +0000
ROA not before: Mon 03 Feb 2025 16:26:28 +0000
ROA not after: Sun 04 May 2025 15:26:28 +0000
asID: 16532
IP address blocks: 66.158.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 03 Feb 2025 16:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:fe:7b:fa:13:b3:dd:e8:db:cb:a4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Feb 3 16:26:28 2025 GMT
Not After : May 4 15:26:28 2025 GMT
Subject: CN=4ef5030c-d2a1-4db5-90aa-593dc9b53a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:48:bf:cd:14:6c:da:5c:8d:81:45:26:8d:
a8:20:87:36:ce:09:09:97:6e:8c:0a:d5:05:c7:ec:
31:59:0f:18:d7:51:eb:47:8b:cf:b0:2a:b7:3f:5d:
84:bf:01:da:aa:b1:59:d7:12:51:93:ea:55:a9:b4:
a3:f0:21:c6:8f:7e:36:08:75:da:86:f3:04:74:7d:
3b:82:33:54:c7:6f:fe:ef:55:be:b4:29:bf:d0:2c:
e0:8c:c6:15:98:2f:50:25:a7:7e:0a:39:59:59:7a:
fe:88:cb:e1:0d:a1:17:8f:47:42:3d:d1:a1:55:7a:
5b:b5:4c:64:12:d1:c1:9b:09:e4:a7:91:10:0f:7e:
1a:f9:c3:d0:f9:92:bf:92:1a:3f:23:b7:52:4c:7e:
cd:31:d8:d7:ce:6d:02:17:31:88:a3:2c:b7:51:90:
58:fc:6f:d6:72:7a:b2:2b:91:7e:83:d6:6b:e7:bb:
16:ae:7d:96:cc:38:25:a2:14:23:d3:3c:07:70:7d:
4c:4b:da:50:70:69:f0:a0:8e:32:6e:dc:4c:1a:99:
9e:ab:81:09:a9:8d:31:44:77:f3:b2:4c:86:9e:30:
6b:f0:11:49:94:6e:09:eb:16:35:d4:d2:b6:fb:bc:
c0:9f:d0:82:46:e1:ed:2e:36:0b:ca:8f:1b:d6:32:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E5:A1:EC:00:04:CC:BD:97:AF:97:6B:E4:78:79:D3:B6:0F:69:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/52b0cd4e-6ff2-33ca-93b3-55d922745d57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
66.158.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:4c:a9:42:4c:3e:3f:57:6e:87:db:c4:24:e8:aa:d7:8e:4f:
31:90:99:2e:2d:16:54:24:92:7a:f6:b6:6d:2f:cd:47:b8:1c:
81:76:fb:42:34:7d:41:e8:2f:85:61:91:cc:34:e1:56:88:44:
b1:26:27:90:50:23:5a:4f:34:89:07:0f:fe:dc:7f:f0:91:61:
bc:3f:ed:9e:97:a2:51:de:7a:ea:e4:25:1b:76:67:81:d3:ea:
55:65:72:97:cf:68:77:f8:a0:b7:48:e0:a9:b1:04:b6:57:37:
44:b3:e2:1c:2f:5c:79:b7:03:bb:d8:ed:28:7d:be:98:2f:80:
03:e8:19:69:ce:39:95:a7:f4:6f:9d:9e:f0:dc:c5:c8:58:d0:
8c:b8:21:b6:85:86:f1:23:42:8c:0b:46:3e:ab:5e:63:8a:5e:
d8:01:73:8c:f3:b4:3c:6b:40:47:85:cc:d9:a8:8e:0c:39:e9:
69:4c:f3:67:7d:e0:aa:db:7c:cc:5c:8b:4d:2a:cd:1d:84:fb:
b8:2a:c4:b1:6e:35:11:24:48:7c:51:b6:bd:fe:93:64:76:ca:
49:14:df:98:61:1a:d0:88:81:9f:32:75:98:15:8d:b9:51:c2:
f3:dd:73:fd:92:9f:2f:41:27:8a:0d:34:2e:b9:d7:15:3d:9d:
26:19:16:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:05:02 2025 by rpki-client