Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d35be811-7a73-344e-aadc-fae241bc30ec.roa
File: d35be811-7a73-344e-aadc-fae241bc30ec.roa (raw, json)
Hash identifier: nop8icgKeuE3SUDr9yHiA9BGCpmpRI+iFv506IFTYJ4=
Subject key identifier: 64:68:D4:71:D4:DC:85:95:25:29:BA:9A:A9:DC:F2:42:2F:B5:C8:A9
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848E8E6DCC10541F65DE792D300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d35be811-7a73-344e-aadc-fae241bc30ec.roa
Signing time: Mon 17 Feb 2025 06:19:35 +0000
ROA not before: Mon 17 Feb 2025 06:19:35 +0000
ROA not after: Sun 18 May 2025 05:19:35 +0000
asID: 213676
IP address blocks: 45.74.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 10:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:e6:dc:c1:05:41:f6:5d:e7:92:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 17 06:19:35 2025 GMT
Not After : May 18 05:19:35 2025 GMT
Subject: CN=93b68768-f21c-419d-9fa1-0bd38c6a5d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:95:e9:b5:6a:1a:f5:8f:13:a0:98:f9:d3:ad:
31:76:98:f8:2a:01:31:d1:ac:d8:96:1b:d9:83:4f:
33:82:00:e1:8e:f4:12:0a:55:59:91:a3:a3:05:a5:
a9:0c:83:fa:a1:58:6b:ab:f7:64:3a:c3:6f:7d:fd:
4e:33:9a:3d:8e:a3:76:41:e4:b4:a8:6a:cd:ee:06:
80:60:e2:d8:67:b6:54:61:49:b0:fb:cf:4d:43:c8:
77:3b:29:1f:25:2f:45:4e:8e:3b:b3:67:03:49:05:
98:db:f3:4f:24:5b:d3:0b:78:f1:9e:59:9d:f4:02:
4e:98:b5:9d:c3:0f:25:79:24:05:28:fb:d4:91:49:
61:35:f6:24:06:aa:91:e2:ad:d9:a3:6b:dc:85:04:
cf:f9:c6:69:f8:96:a6:eb:31:0a:66:ec:51:eb:e9:
ba:f2:b4:33:5d:6f:84:eb:36:75:a8:ad:e0:1b:e0:
1f:cc:da:4f:67:47:b3:21:bf:6c:94:3e:46:36:54:
d6:e8:c1:5c:3a:14:cf:e4:71:42:3e:64:34:d6:3f:
84:c0:af:73:03:64:ff:9a:f5:84:31:ea:a0:9c:2b:
f5:9c:3b:a8:ac:1b:01:c1:00:80:1d:f8:c3:9c:da:
ed:fe:78:b1:51:91:ff:6e:18:9a:f5:0e:27:9c:f2:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:68:D4:71:D4:DC:85:95:25:29:BA:9A:A9:DC:F2:42:2F:B5:C8:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d35be811-7a73-344e-aadc-fae241bc30ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:2c:21:f4:81:89:6b:58:0c:ae:eb:a2:a5:eb:2c:e8:84:13:
f0:a8:39:ea:fa:e3:fe:f7:92:92:8a:82:40:f9:97:b4:bb:47:
b2:23:e6:d4:bd:fa:40:e0:38:3e:72:ee:bf:42:3f:ca:2c:bc:
1d:28:a0:56:f4:7e:3f:08:8a:46:cf:e9:da:96:3a:23:67:30:
08:46:76:11:48:22:52:1b:ac:f6:f2:5e:1e:4f:89:18:3e:34:
e7:f5:2c:04:26:31:a6:ca:b7:aa:12:75:77:8a:0e:1c:22:b3:
a3:f3:b0:c0:70:0b:d8:db:45:7d:b8:94:b9:14:22:a4:9a:05:
58:68:bc:45:bc:a0:64:4a:ef:ed:52:fa:9b:25:17:b3:b9:f7:
12:26:c1:23:58:ea:b9:0a:a2:5f:96:80:27:31:d8:aa:5c:5a:
c6:19:a1:5c:59:27:0b:58:ef:ca:3b:73:c4:16:56:8f:8c:e1:
1a:98:70:a1:b1:f9:f8:80:36:9c:85:f2:10:e1:09:32:59:ca:
b5:17:ba:22:fc:f6:93:e0:10:ce:06:86:da:ee:7b:1b:7f:86:
43:fb:4c:1d:3a:df:11:a3:9d:2d:e8:36:9f:06:6c:6b:f2:47:
88:df:5f:ce:68:a1:3f:d8:dd:a8:41:2d:2d:75:31:11:cd:86:
28:27:a8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:49:55 2025 by rpki-client