Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec457ae4-3c18-31d8-ad41-0e419686c8a8.roa
File: ec457ae4-3c18-31d8-ad41-0e419686c8a8.roa (raw, json)
Hash identifier: GPhWWNZc5E3npkgEmpQ3Q7M9nYCYxRk2SwGHdxY2rZI=
Subject key identifier: 89:91:02:09:1C:50:78:A0:CC:EE:5A:D8:20:42:8A:D6:2B:77:B7:DA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285841D3DDB2EAA61743EA1381E800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec457ae4-3c18-31d8-ad41-0e419686c8a8.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 396982
IP address blocks: 35.235.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 00:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:b2:ea:a6:17:43:ea:13:81:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=b8df8a5e-decf-482d-98eb-1967c6785035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:fe:a1:c3:96:47:70:f3:a7:02:24:a3:18:
4a:bb:c4:4b:ac:07:b3:9e:9b:19:f2:da:80:22:8b:
47:17:69:0e:26:bb:36:73:a1:4c:76:82:3b:13:66:
09:7a:22:d0:b1:03:ba:8c:70:dd:b0:2a:f8:04:98:
7a:ad:6c:3d:ce:e5:6a:bf:28:d5:7c:20:52:6d:83:
8e:a3:64:72:77:39:ce:65:00:18:14:60:6a:29:a9:
6f:e6:51:5b:c2:a4:1a:37:30:b8:7f:d1:00:2f:31:
12:0a:ba:16:20:ff:02:d5:13:10:ef:37:2e:34:cc:
6f:dd:84:ff:f1:51:02:f2:da:81:cf:fd:05:ba:0b:
5c:f3:2c:01:b2:ae:5e:ae:c6:f8:8e:0f:1e:16:0d:
39:fa:34:ad:35:06:67:2b:ad:d9:ee:13:af:1c:9b:
11:07:b1:00:1e:a3:fe:16:ba:5b:43:57:32:1e:af:
6a:4c:4d:a8:08:dd:b8:35:49:62:35:45:59:73:4d:
65:31:39:70:24:db:9d:16:d2:81:7b:18:f7:ec:62:
81:62:cb:71:a8:b4:ff:d1:c2:be:de:15:8c:39:be:
96:2e:44:d2:11:72:41:04:28:00:3a:ea:f7:3a:fc:
07:d6:0a:65:34:d6:a8:34:ff:ed:51:b6:77:7f:c4:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:91:02:09:1C:50:78:A0:CC:EE:5A:D8:20:42:8A:D6:2B:77:B7:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec457ae4-3c18-31d8-ad41-0e419686c8a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.235.162.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:1c:02:21:3c:8f:91:29:d8:47:b8:f3:b8:a9:fb:c4:45:07:
07:c1:9c:e9:68:28:44:43:55:07:ec:d8:e2:50:61:17:e2:8a:
00:d1:f7:b6:d7:ba:56:4a:4c:17:74:74:95:83:32:74:78:a2:
3e:f8:86:7a:31:be:6a:78:4b:b3:47:95:98:95:5b:4e:d6:61:
0b:2e:d3:27:70:43:73:dd:4b:fa:3c:ff:de:f8:06:b5:0e:19:
e5:04:df:df:e7:28:29:b9:ea:b3:1a:5d:19:c7:f5:fa:da:8a:
eb:7d:4a:e4:f3:69:32:3f:77:21:8e:b5:6e:77:2f:4f:fe:e3:
08:29:f8:cf:c2:ba:1c:c6:86:7e:ed:ee:dc:41:fe:ae:0a:61:
a4:cb:0f:6b:28:ec:e1:de:de:08:f8:9c:0c:a7:89:98:68:79:
27:7e:6f:d9:7c:71:2e:7d:10:e4:22:1b:d4:54:57:a0:6a:d7:
f3:12:25:7e:c5:9d:ab:5c:7c:61:0c:d1:f4:25:d1:0d:2f:2c:
90:be:dc:75:73:ef:e4:39:92:a2:3d:57:1b:c0:58:51:4b:06:
96:8f:6d:f9:13:18:a1:6e:84:bc:b3:2b:31:61:b7:90:1c:b2:
f7:cb:bf:3a:af:86:ed:b7:c6:da:93:f7:33:1b:32:eb:d1:ce:
b3:fa:52:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:10 2025 by rpki-client