Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/497ee767-6873-343d-b546-1d4a0a58d1ac.roa
File: 497ee767-6873-343d-b546-1d4a0a58d1ac.roa (raw, json)
Hash identifier: 6uk5FcEXgDtKVg2SD3xR8aIgUQBbjb9K+3vlRXzk/zU=
Subject key identifier: DE:71:28:E0:7C:ED:40:AB:D6:9C:1C:60:EA:F9:2F:57:15:31:EB:1B
Certificate issuer: /CN=d1d7a311-3518-44d2-aa48-eeb29263a6ad
Certificate serial: 010D0C9F43285849C8C55336026B09CB01C24230
Authority key identifier: C6:19:92:97:0B:64:4A:02:05:AF:C4:76:63:8A:B2:F5:EC:C3:A2:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/497ee767-6873-343d-b546-1d4a0a58d1ac.roa
Signing time: Thu 08 May 2025 10:53:05 +0000
ROA not before: Thu 08 May 2025 10:53:05 +0000
ROA not after: Wed 06 Aug 2025 10:53:05 +0000
asID: 20118
IP address blocks: 23.129.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 May 2025 01:07:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c8:c5:53:36:02:6b:09:cb:01:c2:42:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d7a311-3518-44d2-aa48-eeb29263a6ad
Validity
Not Before: May 8 10:53:05 2025 GMT
Not After : Aug 6 10:53:05 2025 GMT
Subject: CN=c4f1f29c-3b7f-46a3-8400-34223ed33047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:bd:42:9d:35:49:8b:bb:04:8f:39:17:9c:
03:1b:c6:92:ac:c7:96:a6:65:f4:ab:9b:99:90:02:
15:fd:c3:86:24:08:2c:6e:3a:86:d2:97:33:62:9c:
1e:c2:37:29:92:2a:b1:28:c3:a4:5e:e0:3a:ce:4a:
bd:11:35:3f:6d:51:d5:2e:70:69:7a:6a:55:09:5e:
e6:39:2e:6f:0c:99:f7:fc:e8:11:61:4d:04:4a:29:
04:76:ad:eb:d8:ee:1a:32:08:c9:00:e2:3b:91:f4:
20:4e:c9:05:a6:83:42:fe:01:94:34:e0:aa:20:c9:
e3:21:e3:a6:af:f4:3e:eb:25:eb:3e:e8:ed:7f:b7:
b5:b8:a4:04:61:7a:c2:9f:1c:de:8e:27:ad:24:eb:
95:6c:90:1a:e5:45:76:5d:f4:67:c1:e5:96:df:1d:
50:45:64:d2:b4:e5:b4:30:71:aa:ed:32:9b:d9:61:
fa:4e:1d:08:44:f2:df:9c:6b:4b:c5:d4:9e:fe:80:
58:fc:d7:50:5b:5a:d6:68:8b:0d:87:0c:39:c0:d8:
7a:52:cc:72:ae:f7:a2:6a:2f:51:45:5c:12:65:75:
64:9a:b3:6c:91:05:3b:e4:e7:a8:1c:80:5a:a2:ca:
a7:f4:de:63:f4:79:47:01:0b:a0:e7:10:26:7e:19:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:71:28:E0:7C:ED:40:AB:D6:9C:1C:60:EA:F9:2F:57:15:31:EB:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/497ee767-6873-343d-b546-1d4a0a58d1ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.crl
X509v3 Authority Key Identifier:
keyid:C6:19:92:97:0B:64:4A:02:05:AF:C4:76:63:8A:B2:F5:EC:C3:A2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:c6:8d:81:f0:f9:ba:e0:ad:d0:9c:51:2f:59:f9:d8:df:b3:
77:ca:a8:65:01:be:7a:92:64:2c:96:1b:02:2f:94:e9:f3:d7:
d2:d3:ae:db:e1:75:47:92:81:b7:bb:e9:3f:ba:fb:b2:d3:08:
88:56:e3:1a:84:e3:39:f6:93:c4:50:2e:a9:71:77:f6:cc:a3:
fc:de:bc:66:68:86:e7:c3:9a:76:ec:b9:ee:e3:63:79:ad:6a:
7a:78:72:45:13:c6:b9:09:8f:85:1b:75:49:e8:c4:f9:b9:bd:
ed:83:45:6b:73:a9:1d:42:d1:0b:48:f2:f9:cd:da:9c:b6:58:
22:24:26:ba:3d:0c:94:a7:4e:96:ac:8c:a7:cf:a3:1c:1d:41:
23:25:98:bc:c5:20:29:79:d2:fd:de:d5:ce:c4:e4:73:d8:26:
07:d0:eb:81:99:8b:ad:97:a2:5a:65:e0:1f:ce:85:23:21:9b:
51:4c:4c:cb:77:7a:1c:4a:5a:10:47:0d:a1:a3:a4:df:ab:04:
00:15:a6:8f:d1:42:8e:d1:9b:65:b4:4f:a8:cb:fe:18:bc:0d:
3f:fd:d7:5b:6e:dc:93:fe:2c:6c:06:d3:47:48:c6:e3:75:63:
a6:03:68:96:99:d2:ea:22:22:10:7e:12:63:df:aa:cc:8c:6e:
12:b5:71:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:29:47 2025 by rpki-client