Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/5bcf5e97-156a-3f7c-b31f-d6019503483c.roa
File: 5bcf5e97-156a-3f7c-b31f-d6019503483c.roa (raw, json)
Hash identifier: e4WDHYlvZpeiAPGI3Tq+yzO440NYPknIPAm3xlXdSKE=
Subject key identifier: 2D:F4:DA:FF:CA:6A:63:7C:22:17:ED:E2:D6:BB:50:BA:29:40:74:B5
Certificate issuer: /CN=e15c1581-7fa9-4e03-9b8a-b1033654465f
Certificate serial: 010D0C9F432858490CA788E4DE7A40451C7892E0
Authority key identifier: 79:20:E3:BD:FD:B6:87:F9:33:02:C7:31:1C:10:6D:AC:26:B3:6B:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/5bcf5e97-156a-3f7c-b31f-d6019503483c.roa
Signing time: Sun 02 Mar 2025 01:41:05 +0000
ROA not before: Sun 02 Mar 2025 01:41:05 +0000
ROA not after: Sat 31 May 2025 00:41:05 +0000
asID: 19779
IP address blocks: 23.135.132.0/24 maxlen: 24
2602:f6ce::/40 maxlen: 40
Validation: Failed, certificate revoked on Sun 02 Mar 2025 02:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:a7:88:e4:de:7a:40:45:1c:78:92:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15c1581-7fa9-4e03-9b8a-b1033654465f
Validity
Not Before: Mar 2 01:41:05 2025 GMT
Not After : May 31 00:41:05 2025 GMT
Subject: CN=f25b4932-ab82-4639-83e6-36a4af4b9037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:fc:62:97:33:b8:1b:ce:dc:fd:0b:6a:cd:
1a:1d:6a:c8:54:9b:15:03:a8:98:a4:40:b2:a1:ff:
bb:32:26:c9:a1:3b:ad:36:be:cd:b4:e5:94:e5:be:
71:e8:4f:11:f0:27:e4:c4:4d:a5:75:ad:12:64:cc:
88:ec:a2:50:eb:0d:d8:78:75:e8:d5:ea:83:23:c4:
05:55:96:13:dc:85:ea:60:e1:ab:c0:5b:d9:08:f7:
44:2a:00:a6:df:5a:30:82:ef:53:9b:fc:8d:4f:33:
8c:44:ca:15:f6:55:b7:1c:b2:fd:27:a6:c8:c0:4e:
ba:fe:b3:37:de:81:7d:db:03:d0:86:5b:5f:0a:28:
f6:36:32:8c:b9:85:e7:ea:b2:71:cc:37:39:cc:7e:
8c:bf:39:7d:9c:38:be:ac:fb:eb:6f:39:ad:3e:3c:
e6:e8:98:a2:f1:67:07:e4:a1:51:41:10:1d:33:77:
fc:64:fa:1d:96:51:74:34:15:66:ba:c8:bb:1d:15:
af:fb:0b:35:7c:3e:3c:e6:86:be:96:8c:b4:a1:a2:
3e:d8:a7:04:6b:b3:96:da:83:9b:27:f9:2a:fd:03:
37:b1:08:1b:db:3d:5a:15:99:87:83:3e:c0:b7:af:
b0:0b:12:3e:c8:56:a9:e7:74:0a:1c:d0:6a:dd:12:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F4:DA:FF:CA:6A:63:7C:22:17:ED:E2:D6:BB:50:BA:29:40:74:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/5bcf5e97-156a-3f7c-b31f-d6019503483c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/e15c1581-7fa9-4e03-9b8a-b1033654465f.crl
X509v3 Authority Key Identifier:
keyid:79:20:E3:BD:FD:B6:87:F9:33:02:C7:31:1C:10:6D:AC:26:B3:6B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.135.132.0/24
IPv6:
2602:f6ce::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:7a:32:c4:48:d5:f4:82:ea:3b:15:a5:ca:f1:70:7e:5c:f9:
41:f5:46:c8:8f:d5:72:bd:25:3d:f7:9a:cb:0a:c9:9f:9d:32:
23:46:ca:03:86:2b:07:0c:db:2a:34:b6:9b:e6:12:3e:68:14:
4d:71:b6:53:65:64:55:a9:94:af:0d:d2:f9:48:3e:a1:eb:52:
a8:0f:3b:73:e9:6e:c0:00:7d:a3:bf:96:6c:e7:0e:0a:b5:18:
c5:b7:93:a7:02:9b:a5:e5:08:ab:23:a1:63:b0:5a:9a:22:36:
22:20:0d:38:ea:b5:76:ee:fe:49:14:15:a0:b9:ce:69:cd:0f:
fb:dd:31:52:18:a5:a3:f4:78:b0:b5:c7:48:84:e3:95:2d:8e:
e3:93:8d:b4:a9:3d:bd:7f:39:d4:34:e7:71:4f:55:6c:ed:33:
ad:13:69:c9:35:e6:85:d8:69:68:dd:e7:92:66:23:8b:ef:c1:
9b:57:99:7a:f6:f5:3a:94:f7:7a:12:42:d4:cc:ce:4b:b6:6c:
79:e7:6a:1e:3c:e0:57:a6:ca:7a:c3:80:34:ac:88:bb:42:d0:
fe:b2:3a:48:91:61:93:b4:de:56:16:30:a1:2f:7f:68:97:83:
09:ff:32:81:bd:5e:2e:16:d8:81:57:37:03:b1:d2:8d:eb:b4:
98:f4:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:20:50 2025 by rpki-client