Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ec2d643f-73f4-3737-a4c2-47e0b6741424.roa
File: ec2d643f-73f4-3737-a4c2-47e0b6741424.roa (raw, json)
Hash identifier: a1bD9pDCUSN1rnyJIhRcOancO0Og+yRRYTPF3b8bZ1I=
Subject key identifier: F1:4E:25:98:FA:BF:41:F6:4C:27:09:39:EC:89:42:C3:F5:51:9C:5F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849B7EFEDC4797E5A4F3A2BC880
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ec2d643f-73f4-3737-a4c2-47e0b6741424.roa
Signing time: Fri 02 May 2025 10:10:11 +0000
ROA not before: Fri 02 May 2025 10:10:11 +0000
ROA not after: Thu 31 Jul 2025 10:10:11 +0000
asID: 208485
IP address blocks: 172.111.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 10:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b7:ef:ed:c4:79:7e:5a:4f:3a:2b:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: May 2 10:10:11 2025 GMT
Not After : Jul 31 10:10:11 2025 GMT
Subject: CN=9069f154-1768-4973-940c-1ec917ec94cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e4:f8:8f:fa:c4:68:8b:d8:38:d2:de:0d:84:
1a:0a:c5:bf:2d:a7:e0:ea:6c:69:2d:3c:96:69:ed:
64:ad:dd:99:9e:fd:b9:a8:ce:94:bf:37:7f:25:47:
a9:62:f2:57:58:89:5a:16:dc:b3:74:b6:45:8d:37:
b2:0c:35:35:14:69:98:98:a9:d6:66:e5:09:07:18:
b8:f0:86:b6:26:68:39:3f:17:3d:31:75:ed:55:92:
25:99:3b:42:a2:ec:0d:c8:51:36:ac:3e:75:b0:6d:
87:3b:40:7a:df:cc:ba:01:25:fc:ee:ed:2c:a5:28:
a2:f1:be:5a:e1:33:9a:10:83:a6:bd:9e:35:55:a5:
27:28:78:bf:15:ef:c7:ab:b7:5d:a5:31:98:6a:c2:
06:8b:b6:76:7b:91:b9:78:35:e2:81:03:a1:47:d0:
2c:21:af:1b:e0:13:ca:4b:62:39:83:7a:b0:5c:cd:
04:3d:dc:86:ab:e3:d0:5c:10:62:8a:cc:18:ed:a2:
25:7f:ff:ac:10:5a:80:8c:01:64:e3:11:51:ca:67:
ab:50:eb:96:03:ef:f7:0c:ff:7e:ee:47:05:2a:0c:
f3:54:53:0a:5b:e8:a2:88:47:ca:16:ba:a9:34:29:
1c:29:8a:67:34:df:09:12:f2:73:6b:fe:67:a4:86:
49:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4E:25:98:FA:BF:41:F6:4C:27:09:39:EC:89:42:C3:F5:51:9C:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ec2d643f-73f4-3737-a4c2-47e0b6741424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:ea:26:cb:f6:21:77:b1:6b:64:d6:a2:88:53:15:b0:1c:37:
7f:e0:e8:b0:95:7f:bf:4b:29:5e:cd:71:88:2c:91:10:71:9b:
91:d7:dc:1f:c9:55:10:a7:56:81:ed:2f:6f:42:89:87:1b:56:
ef:15:ac:3d:a3:0c:34:b9:10:53:d7:75:06:36:aa:a6:f5:f2:
53:0d:ad:93:73:e8:2c:e4:bc:a0:f5:0f:94:92:99:3d:3f:26:
00:c7:4f:73:ec:18:15:2e:d3:19:18:4c:05:c7:a5:fe:0d:0e:
b9:04:bf:c6:88:ee:24:5f:d1:05:9e:1b:6e:25:4a:6f:69:58:
2f:03:2d:db:f8:38:0a:c1:0f:04:99:c1:11:4e:41:00:51:aa:
6b:e6:40:31:3e:2b:51:87:ef:92:15:f8:1b:cb:f4:c9:6a:ec:
4b:6f:81:bd:8d:20:15:5b:d1:45:ef:fd:98:da:51:9f:27:97:
08:65:94:ad:f5:f7:b3:54:aa:46:eb:37:83:01:bd:d7:f1:41:
d8:d0:1f:d4:a9:a7:ee:e3:a1:10:1b:ae:2f:a5:fa:2f:db:02:
41:b2:18:4c:75:1b:65:f1:cc:42:a5:5f:a3:00:fa:ee:05:53:
7e:d3:94:ab:a0:a7:60:8d:d8:54:27:45:b7:05:e6:34:3c:11:
b1:65:db:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:47:40 2025 by rpki-client