Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04c81a77-f00b-350b-abb7-f9e058af1565.roa
File: 04c81a77-f00b-350b-abb7-f9e058af1565.roa (raw, json)
Hash identifier: ufph7dAbzsCDZoD/naD1Ut6o0JhGh2Od19GD+RB8X+A=
Subject key identifier: 32:D2:18:17:1D:CB:77:18:88:8E:3F:22:CB:04:9B:93:26:2A:23:C7
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E1A5C7CFC2F43ABBE4E5F0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04c81a77-f00b-350b-abb7-f9e058af1565.roa
Signing time: Thu 01 May 2025 16:29:47 +0000
ROA not before: Thu 01 May 2025 16:29:47 +0000
ROA not after: Wed 30 Jul 2025 16:29:47 +0000
asID: 22773
IP address blocks: 174.72.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e1:a5:c7:cf:c2:f4:3a:bb:e4:e5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:29:47 2025 GMT
Not After : Jul 30 16:29:47 2025 GMT
Subject: CN=952bc1a1-4f74-4635-8707-50b89e92d382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cc:22:86:ba:fc:4f:77:d6:15:ed:21:2e:d5:
4e:98:59:5c:cd:f5:1d:46:1e:96:b8:de:45:d5:e0:
77:a2:17:67:40:9f:09:62:50:8e:64:48:d8:6f:b2:
d1:e4:4e:6e:13:e5:d5:63:5f:b3:e2:95:d6:dd:01:
2c:1a:2c:f0:80:5f:54:ab:ad:ee:63:56:31:02:2e:
b9:bc:4b:d6:9e:ce:65:8c:11:96:45:48:50:09:24:
35:53:e7:36:75:a7:36:a7:ee:19:e6:2b:41:32:ed:
ce:0b:f3:3b:53:42:02:bf:99:36:68:50:22:3a:f1:
1b:b8:09:65:22:1d:34:f1:fa:cb:ad:0b:d4:0a:e0:
0b:c1:49:12:b4:3d:9f:9b:f5:11:c4:32:89:d3:fa:
2c:80:5b:0b:41:09:e6:e4:d5:78:0b:0d:e7:fe:2a:
96:2e:c5:d2:22:f4:63:79:ad:17:ea:75:e7:93:1a:
06:6b:b2:92:64:26:ff:c5:49:b8:22:ca:30:4b:89:
87:26:db:8b:2e:c9:cd:13:9d:de:94:02:2b:1c:d2:
ac:b0:9e:e5:09:23:7b:cc:b8:fe:85:48:d6:00:68:
d2:43:ee:03:9e:14:73:a8:6b:b7:25:e5:ab:1c:b5:
95:55:cb:02:00:92:7c:58:e7:67:e0:be:ac:0b:c9:
73:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D2:18:17:1D:CB:77:18:88:8E:3F:22:CB:04:9B:93:26:2A:23:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04c81a77-f00b-350b-abb7-f9e058af1565.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
174.72.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:b2:9d:a3:1d:5c:93:9e:52:25:8c:95:6b:66:0a:13:fa:d6:
01:f4:75:65:46:9a:a3:57:fa:64:96:3a:70:39:37:9a:42:77:
26:92:95:f8:df:9e:61:0c:f5:f1:02:ba:d3:b4:0d:da:56:3d:
31:a7:e3:e1:93:1b:a0:b3:95:82:93:45:fc:2d:45:1f:3e:e8:
ed:05:34:6c:b4:22:b2:30:3f:de:de:ad:14:08:2a:da:cc:b3:
52:10:59:11:ce:74:c5:3c:b5:ab:fe:04:c2:21:06:38:a7:5d:
4a:38:e6:75:3b:ea:48:91:97:6d:ca:9a:d8:11:09:13:82:5d:
f7:b6:f6:05:b1:9d:4d:f0:52:58:ac:44:4b:32:e8:2b:22:11:
7f:63:51:91:62:e1:35:a1:a7:e5:96:b7:ee:2f:88:92:c4:fb:
86:21:52:98:77:cb:76:b7:6e:2d:bc:8b:89:50:36:9b:ae:75:
ba:2c:af:4b:bd:67:14:3a:02:90:c1:56:92:89:89:3f:44:7b:
25:71:bd:64:33:28:59:0c:c5:70:27:42:bc:72:72:1d:f4:ec:
de:6e:df:a6:b8:53:44:c5:f8:dd:ec:a9:76:d1:45:63:f4:bf:
e6:3a:2b:40:42:a0:1c:45:e9:98:8c:08:84:d8:16:63:cd:90:
53:35:de:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:00:05 2025 by rpki-client