Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f2bdfe8-345c-3957-92e0-779d8a10eeaf.roa
File: 3f2bdfe8-345c-3957-92e0-779d8a10eeaf.roa (raw, json)
Hash identifier: vp8RG3R/Iwger6aYE8UZXmfZgQ3DicA2TR/bHD+WExc=
Subject key identifier: 45:EA:9C:F6:23:96:BD:08:6C:E3:DA:5E:60:81:41:C0:D6:74:49:06
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DE3B5AC9E461E7EBC58C80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f2bdfe8-345c-3957-92e0-779d8a10eeaf.roa
Signing time: Thu 01 May 2025 16:22:54 +0000
ROA not before: Thu 01 May 2025 16:22:54 +0000
ROA not after: Wed 30 Jul 2025 16:22:54 +0000
asID: 22773
IP address blocks: 68.231.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:de:3b:5a:c9:e4:61:e7:eb:c5:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:22:54 2025 GMT
Not After : Jul 30 16:22:54 2025 GMT
Subject: CN=6782ead4-ab45-4189-a56a-0af1592bea50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:83:bb:8a:a2:c8:fb:3a:43:36:c8:d5:db:
9c:81:92:b7:37:94:62:86:36:80:10:5e:1c:58:84:
0e:cf:e6:cb:f1:a2:15:47:e9:06:22:67:85:e0:1d:
bd:33:4e:ed:51:59:28:dc:53:7d:16:ec:f7:2c:f5:
43:00:5c:cd:b7:4c:4c:12:f1:7a:30:31:ba:86:1d:
ba:75:9a:04:25:fd:42:9a:81:5e:5a:fd:55:06:83:
07:b2:db:77:ce:97:f7:38:0a:af:84:68:5d:1a:d3:
0f:81:07:2f:59:af:7e:32:4f:db:a0:9c:ab:df:d2:
df:0b:6c:e5:88:0c:ca:ac:d2:44:07:12:f7:61:2b:
8a:e2:b7:79:c7:af:4d:92:f4:fa:26:48:86:2d:f5:
1e:36:f7:3a:60:dc:e0:5c:7a:07:e7:84:1d:9d:95:
4f:0f:4e:35:f1:16:a3:1a:14:30:68:a8:64:3a:07:
a6:8f:76:53:25:09:00:99:39:15:a2:3b:e7:70:9d:
2b:5a:c0:22:2b:4f:a9:bf:cc:11:1c:b3:ef:99:86:
66:b1:75:61:ea:41:10:61:15:a9:34:d3:6f:36:1e:
9c:59:3d:07:6b:9f:c5:7d:01:85:77:c1:7f:2d:c0:
c9:be:05:ac:b4:d4:c3:d1:92:e2:96:43:00:18:95:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EA:9C:F6:23:96:BD:08:6C:E3:DA:5E:60:81:41:C0:D6:74:49:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f2bdfe8-345c-3957-92e0-779d8a10eeaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.231.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:c4:bb:7e:ae:14:8d:63:18:53:b7:a1:54:60:bf:fc:52:a4:
9e:77:27:de:d0:86:5e:70:ec:c4:8a:db:c6:4b:01:0d:5a:df:
c0:38:07:0c:73:0e:d2:ca:1f:4e:69:2a:8c:e5:53:84:78:d3:
af:ea:d8:2e:bc:b0:cf:2f:df:42:59:df:f6:0c:8e:0c:c0:a4:
78:8e:a5:0e:13:4c:3f:07:43:5c:fc:a8:9b:e7:de:e5:19:9b:
f4:ae:cc:21:c0:b1:e5:9f:ab:e2:93:c0:86:56:99:ad:97:87:
a8:3a:64:6c:57:0d:1a:8e:07:d8:8a:c5:2d:0c:43:c1:e1:03:
0c:74:da:4c:ae:fe:47:ad:4b:ee:af:33:d3:b7:f7:94:52:18:
88:be:57:c9:84:f2:05:eb:0f:4b:be:58:fd:ea:8c:64:3d:89:
7c:c9:97:9d:50:e6:4d:30:a6:2a:c1:e5:4e:90:ca:0f:8f:2b:
b9:42:25:06:5e:01:9f:3d:e4:43:da:34:48:26:c6:9f:07:bd:
5c:b0:aa:03:cb:8e:e1:b7:b3:4c:28:52:b8:22:cf:8f:98:1b:
76:18:a8:42:af:b0:8e:1c:80:15:5b:97:7b:e0:26:18:0a:1e:
0b:c2:09:dd:45:64:c3:1d:88:68:7d:23:3d:e8:7e:f6:08:0a:
4e:1f:13:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:22:34 2025 by rpki-client