Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41fa2894-3145-34e4-a7b7-b0a7b21bbf28.roa
File: 41fa2894-3145-34e4-a7b7-b0a7b21bbf28.roa (raw, json)
Hash identifier: wvdXEnVI29ZjjB+pys2ZwiplX4IcBHiuwAQ5GikeCRI=
Subject key identifier: 7E:0B:74:1A:78:90:3A:B3:64:81:01:90:B8:2D:3F:0D:23:1D:EB:EF
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DCFE1AD5A72E3484E62600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41fa2894-3145-34e4-a7b7-b0a7b21bbf28.roa
Signing time: Thu 01 May 2025 16:20:25 +0000
ROA not before: Thu 01 May 2025 16:20:25 +0000
ROA not after: Wed 30 Jul 2025 16:20:25 +0000
asID: 22773
IP address blocks: 68.0.180.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dc:fe:1a:d5:a7:2e:34:84:e6:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:20:25 2025 GMT
Not After : Jul 30 16:20:25 2025 GMT
Subject: CN=b8f725bd-e90f-4898-9684-14d246e7f35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:0f:0a:4e:dd:5b:2d:92:bf:bf:47:15:41:
4d:27:f5:18:d3:06:6c:86:aa:51:f5:22:10:b9:28:
f8:a1:90:fc:7a:47:d3:40:86:f5:1a:ba:1a:b9:61:
f8:d4:5c:55:eb:dd:50:2b:c0:94:b5:0c:38:c8:ad:
64:cc:70:4c:73:4b:38:01:e0:70:c9:72:a1:cc:37:
ad:97:55:35:d1:77:78:d4:2f:cc:9d:12:aa:ba:95:
11:a2:41:c4:d8:64:81:a9:23:d0:7e:e4:f5:20:f1:
30:ae:9d:e1:07:39:ac:27:54:1a:df:18:45:cd:c0:
12:fe:80:7a:65:06:5c:26:2c:f0:b3:c5:aa:d9:55:
14:23:d2:49:79:d3:65:52:dc:b4:e9:6c:24:aa:4b:
f0:63:89:16:53:b0:9f:e7:89:87:9e:2e:93:d2:b6:
56:e8:16:52:80:80:db:0b:44:06:9a:19:43:d2:fb:
77:bd:17:23:a8:fb:cc:88:34:e7:68:47:1c:b8:59:
4b:15:15:39:58:42:dc:ea:13:db:40:0d:e5:92:af:
d4:bf:26:89:d4:b3:ed:38:e8:57:96:30:fc:f0:b5:
c2:94:bf:b2:82:fb:a5:76:7a:e6:da:a9:96:42:cf:
2a:dc:01:34:22:b8:87:a2:76:b9:48:cb:de:94:40:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0B:74:1A:78:90:3A:B3:64:81:01:90:B8:2D:3F:0D:23:1D:EB:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41fa2894-3145-34e4-a7b7-b0a7b21bbf28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.0.180.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:07:fa:8f:ce:8c:15:e8:55:11:4a:0b:a8:64:37:03:30:2b:
b7:a2:fc:d2:a1:64:16:aa:75:26:00:dd:26:f9:f3:82:e9:aa:
07:d1:02:ad:e7:5a:6b:c5:26:b7:42:b4:ce:0a:fd:d9:20:21:
0c:d5:9a:61:2f:10:ca:04:cb:9d:0c:45:42:73:fb:17:a7:a8:
78:a7:b6:c1:33:9a:f2:4b:b7:4f:37:c1:70:ac:a0:3d:49:47:
e6:8b:05:b8:7d:b0:69:3f:da:53:5c:4a:b7:ad:7c:6d:62:ae:
a8:cf:7d:7d:5b:84:91:a6:59:4f:e1:c7:a2:27:c6:6f:5e:53:
9f:e7:93:a6:2e:b9:08:54:39:bf:26:ff:65:2c:16:54:a2:36:
a2:26:3a:24:aa:2c:b0:b9:a8:5b:ce:81:92:06:f1:9b:7c:6d:
33:e7:04:3e:57:28:95:fd:22:38:bc:e5:a7:36:a7:e9:4e:ec:
3a:79:d5:69:8c:c3:ad:5c:3e:ab:38:68:bb:da:6c:2b:da:c9:
7b:4c:4c:e5:b6:c5:81:23:51:20:ee:d0:23:ff:81:a5:ea:66:
de:e6:9f:0a:b0:45:c2:1a:08:29:cf:a7:4c:8c:62:f1:15:60:
94:24:fa:d3:07:1b:a6:14:30:fc:8f:ac:28:63:ed:a9:ab:b0:
03:8b:4c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:55:49 2025 by rpki-client