Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72b71aec-18a5-3940-800f-ac96dc758ab6.roa
File: 72b71aec-18a5-3940-800f-ac96dc758ab6.roa (raw, json)
Hash identifier: bKacB2QbSNKUr17ySxkT20iJpd0JcV1sVSMC7Oq0W9o=
Subject key identifier: 0A:8C:E9:0F:60:C5:D5:59:7B:10:B8:FC:9D:DF:85:99:D0:21:5E:DF
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5F9CAD7B0973D08B4EDAFA0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72b71aec-18a5-3940-800f-ac96dc758ab6.roa
Signing time: Thu 01 May 2025 17:18:26 +0000
ROA not before: Thu 01 May 2025 17:18:26 +0000
ROA not after: Wed 30 Jul 2025 17:18:26 +0000
asID: 22773
IP address blocks: 68.108.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 22:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:f9:ca:d7:b0:97:3d:08:b4:ed:af:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 17:18:26 2025 GMT
Not After : Jul 30 17:18:26 2025 GMT
Subject: CN=271b8be3-6916-48e5-841a-55728b56c9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:be:e9:f6:aa:4f:ec:be:fa:1e:7d:0f:8a:dc:
ce:47:e6:c6:84:6a:8d:89:c2:4b:6c:1a:6b:1f:b8:
87:f8:00:5c:d4:48:05:52:81:85:e5:65:d2:4b:47:
be:75:72:fa:77:67:98:f2:1b:b9:12:15:9b:6f:e7:
19:a7:47:87:e1:58:88:62:19:f0:20:2b:0a:c0:04:
b4:4b:c7:78:3f:10:f6:2c:f7:6d:3e:89:1b:d5:fa:
89:4b:e4:a6:f7:38:7d:81:16:04:54:ab:2c:86:14:
03:47:d7:0b:10:09:f2:57:b4:35:f1:3f:b1:db:73:
27:41:6e:6f:07:de:b9:3e:52:79:91:fb:60:f6:69:
7d:f4:f0:71:2c:fb:50:83:72:e4:e3:21:39:54:23:
5f:e1:97:2a:c3:c1:15:9f:6f:70:7d:da:87:a3:e7:
25:77:88:81:97:b4:41:0a:be:e6:ca:cb:49:84:93:
78:b6:69:92:77:b7:c3:ad:5d:ae:bc:fc:9f:18:48:
a8:ce:89:e4:1d:f9:0f:12:09:af:72:9c:ec:99:78:
b1:15:3e:09:61:ed:78:81:95:ca:03:59:4c:c0:f2:
20:c4:e1:1f:79:e6:3d:58:51:88:82:48:0c:09:47:
95:52:7c:a9:32:cb:ec:4e:26:fb:ad:01:32:72:f4:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8C:E9:0F:60:C5:D5:59:7B:10:B8:FC:9D:DF:85:99:D0:21:5E:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72b71aec-18a5-3940-800f-ac96dc758ab6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.108.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:49:92:8d:39:dc:9a:55:91:fa:e6:db:8a:1a:3c:c6:6e:2f:
d7:7b:ec:58:b4:1e:68:17:20:e5:c5:b2:f1:da:20:a9:66:99:
57:ac:94:37:fb:33:29:7f:94:ca:24:5f:4e:9d:4c:ba:3d:c1:
8e:c4:c4:87:a5:cc:66:20:25:a3:52:a0:92:ff:40:a5:6d:f7:
81:25:3b:f4:71:68:5f:a9:1f:00:6f:cb:68:ed:1b:0b:c8:b2:
0d:9e:64:8e:18:26:74:68:80:82:29:91:95:f1:77:87:f5:07:
f1:57:af:f2:db:f0:0a:80:76:25:29:22:5e:86:fd:f0:55:aa:
e2:d8:8c:c4:e7:f1:71:a6:9e:71:5f:c7:fb:18:ae:4f:bf:17:
33:64:39:00:95:22:6b:de:24:06:68:21:9c:53:31:3c:fd:02:
9b:43:34:19:01:99:a2:89:3d:94:6d:07:8f:fe:b6:3f:36:30:
25:e0:c2:cd:cc:1e:a5:34:0a:30:8b:cd:6c:c9:a3:c2:35:ec:
8c:83:1b:b4:51:b7:e3:ac:7d:f9:f1:1c:ac:28:de:90:5f:c2:
d7:35:33:81:f5:02:92:60:e4:03:f6:83:e1:25:0e:b7:50:1d:
8e:86:8e:3e:02:0c:37:42:8a:b4:5f:8c:9a:61:64:2d:b9:f1:
df:30:07:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:21:52 2025 by rpki-client