Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa8f1d59-0e8f-3885-82cb-73e629edfc43.roa
File: aa8f1d59-0e8f-3885-82cb-73e629edfc43.roa (raw, json)
Hash identifier: j5cFO0jkaUwLHg3fbtbCMgcT+iOU65EYTZc+tRMr/xk=
Subject key identifier: 1C:0F:0E:19:A1:76:AF:08:F1:09:DD:E3:6F:A4:AC:B6:38:42:C6:F1
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DDCFA9AA9061B5C4814780
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa8f1d59-0e8f-3885-82cb-73e629edfc43.roa
Signing time: Thu 01 May 2025 16:22:03 +0000
ROA not before: Thu 01 May 2025 16:22:03 +0000
ROA not after: Wed 30 Jul 2025 16:22:03 +0000
asID: 22773
IP address blocks: 68.108.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 21:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:cf:a9:aa:90:61:b5:c4:81:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:22:03 2025 GMT
Not After : Jul 30 16:22:03 2025 GMT
Subject: CN=755715e8-1eaa-4327-b9be-24c11fee4258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:94:d5:a8:36:68:69:c3:bd:ba:be:f8:1c:
23:b8:0b:f9:1d:ce:fb:70:b7:ce:b5:7d:87:66:53:
dc:07:68:23:c6:ee:29:da:fb:60:32:81:4a:e9:b2:
79:31:b3:9f:bd:a8:4f:75:2e:b6:c4:22:2d:4a:67:
fc:ce:b2:3c:47:82:da:99:95:e5:ab:98:f5:c7:ef:
4d:ed:e1:e0:d8:fb:72:6c:b9:39:20:60:09:c8:70:
5e:65:32:98:de:fd:4f:fe:de:f3:0c:3b:ae:24:0c:
69:d8:75:3e:c5:c6:f5:d4:21:c1:f2:5c:00:b8:eb:
5f:a4:28:49:48:48:60:1a:01:62:87:80:c6:8b:ee:
8d:cc:a9:90:d5:05:da:60:6d:48:4d:dc:ce:82:8a:
9f:27:c2:cd:6c:be:08:63:33:77:47:12:16:5a:f4:
8e:de:88:4b:4a:39:61:a1:13:a7:00:b1:44:33:04:
b0:b8:2d:a4:0d:77:fe:64:38:70:3c:30:b5:2d:bb:
c8:21:d3:e8:bc:6b:a6:ac:35:86:44:02:ee:94:83:
7c:b7:22:f2:25:99:80:8a:36:0e:73:75:2d:ff:f0:
ec:07:d2:aa:59:84:24:55:f3:57:7a:ed:3e:0f:29:
d6:61:fd:f9:6e:49:7a:38:11:07:d6:84:21:6c:e3:
ae:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0F:0E:19:A1:76:AF:08:F1:09:DD:E3:6F:A4:AC:B6:38:42:C6:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa8f1d59-0e8f-3885-82cb-73e629edfc43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.108.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:ff:45:4f:be:07:80:b4:64:e6:1f:03:16:66:53:7a:a8:44:
fe:c3:e4:68:7e:7e:9c:97:95:2f:63:cd:ab:16:02:52:84:42:
a5:76:30:c4:5e:4e:8c:ad:20:4d:c4:63:ed:e2:6d:5a:7a:7a:
b8:70:11:c9:70:b4:4c:94:66:4d:15:70:7e:b1:c2:67:70:18:
88:b3:f9:7a:35:5a:c4:3e:29:01:47:4d:01:c8:24:9d:94:b7:
42:eb:d2:aa:20:de:a6:2b:00:14:f5:81:0c:d6:cb:97:d9:5e:
cf:34:e2:99:44:bb:27:7c:db:48:a9:a3:c2:e9:92:bc:10:5f:
3a:fc:4e:b1:09:b8:c3:29:75:e7:72:03:c7:ad:14:0b:5f:c6:
66:96:f5:1f:6e:5d:4d:80:ee:bb:80:a9:12:fc:7d:d2:1c:ea:
66:c0:71:e4:eb:8a:2e:99:92:e6:40:1c:6f:c0:a2:4c:6c:bd:
ab:74:4b:7e:c9:cf:b6:f3:74:fb:bd:19:f0:da:62:7e:2c:0f:
d5:ad:78:c3:3e:eb:a9:98:1f:48:d3:5f:ae:e1:3a:36:73:70:
55:4b:32:ab:ad:f0:03:84:0c:9a:30:bd:fb:fc:d6:35:e3:7d:
39:cf:0e:31:48:5f:96:99:4e:df:b6:55:f0:27:c0:9b:b8:06:
e9:0d:f2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:40:30 2025 by rpki-client