Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccd282be-66a1-3187-b4fe-eb77df92ad2e.roa
File: ccd282be-66a1-3187-b4fe-eb77df92ad2e.roa (raw, json)
Hash identifier: ftPQuKRyJiaNdDKD2xPAI7k3+Qt/ajviC9o3fsarlLY=
Subject key identifier: 8E:C7:18:22:FD:E2:05:15:C0:C3:04:AD:7B:2C:62:99:29:00:87:EB
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DD98C4D22027F2AC8AF380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccd282be-66a1-3187-b4fe-eb77df92ad2e.roa
Signing time: Thu 01 May 2025 16:21:38 +0000
ROA not before: Thu 01 May 2025 16:21:38 +0000
ROA not after: Wed 30 Jul 2025 16:21:38 +0000
asID: 22773
IP address blocks: 68.104.150.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:98:c4:d2:20:27:f2:ac:8a:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:21:38 2025 GMT
Not After : Jul 30 16:21:38 2025 GMT
Subject: CN=382a3a85-0834-412a-b15a-354b02d8aaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:68:0d:ee:3a:76:aa:3a:bf:64:ba:63:49:
73:c6:da:e8:af:5c:b8:c6:e2:7d:e1:b7:32:8f:bd:
ee:3d:db:eb:28:dc:c7:87:84:c0:17:81:c6:1a:7f:
c5:12:c8:d9:a6:9d:98:2a:bf:c1:62:10:38:95:a6:
25:27:e0:28:78:ee:03:81:47:f6:9b:fe:09:a1:ff:
b5:bd:ce:b4:92:5a:db:2a:90:e2:28:83:76:c6:72:
70:6b:94:60:fc:d4:da:c5:61:6e:1f:80:c5:72:eb:
31:73:88:f9:2b:aa:3f:19:76:f7:37:71:56:2e:6f:
f6:eb:9b:b0:3f:3e:1a:ed:10:95:0b:cf:8c:31:7e:
88:d5:a1:c7:df:87:40:e9:a6:9b:dc:a9:dc:35:5c:
74:23:aa:06:dc:af:95:04:d2:1e:74:e6:07:f1:53:
e5:7c:10:a5:02:56:7e:87:0f:85:ad:86:af:af:76:
11:26:45:0b:fc:8e:0a:fa:9f:59:de:44:79:89:0f:
73:0a:52:2d:0e:9f:1c:b5:d8:f0:64:7c:aa:f1:d2:
b9:e7:7e:fc:40:d1:5c:ec:47:53:55:c5:a7:3e:5b:
13:df:09:f6:f2:8a:40:a8:59:17:70:1a:54:04:e9:
14:32:13:99:9c:39:79:43:a2:b9:77:89:0e:74:7c:
87:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C7:18:22:FD:E2:05:15:C0:C3:04:AD:7B:2C:62:99:29:00:87:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccd282be-66a1-3187-b4fe-eb77df92ad2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.104.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:be:f0:58:44:42:99:01:46:f7:81:62:7c:f9:7d:1c:7a:f5:
f1:d1:1c:28:47:91:65:14:80:91:2c:19:08:0e:87:f8:07:96:
42:80:ea:09:bb:de:74:e6:3a:b7:2a:52:88:81:43:20:69:bd:
a1:24:a0:20:6b:c7:32:36:6f:5d:70:6d:6f:16:09:c9:7f:35:
47:fb:cd:56:30:1b:cf:5d:17:26:2a:8b:40:b3:54:65:c4:2c:
90:31:30:12:c7:10:9e:7e:6c:a9:aa:9f:7a:ae:4d:2d:f6:90:
0b:ff:49:f6:67:d1:6f:22:a3:0f:d3:44:5f:18:5d:e6:f5:4a:
2b:e8:4c:43:bf:f9:60:f9:44:8b:49:87:b0:a4:ed:fb:c5:46:
4d:af:36:9b:0a:9e:c5:43:e9:3b:32:6e:20:23:11:49:f7:d5:
fd:e9:21:0c:72:5a:f0:46:58:f4:29:c3:ef:a2:f5:17:ca:b7:
44:55:66:92:de:dd:d9:1a:40:35:ae:8b:03:75:bd:3f:ed:ed:
b8:a1:b6:83:ca:3a:12:0c:2c:5b:99:36:3b:b8:bf:ae:d0:30:
d6:2a:e0:10:d5:31:69:77:6c:17:d7:72:ec:09:5d:c1:3b:3d:
b9:dd:2b:7c:7a:da:f0:71:43:fd:4d:6b:60:43:9f:55:6d:8e:
b8:79:4e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:21:54 2025 by rpki-client