Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ffce005c-16ca-382a-b1c3-9ccefcc890f5.roa
File: ffce005c-16ca-382a-b1c3-9ccefcc890f5.roa (raw, json)
Hash identifier: n30k16YgVWYUMPDG5/Q6kH5TCI+clWhmf9aaaQxTE7g=
Subject key identifier: C9:5E:72:0D:76:E5:14:DC:D1:6A:25:91:0A:25:77:3D:DA:19:8D:8A
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5DDC678F1D9EB9F8E655840
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ffce005c-16ca-382a-b1c3-9ccefcc890f5.roa
Signing time: Thu 01 May 2025 16:21:59 +0000
ROA not before: Thu 01 May 2025 16:21:59 +0000
ROA not after: Wed 30 Jul 2025 16:21:59 +0000
asID: 22773
IP address blocks: 68.106.248.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:dd:c6:78:f1:d9:eb:9f:8e:65:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:21:59 2025 GMT
Not After : Jul 30 16:21:59 2025 GMT
Subject: CN=811f7b2d-1ce6-43b1-813d-1811ca34df5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:57:5c:72:b5:4e:28:a0:ca:cd:86:b8:af:22:
8b:c7:18:8a:72:ee:ab:70:5d:76:61:23:0c:b2:ce:
32:32:c6:b7:9b:c5:cf:e6:10:dd:57:d2:ef:3c:1d:
91:53:8f:c4:00:c8:d9:9e:ab:f4:df:44:71:10:d0:
dd:6d:0f:1b:2b:09:d9:e0:04:2c:c8:49:6a:92:c7:
9e:e9:89:ce:b0:29:0b:81:5d:59:eb:6e:89:dc:fe:
1e:59:c3:b1:4e:f1:1b:08:c1:77:a2:58:e7:e2:be:
09:e3:4b:c2:1f:29:2c:37:d1:3b:d6:ee:da:f7:61:
35:a1:d2:1a:6d:91:9f:89:cc:07:93:1f:ce:57:8f:
27:6c:05:c0:fc:56:2f:05:4f:f4:1b:48:8b:3b:ba:
33:cd:d5:91:f1:c5:d6:e4:1d:e3:cb:97:b6:b7:a5:
53:3b:62:47:ab:13:ee:a6:ad:70:3b:46:4f:88:17:
0f:6b:83:44:aa:be:ed:c2:14:c8:91:40:c0:b6:d4:
f8:c7:29:ac:c2:bd:1e:1c:2d:67:93:28:0a:32:17:
92:61:d7:e5:40:e2:22:84:e7:65:53:51:7c:01:b3:
da:a3:b7:ef:8c:1e:10:29:2f:5f:c2:8f:a2:7d:45:
b6:e4:2f:a1:90:45:09:34:96:87:21:54:8c:30:5e:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5E:72:0D:76:E5:14:DC:D1:6A:25:91:0A:25:77:3D:DA:19:8D:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ffce005c-16ca-382a-b1c3-9ccefcc890f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.106.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:9b:c2:6e:a7:64:69:3a:cf:bc:ac:ce:9d:1d:9e:18:3f:1c:
06:ef:73:0c:9d:8d:23:d2:57:e8:c2:82:5c:9a:e1:26:76:dd:
51:31:91:90:6f:a9:99:bd:60:e3:51:76:9b:1b:15:a5:14:74:
e6:e1:62:a2:2f:30:0a:30:2f:1d:d3:d8:07:fd:16:65:bc:e3:
75:90:c1:7d:46:59:58:94:48:0a:13:c4:fb:c1:d7:31:1a:b9:
44:b8:f5:06:96:d2:22:f7:a4:48:6f:50:ef:9f:7f:fb:6a:db:
cb:d0:9a:68:77:66:3d:8e:a8:b1:47:95:dc:d8:3e:16:6e:5a:
01:18:d2:df:4c:2d:05:22:98:9f:34:dd:a1:49:b5:58:19:ae:
17:05:0f:15:54:b5:71:4f:21:20:3e:19:10:54:c0:41:bc:ec:
1e:c6:89:09:fd:7b:59:27:ff:cd:13:08:26:77:4b:34:36:5f:
7c:34:57:8f:ed:e6:11:e8:f2:6a:56:2e:dd:ca:86:d6:54:ba:
76:e4:85:f7:eb:20:a0:dc:34:1a:aa:b7:e9:71:4b:2a:57:fd:
aa:05:96:b2:73:59:38:d6:57:ff:4a:34:7d:29:32:33:76:cf:
32:c3:30:eb:c5:36:32:93:5d:fa:8f:4e:07:f1:ca:67:5f:73:
b6:3f:36:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:15:45 2025 by rpki-client