Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS13768.roa
File: AS13768.roa (raw, json)
Hash identifier: TVUEURwlLKXXzWmjv6JEiaD5YhhbZnc03o5EW5RHlXQ=
Subject key identifier: 74:F5:EC:14:85:C6:99:75:1B:4F:EE:A9:72:36:72:40:68:31:E3:CF
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 0214961084349D441D059E5792FBE04C754411FA
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS13768.roa
Signing time: Thu 19 Jun 2025 01:24:54 +0000
ROA not before: Thu 19 Jun 2025 01:19:54 +0000
ROA not after: Thu 18 Jun 2026 01:24:54 +0000
asID: 13768
IP address blocks: 208.68.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jun 2025 13:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:14:96:10:84:34:9d:44:1d:05:9e:57:92:fb:e0:4c:75:44:11:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jun 19 01:19:54 2025 GMT
Not After : Jun 18 01:24:54 2026 GMT
Subject: CN=74F5EC1485C699751B4FEEA9723672406831E3CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:1f:9c:f7:83:9f:df:ff:7f:5c:ce:56:05:
7a:df:bc:06:77:25:84:f7:58:a7:3e:63:50:e0:22:
68:2c:fd:5c:bb:56:6d:da:07:f9:d1:60:0b:0d:c6:
c1:da:cf:ee:42:1a:1f:5e:a8:d3:65:51:ac:a5:df:
76:ea:27:a2:fa:20:35:45:70:ce:65:cf:9c:9e:13:
71:cf:99:8e:f2:7d:67:5a:6e:e1:81:f5:e1:5d:72:
82:ef:92:bc:99:64:d4:a9:9b:44:ea:b7:58:a8:7e:
b8:5f:a6:48:b5:80:50:ad:0f:f0:92:58:bf:76:1f:
18:29:de:7e:3b:2e:e6:51:55:58:9d:6f:77:71:aa:
83:d1:9e:f5:2b:0f:ae:f3:56:2f:d5:b2:fa:fc:10:
a7:95:e1:3c:a8:b4:b6:c5:e5:02:2b:69:81:9f:ac:
e5:f8:dc:c3:77:e4:02:f8:b8:15:74:fa:57:69:50:
f3:52:6b:51:91:20:fd:3a:8b:92:77:f9:a0:12:ca:
0d:db:b8:e6:90:a5:48:74:92:02:f2:6e:fb:a7:fe:
c2:5f:99:f1:c5:24:d2:fc:68:ac:59:c0:c5:eb:19:
9e:74:e0:6f:f6:a9:86:2f:a0:64:fe:6a:ef:b9:3e:
49:71:ca:7a:92:76:62:79:72:b3:e0:03:a1:77:e7:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F5:EC:14:85:C6:99:75:1B:4F:EE:A9:72:36:72:40:68:31:E3:CF
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS13768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.68.104.0/24
Signature Algorithm: sha256WithRSAEncryption
98:2b:88:13:57:00:33:b2:57:b9:ef:d8:0c:4e:c9:59:21:75:
0d:4b:13:33:8a:43:0e:5b:6a:ac:7c:50:63:fe:8a:4f:1b:3a:
65:2f:ff:e8:ea:ab:57:b7:1d:20:3e:08:41:b6:3b:4c:90:cf:
1e:b3:be:25:8e:ea:8e:0a:50:13:35:c0:83:4a:06:4e:02:4d:
c2:7d:c8:13:fb:3f:33:3c:fd:9d:37:8c:64:7c:48:9c:d9:1f:
04:af:77:be:28:84:a7:97:77:38:5a:02:4a:88:c8:63:4f:6f:
f4:7b:d6:9c:b9:8c:1d:28:de:98:f8:ed:7a:23:9c:49:17:67:
8c:4b:8c:cf:bc:ae:c0:6b:71:d9:3f:f2:8f:1e:f7:ad:89:8f:
8f:b5:88:65:c0:ea:36:51:4a:55:9d:82:7c:04:b3:b9:f0:8b:
9f:a1:ba:df:7f:06:56:dc:51:b7:0f:b6:ac:12:2f:87:0a:28:
d3:eb:ad:5e:dc:e1:db:cd:49:96:c5:82:6a:a8:b5:5d:36:e7:
0e:20:c1:cd:a1:d5:c9:87:c5:2e:b4:72:8a:f4:fd:30:47:bd:
3f:f6:15:79:60:d9:0d:97:38:7e:6b:ff:91:4b:7f:a7:16:59:
6b:de:15:b5:36:bb:83:56:a4:38:53:2d:63:eb:ca:f2:7e:d7:
3b:17:f2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:48:07 2025 by rpki-client