Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/bdaf3f39-52ac-33b7-92a6-d261df93dbad.roa
File: bdaf3f39-52ac-33b7-92a6-d261df93dbad.roa (raw, json)
Hash identifier: P6ZPJAkKzZ2V59dX7NtjuCl8vsKDwTI6Yk+hbhZy104=
Subject key identifier: D4:0F:04:7E:C4:05:C9:95:2B:01:CA:DE:38:6A:CC:81:5D:51:74:BF
Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial: 010D0C9F43285848C580F84FC32238C9C9036E40
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/bdaf3f39-52ac-33b7-92a6-d261df93dbad.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 31898
IP address blocks: 168.225.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 11:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f8:4f:c3:22:38:c9:c9:03:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=00ffee79-8d93-45a9-98a7-0fa09976afb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:cf:77:f7:a9:b9:ae:84:9a:a6:57:72:a0:
52:d3:51:24:67:00:2b:eb:cf:9d:15:c2:95:25:35:
be:79:40:70:03:5f:be:94:d9:22:d7:1d:38:10:f8:
83:b4:ca:ac:02:d4:b3:a3:a4:da:a8:c4:69:d4:3f:
6f:37:11:17:ab:b8:bc:28:c7:ad:07:78:0c:e7:62:
63:8c:38:44:c9:cd:54:5d:02:34:1e:c1:93:1a:8a:
0c:7f:54:fc:ec:15:c6:03:ce:e4:3e:68:05:68:f8:
67:9c:5a:28:47:9e:2b:8b:0e:ab:e3:0f:52:18:04:
ec:03:de:d0:48:74:38:e5:cb:05:57:8f:1b:31:37:
0f:0d:5a:13:2a:41:4f:86:0b:0c:e2:ea:e2:ed:d8:
ab:f2:fc:af:26:6e:88:3e:1a:aa:f8:46:e2:b9:d5:
e3:e0:56:c0:57:4a:6a:81:f0:11:c4:1b:fc:13:64:
39:97:5d:5c:2c:1f:45:03:68:a7:fe:95:aa:46:6c:
e6:89:0e:1f:4f:8e:b9:c2:cb:a2:84:39:b2:73:24:
bf:e0:bc:d3:7e:2d:20:0e:47:6f:d9:40:2f:8f:f5:
2b:6b:56:73:89:bc:9e:f9:e9:b7:7e:05:8c:ae:f5:
56:24:99:a6:15:5f:a6:fb:99:99:36:44:71:fa:b2:
7a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0F:04:7E:C4:05:C9:95:2B:01:CA:DE:38:6A:CC:81:5D:51:74:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/bdaf3f39-52ac-33b7-92a6-d261df93dbad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
X509v3 Authority Key Identifier:
keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
sbgp-ipAddrBlock: critical
IPv4:
168.225.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:dc:aa:03:5d:c8:92:0c:f4:ea:b0:4a:ec:e4:5e:91:b4:5f:
bd:7f:90:19:29:88:33:47:70:14:03:7a:22:9e:8a:37:87:fa:
4d:c2:5e:a9:6a:78:e7:c8:68:2b:7a:e6:00:26:d2:3b:ba:80:
31:ff:d3:1c:85:77:d2:da:c8:5c:4a:c3:fc:2e:30:8e:38:08:
fa:e9:be:5e:7f:e1:54:36:6a:ec:ec:e2:73:e4:6d:52:dc:df:
99:bf:d9:5f:75:73:16:71:15:18:82:d3:37:9f:5a:0a:c8:d9:
62:34:d2:ea:1a:27:a9:4f:05:1d:b6:07:e0:5c:bc:10:ef:de:
a5:61:ad:8c:db:fd:67:e7:f0:ea:79:a6:55:01:3e:d2:41:34:
56:1f:b4:c0:8e:3f:58:21:33:a3:8d:45:d1:12:9c:6f:3f:d3:
05:45:e2:52:37:0d:c4:f9:79:e5:ae:e6:59:3e:d7:c0:aa:a9:
7f:0d:a6:64:ee:8c:3f:0a:de:ae:58:56:eb:0d:87:ff:09:e3:
12:fd:cf:8f:5f:a5:cf:88:81:16:eb:2e:8a:c1:67:a9:ed:4a:
59:96:8a:af:ec:88:21:41:fe:98:21:70:bf:29:2e:65:bc:f2:
e7:c3:09:4d:91:a6:29:72:25:70:48:ac:2e:74:53:f8:44:7a:
56:17:73:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:50:37 2025 by rpki-client