Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/e043c5f5-b986-380b-b270-3dfd1d6f8a43.roa
File: e043c5f5-b986-380b-b270-3dfd1d6f8a43.roa (raw, json)
Hash identifier: qVSs3iiuOeFJu4Tv8OiF3jPbRdO6ukN0RrpyVtc84Xk=
Subject key identifier: 29:51:4E:F9:52:47:00:1B:5E:81:AF:D0:86:27:B8:50:98:4F:25:5A
Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial: 010D0C9F43285848C580F8A2249E9D3E97361D98
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/e043c5f5-b986-380b-b270-3dfd1d6f8a43.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 31898
IP address blocks: 168.225.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 11:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f8:a2:24:9e:9d:3e:97:36:1d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=ecbf99f1-f28d-4ad9-be18-0509cf0ec773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:b4:7a:de:71:bb:66:6f:b9:bf:27:20:d6:
42:7f:d8:e5:d1:0e:6d:f8:68:74:b2:54:2f:a1:c0:
52:6f:11:5d:41:b6:e8:3a:35:3c:7d:c0:57:aa:b4:
1b:1f:70:e8:6c:fb:cd:6d:76:7d:d4:c0:ff:d1:e0:
5c:a9:4e:8d:b7:11:e1:eb:76:41:5b:13:22:87:f2:
d0:fb:c0:6f:f7:66:6e:d6:61:89:60:fa:28:b5:33:
ff:8f:dc:19:d3:66:0d:d5:7a:8d:f9:80:36:9a:30:
dd:b6:33:00:f5:36:6f:8e:b3:4b:54:8e:fc:47:53:
28:68:42:28:22:58:0a:cf:ea:6b:7c:fa:24:d6:8c:
ef:84:0f:fc:15:f4:ab:81:aa:a8:f6:f5:57:29:3a:
5f:ae:9c:12:3d:58:90:cb:34:4a:e8:e6:65:63:c0:
be:da:0d:93:5a:ec:1f:16:bb:e7:72:99:cb:a4:fb:
3b:34:6f:c6:d2:bf:54:ab:78:41:1a:15:4c:76:2d:
12:a8:6c:70:ba:84:62:3c:5c:5c:21:97:83:e2:e5:
55:28:7c:64:e6:65:59:bc:79:36:37:6c:e5:db:f5:
20:fd:be:af:59:79:92:9c:cd:18:d7:a0:6a:78:c0:
f0:a5:98:36:ef:0a:f5:a9:db:da:f5:68:aa:c1:a9:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:51:4E:F9:52:47:00:1B:5E:81:AF:D0:86:27:B8:50:98:4F:25:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/e043c5f5-b986-380b-b270-3dfd1d6f8a43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
X509v3 Authority Key Identifier:
keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
sbgp-ipAddrBlock: critical
IPv4:
168.225.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:12:0f:68:24:0a:8a:ba:3b:63:db:f2:fb:e6:9b:3b:a2:33:
d0:2c:7d:ec:12:16:0e:b7:20:fa:3d:df:6b:46:81:25:2a:ba:
eb:06:8d:60:6e:a3:50:8b:a8:ad:a8:97:b3:01:80:20:79:1d:
ae:5b:a6:7e:da:88:86:af:c6:8a:4c:81:59:8a:0c:0a:1e:84:
5d:2d:6b:65:5f:c8:85:c0:5e:b1:7e:9f:99:b7:17:ff:b9:e9:
d0:7f:9e:a5:83:2f:0f:a9:24:00:5f:64:14:f3:71:06:4f:1d:
ac:23:99:b8:bf:db:61:f9:de:10:da:28:9f:af:57:7f:2d:bc:
44:1f:9d:66:53:1d:60:50:50:69:a0:7e:11:89:d4:ce:fb:02:
19:f0:d1:a7:d0:a0:2a:cf:e3:48:84:53:5a:f6:4e:80:70:94:
2b:78:09:37:23:71:64:a0:b0:ea:ac:39:42:24:48:4b:36:36:
9a:4d:c3:ff:44:5f:88:e3:e2:cc:0a:f3:79:34:c6:ef:d0:06:
87:f8:ea:f3:1a:b4:79:64:20:bc:b0:81:a0:9a:ec:76:e6:4a:
47:ec:e5:e5:64:03:b1:8d:28:c7:03:ce:e4:88:fb:3b:39:32:
e1:24:44:49:2e:b1:ad:cf:87:61:62:5e:09:c8:e0:98:59:10:
6f:a8:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:46:50 2025 by rpki-client