Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/e68cb3cc-f648-3e07-a127-e5829a145cbb.roa
File: e68cb3cc-f648-3e07-a127-e5829a145cbb.roa (raw, json)
Hash identifier: 8zORJkf3ieJaSgUPiBMyAuZaH6wSBZEOogaxWiiNXxk=
Subject key identifier: 2F:8B:A5:1D:DC:F2:47:FC:77:7B:90:D9:F8:CD:8F:3D:CF:6D:FB:CF
Certificate issuer: /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial: 010D0C9F432858492FEBC2F89303C4BE688C8B80
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/e68cb3cc-f648-3e07-a127-e5829a145cbb.roa
Signing time: Fri 14 Mar 2025 16:51:51 +0000
ROA not before: Fri 14 Mar 2025 16:51:51 +0000
ROA not after: Thu 12 Jun 2025 16:51:51 +0000
asID: 30058
IP address blocks: 2607:bc40:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Mar 2025 17:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2f:eb:c2:f8:93:03:c4:be:68:8c:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
Validity
Not Before: Mar 14 16:51:51 2025 GMT
Not After : Jun 12 16:51:51 2025 GMT
Subject: CN=069ad8b8-65e9-4871-975e-abf58cfec1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:5f:2a:00:ae:54:4c:dc:1f:60:d4:d1:6b:
1d:ad:8a:3e:cd:2d:17:eb:1a:0a:af:04:40:aa:99:
5e:51:ac:b6:be:b6:c1:53:8e:83:3d:ba:38:dc:5b:
ca:90:80:a3:45:81:24:93:9a:d0:95:da:15:a3:77:
91:64:ff:c3:6f:f7:4a:12:df:3f:b9:02:ad:1f:55:
f5:e5:62:d1:d6:fd:22:a7:86:14:05:7a:39:a1:43:
3a:b3:b5:85:4a:66:8b:58:f7:28:9d:6f:5e:60:1c:
65:8d:53:e8:5e:54:40:e8:e4:c5:10:9c:47:8e:f8:
d3:3c:46:07:1f:4a:12:b2:60:6b:3a:aa:9a:b4:8b:
4f:80:cf:7b:f3:71:ce:92:61:c0:22:29:ff:cf:8d:
7a:b1:d5:85:f9:66:f5:81:b8:cd:68:2e:c9:af:06:
09:3d:bf:bc:fa:88:35:66:9a:04:c3:b4:8c:1d:61:
00:0a:4e:43:8b:12:f3:01:e5:3a:cc:b6:54:11:5f:
42:0a:c3:0a:bb:b8:69:66:ca:60:a1:a1:62:23:15:
0e:c5:5e:6c:33:bd:90:d6:7d:75:99:d9:6d:5c:9e:
04:c1:75:16:5d:e5:d8:e7:43:e7:b7:c4:73:9d:b3:
2a:c4:5c:ed:55:db:c6:ab:c5:25:c2:ae:4e:86:52:
df:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:A5:1D:DC:F2:47:FC:77:7B:90:D9:F8:CD:8F:3D:CF:6D:FB:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/e68cb3cc-f648-3e07-a127-e5829a145cbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
X509v3 Authority Key Identifier:
keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:bc40:100::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:7d:57:21:77:18:f0:45:cb:2e:ac:36:95:91:1a:7d:9e:13:
53:81:fd:4f:78:e1:8a:d0:39:c7:3f:a5:42:be:87:08:c1:2f:
3e:1a:1b:4a:34:6c:a3:7d:60:92:a5:cd:cb:06:14:cd:0d:8b:
0d:42:0a:f4:76:6a:75:72:45:64:3a:c5:0a:0c:fd:b9:e6:28:
ec:7c:c9:f7:7e:30:6a:c1:1f:c4:7c:3f:fc:26:a5:8e:44:ea:
ce:c7:68:20:b8:17:77:3b:c6:34:66:97:44:f4:83:c9:a4:90:
17:eb:1b:51:f5:5b:34:47:66:fa:47:58:e2:15:ed:e0:93:c7:
53:da:43:e9:dd:30:7f:56:a5:82:2a:2a:6b:18:a6:a2:5d:27:
67:26:de:2a:9e:1c:fe:f2:f9:d7:d0:d3:40:46:7a:42:42:23:
4d:76:19:ca:53:1b:4e:4d:b9:c6:73:65:96:13:4e:9d:16:c5:
d7:8c:7a:5f:2d:15:09:b0:9b:ae:82:b8:83:4c:35:3b:82:66:
7b:93:90:02:7f:f8:5a:91:c7:0b:5b:a9:57:73:e8:f9:cf:28:
6c:d5:86:3f:50:b3:57:3d:cd:f9:9c:f5:e9:cd:1a:c4:90:ba:
e6:0e:57:ba:12:cc:38:ab:78:4a:34:dc:2c:3f:c7:48:fc:83:
c3:ea:b2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:40:13 2025 by rpki-client