Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/f21177ff-2c97-3de5-b527-e984af80fae3.roa
File: f21177ff-2c97-3de5-b527-e984af80fae3.roa (raw, json)
Hash identifier: 18HogO/QM0VqQ5/i+F/oJupUvd6tH0zDsVyLFf3wi7s=
Subject key identifier: E6:EF:34:21:72:60:A0:BB:A7:74:A5:B2:8F:C6:B1:C4:F2:09:4D:CB
Certificate issuer: /CN=c7fde067-6a5b-4ae6-b9a1-e3ec208c5940
Certificate serial: 010D0C9F43285848E9CBEB0E3A8311F9AB7A1A80
Authority key identifier: 3C:69:02:72:6D:77:DC:4C:A9:8E:3C:9A:57:60:85:35:39:D6:EA:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/f21177ff-2c97-3de5-b527-e984af80fae3.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 400260
IP address blocks: 104.232.0.0/24 maxlen: 24
192.231.84.0/23 maxlen: 24
2602:fcac::/40 maxlen: 48
Validation: Failed, certificate revoked on Sun 30 Mar 2025 07:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:eb:0e:3a:83:11:f9:ab:7a:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fde067-6a5b-4ae6-b9a1-e3ec208c5940
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=0253fb0c-9146-438e-97d8-4307faede367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:0a:bb:12:7b:06:4e:bc:ed:3c:23:4c:35:
59:e7:1e:de:8b:40:3f:09:39:80:98:0b:05:5b:ed:
f5:08:d1:91:4b:33:f3:87:5c:dd:a9:eb:ec:17:aa:
c6:ab:9d:2e:d8:c2:88:bf:b6:cf:40:d1:e2:27:56:
b6:8f:76:88:1f:6c:3a:51:5d:ac:67:f1:22:fd:2b:
3c:73:b1:e1:68:3e:0f:e6:44:32:27:ff:12:34:85:
b3:31:45:69:dd:e4:b5:7a:45:ee:7c:63:19:44:21:
d5:0b:b0:30:05:52:31:49:09:51:c0:c5:70:64:83:
84:22:1f:11:c3:c6:d0:5d:6e:98:ae:91:57:97:70:
2b:f3:8c:8a:0d:f9:2f:9f:2b:25:2c:56:ad:46:4b:
f1:68:1d:e2:42:7f:fd:ce:06:38:bb:f8:f9:68:2e:
53:08:cf:81:68:bb:3d:61:e3:de:bf:00:2d:cc:85:
3a:96:48:5e:3b:71:f7:76:50:f6:e9:c4:d6:3a:f8:
4f:21:5d:f9:33:99:97:c5:5e:05:34:4f:2a:73:50:
70:38:c0:9c:7b:0c:f2:43:57:be:ba:7f:d0:30:04:
1d:c7:a2:6a:7c:02:d8:87:6a:36:4c:9c:f3:8a:dc:
e3:2d:fe:bb:5d:df:ac:c9:2d:e9:c1:31:b7:30:d5:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EF:34:21:72:60:A0:BB:A7:74:A5:B2:8F:C6:B1:C4:F2:09:4D:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/f21177ff-2c97-3de5-b527-e984af80fae3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.crl
X509v3 Authority Key Identifier:
keyid:3C:69:02:72:6D:77:DC:4C:A9:8E:3C:9A:57:60:85:35:39:D6:EA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer
sbgp-ipAddrBlock: critical
IPv4:
104.232.0.0/24
192.231.84.0/23
IPv6:
2602:fcac::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:5c:5e:a3:2c:b5:3e:af:ac:8e:5e:09:de:97:63:ee:29:7d:
d8:1e:79:bc:e0:52:c2:2e:e0:d7:46:fc:e9:d9:0c:57:dc:94:
78:de:e0:f6:38:aa:30:bd:9d:75:4e:46:23:b4:1f:ab:26:45:
e9:5f:c6:58:3d:9c:d6:24:e6:d8:c8:86:0b:eb:04:9b:0a:38:
fe:dc:d3:03:8d:f9:89:31:f2:83:8a:56:2e:a8:e9:55:28:e1:
1b:7a:0d:d2:af:e7:39:00:ab:f6:cf:fb:5a:17:fe:6b:71:7a:
22:0d:a4:de:56:b7:8d:e4:35:16:5d:c1:c5:19:ca:e7:5a:5f:
f3:50:92:e3:03:15:b1:ee:c7:8f:aa:f1:4c:7e:5f:14:7b:61:
5f:68:34:77:02:30:bd:9f:b3:a5:47:ab:7f:49:8f:c8:e0:b8:
04:42:d8:62:08:94:e0:45:8c:b9:a2:b0:0e:01:10:0b:1c:d1:
83:c8:78:40:f6:03:4f:9d:44:3c:f0:03:0b:a1:e7:3d:80:ec:
0a:5b:7f:e0:0a:26:fd:52:ff:58:74:4d:c0:61:5b:ad:24:40:
2e:69:11:c7:5c:64:40:df:2e:5d:0e:6a:e9:30:20:d3:c0:48:
0d:14:b1:c7:03:d9:25:8f:bd:80:0b:cb:bb:9b:c1:1d:2f:d4:
97:9b:57:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:32:24 2025 by rpki-client