Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/de905eb9-9d74-3759-ad32-eb480df12852.roa
File: de905eb9-9d74-3759-ad32-eb480df12852.roa (raw, json)
Hash identifier: A+CbtSOr77e5DWECPqsAc9hqv4y0szJXU3sBKk0Yzoo=
Subject key identifier: AA:3B:EC:21:05:DC:34:57:87:51:78:BD:28:39:CB:74:37:26:F0:54
Certificate issuer: /CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2
Certificate serial: 010D0C9F432858499C59E1AD00BBC2A4DF245E40
Authority key identifier: AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/de905eb9-9d74-3759-ad32-eb480df12852.roa
Signing time: Tue 22 Apr 2025 13:01:00 +0000
ROA not before: Tue 22 Apr 2025 13:01:00 +0000
ROA not after: Mon 21 Jul 2025 13:01:00 +0000
asID: 401388
IP address blocks: 167.253.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jun 2025 19:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:9c:59:e1:ad:00:bb:c2:a4:df:24:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2
Validity
Not Before: Apr 22 13:01:00 2025 GMT
Not After : Jul 21 13:01:00 2025 GMT
Subject: CN=736960b9-6d1e-4ff6-a76f-22889263b3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:b7:25:f0:78:be:50:e8:ff:a0:e3:fb:c1:
0d:ca:a6:28:b3:16:d9:28:98:0a:0f:9f:1b:43:a7:
a5:ff:d9:ce:2e:20:6a:e0:14:d6:96:d4:07:65:32:
3a:71:06:42:21:11:66:5b:c8:fc:03:89:2f:2d:26:
35:d0:85:a3:c1:b9:d8:62:65:fa:b0:71:fd:fd:4d:
c6:6e:19:5f:15:e7:c7:20:a2:77:1b:52:2e:a9:0c:
79:58:91:0e:dd:a8:9f:10:f8:63:9f:81:9d:78:86:
09:4a:ca:a9:81:91:d1:ce:4d:3c:ba:d5:ac:4d:18:
11:7d:00:4c:63:cb:6d:14:22:54:f6:44:85:f8:ce:
b4:35:45:a1:f8:7c:58:eb:0e:5a:05:a1:b6:cd:fd:
fd:11:b8:00:b9:a0:59:4f:8a:45:67:b3:10:d8:af:
17:0e:ff:a9:eb:59:fd:b4:b4:b8:b8:b8:3d:c5:4a:
5d:0b:67:61:51:1a:89:5d:a8:45:c8:dc:37:1d:c0:
91:b7:48:43:32:d3:85:58:53:16:8b:36:90:04:37:
79:50:5c:e0:3f:0b:69:dd:46:5a:90:3b:20:4f:21:
1c:5d:22:15:c1:fa:16:ad:a9:6c:0d:5e:77:06:42:
7c:df:6c:e3:97:17:10:34:f9:2a:f4:18:3c:06:a0:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3B:EC:21:05:DC:34:57:87:51:78:BD:28:39:CB:74:37:26:F0:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/de905eb9-9d74-3759-ad32-eb480df12852.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl
X509v3 Authority Key Identifier:
keyid:AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:ab:6a:9a:de:ed:c7:47:51:e3:ec:0a:96:2c:c2:9c:d5:77:
04:bd:1e:0e:25:d8:ce:c8:05:84:ab:8a:a1:de:7d:66:a6:8b:
4e:a6:73:ce:63:9f:f6:e4:77:7a:86:d4:05:1e:d7:3c:c0:1f:
e6:78:7b:4d:35:1a:23:2b:fc:66:3f:18:45:ee:dc:41:6f:67:
7d:db:99:5a:95:fa:32:1f:ac:05:30:4e:10:b1:0d:3b:a0:d9:
24:dd:52:36:39:f8:0f:b4:8f:38:44:fb:86:3b:76:bd:bb:6d:
4a:fb:21:f2:68:51:4b:95:9b:6f:c0:63:f7:9c:a2:b4:56:42:
bf:2d:99:9f:85:a6:44:2a:cd:e1:68:e5:7e:ad:7d:f9:22:86:
7d:96:42:62:8f:e9:2a:b2:50:91:fa:aa:b1:3f:33:92:25:2e:
91:05:46:80:e5:71:98:9a:7b:be:f2:12:db:e6:4d:65:e5:10:
d4:c2:66:35:4b:ca:a5:34:17:5b:48:38:84:f4:68:d4:99:2e:
d7:aa:d8:39:52:66:31:2d:97:da:70:d6:67:d9:1c:ed:15:53:
f4:02:e0:11:10:f3:72:c8:83:23:3f:03:70:a8:fb:09:f3:19:
23:ea:b1:76:b1:6c:07:fa:8c:29:1f:54:18:da:82:9f:fc:8b:
f4:ed:8e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 20:35:05 2025 by rpki-client