Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/c60642ea-1662-380c-90f6-1634faf3900d.roa
File: c60642ea-1662-380c-90f6-1634faf3900d.roa (raw, json)
Hash identifier: wwwDNnGgY00PKNTNEZBQL5qlcrxdfFnLMQOrffbsubg=
Subject key identifier: EF:F8:F1:1A:55:18:ED:B4:34:EB:C8:43:25:0C:8D:42:8F:18:91:F1
Certificate issuer: /CN=baff326b-1f24-468c-b9c6-fa089a461350
Certificate serial: 010D0C9F432858497AA1F2E0392E942161726080
Authority key identifier: 05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/c60642ea-1662-380c-90f6-1634faf3900d.roa
Signing time: Thu 10 Apr 2025 11:08:45 +0000
ROA not before: Thu 10 Apr 2025 11:08:45 +0000
ROA not after: Wed 09 Jul 2025 11:08:45 +0000
asID: 395776
IP address blocks: 107.163.0.0/16 maxlen: 24
192.155.160.0/20 maxlen: 24
192.186.0.0/18 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 13:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7a:a1:f2:e0:39:2e:94:21:61:72:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baff326b-1f24-468c-b9c6-fa089a461350
Validity
Not Before: Apr 10 11:08:45 2025 GMT
Not After : Jul 9 11:08:45 2025 GMT
Subject: CN=b1b4a40e-96b0-4ff6-9acb-47e544afac1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:d9:ed:48:cd:a2:0b:ac:23:d8:75:de:05:
aa:3e:8f:2c:4b:f4:8a:9c:7d:04:ec:e1:18:fd:cf:
18:2f:d2:a6:e4:48:01:ad:a5:1d:65:04:62:91:c8:
97:60:4e:bb:9b:c5:37:89:42:64:8f:bc:dc:d3:6d:
83:1a:eb:ba:13:9e:b7:3e:af:23:ba:c7:4c:67:98:
a9:1f:96:81:8b:26:a6:0f:cd:d8:2a:7c:b7:0b:37:
da:e0:1d:04:b8:be:56:3d:d9:0b:b1:77:53:e2:f6:
b0:fd:26:43:84:e3:5e:ed:a1:1e:05:3f:c4:c4:03:
6d:51:e1:7f:27:57:fb:5f:a2:ad:b3:21:61:4c:55:
d4:13:cf:1a:cf:2b:c8:22:fb:e6:a8:c3:96:a8:05:
a6:81:25:ae:41:84:2f:bc:91:7e:52:91:6a:b6:4b:
38:aa:e7:38:19:a0:4e:74:ef:71:06:23:a8:60:68:
15:ed:e0:6f:ae:01:12:1d:38:b5:02:f4:71:8d:e5:
2f:ef:c6:e0:a1:d2:8e:d6:1f:5c:7a:e2:f3:87:b7:
ad:15:09:df:8e:49:37:d9:b6:39:b6:49:71:40:10:
53:84:d9:78:08:fb:ab:65:2e:10:8e:c4:af:99:71:
df:a0:f7:16:6f:e8:54:a6:4f:82:31:53:f9:5e:6c:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F8:F1:1A:55:18:ED:B4:34:EB:C8:43:25:0C:8D:42:8F:18:91:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/c60642ea-1662-380c-90f6-1634faf3900d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl
X509v3 Authority Key Identifier:
keyid:05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
sbgp-ipAddrBlock: critical
IPv4:
107.163.0.0/16
192.155.160.0/20
192.186.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:8f:20:34:f1:05:24:bc:20:f2:d1:d2:bb:fe:45:49:b6:63:
98:dd:f1:db:d5:51:ed:af:62:c2:82:d6:69:b9:32:1a:18:4f:
45:42:57:04:77:0a:a6:71:27:40:45:43:ec:21:bf:29:f9:53:
1f:b4:b1:26:12:06:43:84:aa:64:03:67:b3:4a:3c:d7:b0:d3:
25:6c:0f:51:d8:c3:36:55:56:a6:94:d9:02:0a:b4:37:4c:19:
24:99:65:66:70:71:ac:20:5d:2f:70:64:cb:44:8c:6b:4e:e0:
3e:0b:24:05:8a:eb:57:8e:a1:27:b8:47:7e:e8:b0:19:bf:b8:
d2:b9:21:6d:63:e5:af:eb:d9:6c:ef:a1:70:40:be:63:5a:8d:
0b:aa:7a:90:56:4e:88:2f:e3:55:31:af:44:69:2d:2a:c9:b5:
c6:f4:71:97:16:a1:d7:e2:d6:35:ae:4f:c6:5b:8d:9a:3f:9e:
7f:63:0a:d5:30:c5:46:3e:3c:6f:f1:8d:b3:6c:40:1c:f1:d0:
5c:13:ca:7f:a7:76:7b:e0:45:0c:15:68:ba:07:e3:12:b8:21:
e8:06:20:7a:1b:d6:4f:0a:a4:5e:3f:e7:12:1d:37:12:e1:1a:
ac:61:46:b7:9f:d0:5a:d7:a6:9a:10:9a:ce:1d:bb:ab:80:70:
36:68:cd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:18:50 2025 by rpki-client