Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/9141fb60-1299-3cba-8b8d-d6b9636a80a6.roa
File: 9141fb60-1299-3cba-8b8d-d6b9636a80a6.roa (raw, json)
Hash identifier: +qXznjIJ/+Z+kWMDDlBYI/8In/MXnmqAGX11nshFAlc=
Subject key identifier: E7:78:2D:74:6A:3D:C7:4D:02:F8:7B:1D:E6:91:22:1F:69:70:17:4D
Certificate issuer: /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial: 010D0C9F43285849915E3916ACAC1B2833527F80
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/9141fb60-1299-3cba-8b8d-d6b9636a80a6.roa
Signing time: Fri 18 Apr 2025 14:35:53 +0000
ROA not before: Fri 18 Apr 2025 14:35:53 +0000
ROA not after: Thu 17 Jul 2025 14:35:53 +0000
asID: 14618
IP address blocks: 23.172.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Apr 2025 20:08:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:91:5e:39:16:ac:ac:1b:28:33:52:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Validity
Not Before: Apr 18 14:35:53 2025 GMT
Not After : Jul 17 14:35:53 2025 GMT
Subject: CN=09a677a2-f2f6-4cb7-a06f-d14c79f80c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:83:6e:58:67:6c:7d:15:bb:8d:a8:d0:bb:
ee:9e:c5:ca:be:f7:55:01:04:00:e1:e8:22:aa:a4:
65:9a:33:c5:9e:1e:f5:7c:4a:7c:31:91:fd:33:e0:
62:80:87:a4:a4:7c:70:c6:04:94:d6:25:4f:46:72:
bc:37:8e:70:b0:2b:df:31:69:29:34:6b:70:24:f5:
90:96:98:7f:20:5c:e3:ba:f1:ab:e3:45:2a:fb:74:
4e:bf:09:27:b1:0a:90:b6:93:4c:bb:ff:16:90:2d:
2f:29:7a:49:d2:eb:5a:62:df:4d:2e:d8:e9:6c:2c:
04:48:49:fb:9a:fd:bf:62:a8:c6:0c:4c:92:22:ed:
58:81:eb:c6:98:cb:55:7d:93:1d:ef:10:b2:44:cd:
20:b7:d4:83:81:7f:6d:08:e8:78:f2:c6:ca:76:2a:
19:7b:a1:47:2e:74:4a:ac:7c:ad:61:3e:b9:7b:bf:
db:cd:0c:ba:39:88:d6:10:44:fe:40:48:94:5b:3e:
d1:ca:60:a0:9c:89:8a:5a:be:86:c4:8f:1a:4d:ff:
9c:ee:57:0a:7c:06:41:e7:ac:e3:9f:92:97:fd:eb:
54:db:d4:90:1d:98:ef:49:c9:dc:18:ff:8f:63:bd:
4b:95:ac:11:df:7f:ff:e0:44:76:ac:05:00:28:31:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:78:2D:74:6A:3D:C7:4D:02:F8:7B:1D:E6:91:22:1F:69:70:17:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/9141fb60-1299-3cba-8b8d-d6b9636a80a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
X509v3 Authority Key Identifier:
keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:ba:38:ee:31:91:32:2b:2c:aa:b6:d1:6b:f7:6f:1a:24:fc:
a5:d7:2b:fd:e2:d4:2d:7c:e4:8a:92:9f:e5:32:a8:7c:d3:a1:
42:09:1b:ae:59:1b:91:32:84:6d:d8:9d:e0:2d:e5:b1:51:93:
0a:b4:92:d4:07:82:eb:a7:56:f1:61:3b:8e:c1:28:ed:4b:b1:
fb:75:9b:5a:e2:10:94:c6:1f:9a:ee:e2:1f:53:23:05:bd:b2:
43:e4:f0:93:4f:74:1c:c3:0c:95:e8:9e:26:60:03:a3:04:fa:
43:9f:c5:17:d6:a3:14:bc:69:c1:cc:67:0b:14:e6:dd:b4:e6:
dd:6a:76:4e:88:e6:b5:b7:28:82:aa:ff:cb:97:43:7e:7c:2f:
c0:12:d1:57:55:f8:7d:36:c1:a1:d2:9e:c8:10:87:82:2e:e7:
63:da:18:47:6b:68:36:a3:7b:06:f9:f2:ce:13:46:5f:f9:2f:
bf:cb:25:c8:2b:90:57:3f:46:c2:26:6b:e4:b3:86:48:79:f2:
be:e8:f0:f6:ac:83:be:0b:2d:09:a6:dd:f7:2e:da:3c:42:73:
fd:f5:14:bd:a9:d0:66:08:0c:97:fb:2b:b2:0f:c5:bd:6b:e2:
3f:33:82:7b:44:6b:4b:18:41:c2:34:ff:fd:c3:01:b7:c2:62:
73:67:1c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:03:18 2025 by rpki-client