Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/eb72d270-c32a-3437-8797-c3b599e9c84e.roa
File: eb72d270-c32a-3437-8797-c3b599e9c84e.roa (raw, json)
Hash identifier: rJHxTfcFuN93DXGwt7VFvqo729a2BZ4We79Ft3iaV40=
Subject key identifier: D7:F3:33:D3:86:F9:D4:E7:FF:0A:37:BA:33:2B:04:C1:84:01:09:4D
Certificate issuer: /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial: 010D0C9F43285849915D3E36DEF11B4A10A1A600
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/eb72d270-c32a-3437-8797-c3b599e9c84e.roa
Signing time: Fri 18 Apr 2025 14:33:55 +0000
ROA not before: Fri 18 Apr 2025 14:33:55 +0000
ROA not after: Thu 17 Jul 2025 14:33:55 +0000
asID: 16509
IP address blocks: 23.172.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Apr 2025 20:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:91:5d:3e:36:de:f1:1b:4a:10:a1:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Validity
Not Before: Apr 18 14:33:55 2025 GMT
Not After : Jul 17 14:33:55 2025 GMT
Subject: CN=4f831005-345c-4289-a250-40ffcce3ca3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:45:d0:02:d0:51:fb:34:32:f5:f0:9a:49:
13:e8:41:2e:c8:52:77:eb:e8:06:48:5c:fc:99:07:
dc:21:a2:01:02:49:90:7d:04:b9:12:f5:e3:1a:86:
57:89:03:ba:bc:5d:c4:2d:9d:fe:8f:39:02:ff:dd:
f5:31:6c:32:f2:54:28:dd:1a:93:21:fb:85:7c:f4:
67:f7:cc:12:ae:f9:63:62:15:fe:3a:c8:17:96:d7:
17:2b:7e:90:d6:a6:44:45:8e:87:21:77:ec:cb:db:
89:ff:b5:77:3e:11:32:26:3b:ee:1a:75:5a:08:9e:
0c:b7:a0:e8:67:1c:34:b0:e9:13:66:07:65:79:a2:
4d:b9:02:a7:4c:16:4e:d2:16:39:f4:61:67:fd:87:
77:65:98:b8:30:17:51:e8:57:cc:a2:1b:94:85:1f:
27:06:1f:15:b2:1e:b4:a8:cc:c6:a5:7a:51:48:c8:
17:0b:ce:08:a1:03:65:ab:a7:1c:ce:57:7d:71:70:
26:63:9d:b0:26:4d:d6:eb:24:17:d9:56:86:0d:21:
02:05:33:39:23:b1:9a:86:e1:ab:26:e3:3e:d4:75:
9b:15:51:bf:a4:64:db:bb:39:50:56:79:0e:b6:26:
de:b1:ca:c8:41:f6:fa:43:64:71:5e:a2:2e:c1:0a:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F3:33:D3:86:F9:D4:E7:FF:0A:37:BA:33:2B:04:C1:84:01:09:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/eb72d270-c32a-3437-8797-c3b599e9c84e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
X509v3 Authority Key Identifier:
keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:8d:2c:bf:bf:56:9f:db:a3:3a:72:9f:9c:2d:61:e7:35:97:
c0:ea:e7:fe:fb:66:3c:13:22:22:04:da:8c:99:51:ec:24:59:
60:a7:54:47:d4:7a:38:82:39:a5:2d:1b:23:7b:20:b6:c0:7e:
da:a5:c1:99:5a:ab:a8:a4:12:aa:19:ff:db:21:33:8b:81:f6:
1e:02:55:5f:f8:8a:df:a0:24:ae:0c:e1:9d:e6:99:8b:d4:5f:
53:b6:25:9b:5a:9c:a7:a8:0d:8d:17:1f:20:42:73:86:7a:e4:
a8:23:5b:d8:79:74:a5:b1:60:f4:3b:b8:9a:2d:b0:a4:81:bd:
09:3d:66:60:03:08:ae:fa:4d:99:4c:bb:e3:04:e3:d5:1f:b9:
10:9a:25:32:68:bd:db:91:d9:5f:25:20:c5:92:dc:1c:13:15:
1b:08:18:b7:dc:9e:e9:1e:15:08:cf:3e:1d:4f:c8:ab:e0:61:
7f:ac:80:07:70:25:e3:cd:8b:ee:c2:c2:5e:b9:fa:20:8c:ae:
d0:ee:e9:c8:1c:fc:2c:00:f3:0d:b7:46:41:b1:03:8f:3a:47:
af:f7:40:df:8d:2c:b2:4c:19:c6:73:7d:4a:8b:dc:33:6a:85:
14:ed:55:37:0d:29:6e:5a:f1:55:c8:7d:24:dc:e4:bb:18:75:
f6:ee:4c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:32:46 2025 by rpki-client