Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dd375d42-c360-3f1f-8232-930ca43ea402.roa
File: dd375d42-c360-3f1f-8232-930ca43ea402.roa (raw, json)
Hash identifier: YZFBPesx3bvyOyWEVCzPiLfq1VkLRx0g+9INdS/THj8=
Subject key identifier: 63:3C:6F:2A:C8:7D:6D:AD:95:A8:26:A5:8E:9F:AD:5D:82:DF:E4:1F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584971D39FE2101ABB38F923DD80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dd375d42-c360-3f1f-8232-930ca43ea402.roa
Signing time: Mon 07 Apr 2025 07:26:34 +0000
ROA not before: Mon 07 Apr 2025 07:26:34 +0000
ROA not after: Sun 06 Jul 2025 07:26:34 +0000
asID: 208485
IP address blocks: 172.94.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 11:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:d3:9f:e2:10:1a:bb:38:f9:23:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Apr 7 07:26:34 2025 GMT
Not After : Jul 6 07:26:34 2025 GMT
Subject: CN=4fdb7608-5045-4d32-9d46-f2f4342e5921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:8a:5e:0c:71:4e:74:bc:fd:83:a7:f5:9d:
94:00:de:9b:68:16:e0:95:a1:db:64:05:d5:59:cd:
21:31:08:eb:4b:db:a9:53:e6:ce:ad:72:5f:4b:f8:
b3:36:cb:12:b6:24:85:55:83:29:22:2a:08:05:be:
43:6b:5e:b4:09:c1:80:e1:ac:54:b4:dd:b0:f3:4a:
4e:cd:6d:c7:7b:7f:9f:3c:93:6a:77:75:58:50:c4:
9c:85:a9:95:61:c9:38:b4:87:11:f7:ac:9b:a7:b3:
98:ae:04:9b:2f:f4:99:b3:03:df:e9:a1:40:db:d7:
d6:09:3a:0f:21:01:d1:09:c4:dd:f8:cb:65:a9:41:
7b:e9:ee:98:23:44:ac:53:9d:5d:31:9f:40:d3:a8:
a0:af:a2:98:23:26:f4:c7:df:d5:f0:8a:97:63:0e:
0d:18:74:65:04:b5:42:f7:a2:81:1b:69:ab:44:fa:
26:f9:47:d4:9e:6f:c6:c8:2a:a8:44:12:49:8a:7a:
e6:1e:a1:96:a1:75:4a:b2:af:0f:d8:c4:9a:42:9b:
67:e8:f5:02:1d:b5:29:a3:53:33:07:e6:12:a1:61:
40:3c:43:be:ea:ef:a8:b2:b2:0d:50:34:fa:f0:e6:
46:bb:56:26:da:7f:91:0b:df:ec:13:50:74:51:e6:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3C:6F:2A:C8:7D:6D:AD:95:A8:26:A5:8E:9F:AD:5D:82:DF:E4:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dd375d42-c360-3f1f-8232-930ca43ea402.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:ed:9f:7a:b3:1f:8a:e2:4b:74:60:bb:6c:64:52:23:cc:05:
84:3d:7b:ec:0e:ba:83:38:96:08:78:6e:a0:b0:18:02:c0:97:
73:b2:46:67:11:78:7f:8b:44:8a:75:06:da:96:9b:7a:6a:1d:
42:b4:56:f0:ee:5c:ed:8e:de:39:b1:c9:3d:47:f9:35:78:73:
8b:79:13:b2:29:db:4e:3c:c6:2d:2b:9b:df:58:e4:a2:b8:9c:
8f:ed:65:2d:28:da:24:8b:86:ef:cd:f6:42:7e:03:90:35:ce:
5d:4e:76:b7:29:5e:6a:1a:f4:18:4e:94:69:7d:f7:68:03:bf:
29:ef:f3:56:f5:f3:33:c3:aa:70:54:ab:d8:db:ed:68:c8:01:
d9:41:c5:5b:3d:dd:83:6e:ba:8f:df:12:13:cb:3e:01:7b:79:
17:c4:ba:e7:2e:df:5d:cb:48:57:4e:56:b2:34:80:a4:7a:87:
f4:39:20:a7:c6:02:50:64:fb:0f:35:6d:15:12:c8:0d:cb:32:
de:ff:75:07:2f:ec:4f:0a:41:83:a0:34:52:74:b2:9a:e8:a3:
83:5a:56:dc:82:44:46:39:ab:e6:ae:ec:56:a2:15:f4:38:c5:
20:71:0a:b8:c1:df:cc:3a:79:ca:48:23:af:dd:9b:8a:11:bc:
6d:0e:8f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:02:23 2025 by rpki-client