Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/cbb2c72a-5a95-3031-937b-c397988bc507.roa
File: cbb2c72a-5a95-3031-937b-c397988bc507.roa (raw, json)
Hash identifier: gy5KT880yAcZNmmlf7x7To+lOXMK98O0Coe4QQ+kdIw=
Subject key identifier: 7D:56:03:24:62:3A:81:1C:E2:40:33:99:5D:F6:34:92:2B:65:49:21
Certificate issuer: /CN=004321a8-393d-4f7f-add9-dddc07a1320d
Certificate serial: 010D0C9F43285849C43076574888D0E4F842BD80
Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/cbb2c72a-5a95-3031-937b-c397988bc507.roa
Signing time: Tue 06 May 2025 19:29:54 +0000
ROA not before: Tue 06 May 2025 19:29:54 +0000
ROA not after: Mon 04 Aug 2025 19:29:54 +0000
asID: 399970
IP address blocks: 149.112.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 20:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c4:30:76:57:48:88:d0:e4:f8:42:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d
Validity
Not Before: May 6 19:29:54 2025 GMT
Not After : Aug 4 19:29:54 2025 GMT
Subject: CN=e055f035-a73a-451b-9018-bc6dd1eb2c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:2b:cd:59:52:26:91:19:7c:6c:ca:d8:01:
f9:da:99:35:a3:0a:c2:46:5b:88:80:f3:d3:2e:2b:
a1:f3:b5:1d:51:e5:7c:75:bd:a1:40:27:45:b4:5d:
23:5f:e2:22:11:de:0e:4f:6b:f4:d9:11:2d:f8:07:
cd:39:e2:eb:91:30:f6:82:62:17:45:0b:b6:27:78:
7b:ff:a5:a2:b2:2a:e0:5f:df:4d:23:c1:62:93:cf:
ac:0f:02:4a:b6:91:a4:6b:e4:81:17:6f:dc:9a:0c:
fa:42:a6:26:ae:ba:2c:cb:2e:ad:62:09:b6:4d:84:
87:73:90:f8:32:44:98:51:b1:2b:35:79:56:6c:28:
38:c7:ec:ca:18:14:fa:52:20:fb:d3:c1:bb:91:41:
af:cb:43:32:87:eb:fb:12:4c:51:02:d7:f2:88:44:
cb:ca:a4:63:0a:f2:cb:2f:13:3f:11:ac:6f:79:7e:
69:4d:11:f7:b0:54:2f:ca:1a:22:c7:ff:bb:1c:a2:
41:e5:1a:b8:6d:62:e3:77:20:f9:58:bf:06:71:40:
11:4b:7d:9d:de:dd:2d:74:e3:dc:3b:a7:98:6d:f5:
77:df:83:e8:22:57:71:21:f8:ac:93:cd:2f:e9:22:
d4:e6:de:72:a4:36:6a:2b:85:fe:9c:03:b0:2b:4f:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:56:03:24:62:3A:81:1C:E2:40:33:99:5D:F6:34:92:2B:65:49:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/cbb2c72a-5a95-3031-937b-c397988bc507.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl
X509v3 Authority Key Identifier:
keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:77:b6:7d:da:17:b8:c9:d8:3b:00:02:4a:3b:9d:52:03:f8:
a6:4e:12:74:d9:8e:e2:ea:17:77:e9:73:ad:f7:5e:90:5b:0e:
e0:d1:86:e8:ac:5b:5a:ed:2c:9f:54:9f:fe:25:d0:5b:27:e0:
d5:e7:1e:23:b2:d2:83:15:87:35:c4:0f:77:78:c0:67:23:f7:
c3:2b:e1:03:d9:69:b0:d6:f7:31:d6:81:e5:1a:01:62:f4:c0:
9e:79:a9:09:ee:e8:fb:9b:28:fb:43:36:7d:35:ac:e6:30:7a:
78:c9:05:44:ab:c4:e0:7a:b3:49:d8:b4:55:a7:82:b4:be:2e:
9d:47:54:10:cd:83:e8:a9:ca:1b:c5:08:69:a9:86:ca:27:12:
18:e3:31:0f:05:8c:db:7b:8f:80:5b:ea:76:31:03:e6:d5:44:
aa:54:22:6d:2d:e2:36:42:2c:6f:c2:2f:95:7c:a3:33:dd:0e:
f2:62:91:84:ab:9c:61:e2:24:3e:2e:d3:e3:00:d5:4d:20:aa:
43:2c:52:f6:26:2c:ff:43:d9:1a:19:ce:4c:60:26:e4:6d:45:
f2:98:e7:79:c8:d5:97:6b:3b:80:24:eb:92:79:61:39:a2:a2:
ab:e9:4a:11:92:23:35:48:16:32:f4:22:c5:0b:74:dd:1e:44:
0e:88:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:39 2025 by rpki-client