Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/e944e7ff-0bb6-31f8-8ab9-b0f4f5f8b693.roa
File: e944e7ff-0bb6-31f8-8ab9-b0f4f5f8b693.roa (raw, json)
Hash identifier: 8LmBHHNj43hth9dnS7pr14mPYgTbJmqOFIT2LTdAIXI=
Subject key identifier: F6:76:C6:45:91:70:34:6C:AF:6F:92:4F:AC:B2:95:4F:F4:0E:46:AC
Certificate issuer: /CN=1f1cee84-663d-43bc-bc24-3b0050eff749
Certificate serial: 010D0C9F432858498DFA08C62C46345891DEC700
Authority key identifier: D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/e944e7ff-0bb6-31f8-8ab9-b0f4f5f8b693.roa
Signing time: Thu 17 Apr 2025 09:26:35 +0000
ROA not before: Thu 17 Apr 2025 09:26:35 +0000
ROA not after: Wed 16 Jul 2025 09:26:35 +0000
asID: 13977
IP address blocks: 64.222.254.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 18:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:8d:fa:08:c6:2c:46:34:58:91:de:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1cee84-663d-43bc-bc24-3b0050eff749
Validity
Not Before: Apr 17 09:26:35 2025 GMT
Not After : Jul 16 09:26:35 2025 GMT
Subject: CN=ef1c9f8d-03f9-4e49-94f7-e44baf8fb47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:85:f1:7c:cd:27:07:c9:8d:da:fa:09:a7:
26:d9:0d:68:01:fb:e1:bc:09:32:e2:b2:c4:8f:81:
5d:3f:37:e9:71:46:66:ae:d1:05:61:2b:02:fd:c0:
7a:29:5c:f1:4a:58:d5:b7:75:3d:63:a2:f4:a9:d2:
00:23:e0:24:f6:15:2d:40:61:e0:1f:12:f8:17:ea:
1e:c4:5b:93:4f:5d:e2:95:18:da:97:a7:da:c7:5b:
3e:99:0a:90:cc:28:b8:e2:a4:62:fb:5f:22:ac:d6:
9f:6f:cd:a6:70:61:86:45:64:ea:75:ee:1d:1a:34:
8b:00:2b:06:9b:d8:6a:bd:fe:c4:86:57:12:90:fc:
6e:f5:98:b8:f9:d5:d5:9c:c6:b5:cf:30:fa:9b:0f:
93:b5:2c:93:ed:23:f2:59:d1:70:dc:27:1f:c8:78:
6b:37:d4:a3:34:43:10:ea:4c:c8:7a:b2:30:57:00:
77:35:8d:84:b8:83:b3:08:1b:84:e0:23:56:85:b7:
4d:18:70:6c:5d:e6:4b:d4:f5:09:d9:d5:b6:88:db:
04:ef:17:3f:93:87:9b:8f:f0:7e:58:ac:07:7b:ad:
40:35:b0:8d:20:af:c7:41:51:72:ce:d2:51:03:d7:
c7:e8:af:01:8d:3f:27:b7:3b:34:d6:dc:49:f5:73:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:76:C6:45:91:70:34:6C:AF:6F:92:4F:AC:B2:95:4F:F4:0E:46:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/e944e7ff-0bb6-31f8-8ab9-b0f4f5f8b693.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.crl
X509v3 Authority Key Identifier:
keyid:D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer
sbgp-ipAddrBlock: critical
IPv4:
64.222.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:4f:82:ea:28:e2:21:c5:d5:26:e9:03:8b:85:db:15:42:50:
0b:1d:81:30:06:10:a4:c5:5d:66:14:7a:d2:74:00:3a:85:bf:
a0:1f:81:02:e4:f0:43:fa:88:60:b2:a3:e7:2e:45:a8:58:fe:
54:3c:5b:0e:0d:4a:28:7c:72:af:b9:1b:b1:3e:4e:c9:ac:e7:
4a:c5:ee:e4:e0:76:0b:15:b7:4f:17:81:b3:c4:23:ed:2c:76:
02:58:91:cc:bd:33:a4:8d:57:1a:c9:e2:d4:ba:a6:f5:bb:8c:
d3:8d:30:9b:8e:1d:59:5b:3e:68:dd:47:d9:98:a0:07:49:a6:
cb:33:54:83:a9:88:40:79:9a:f3:27:68:42:8b:54:44:76:e2:
2e:c0:b5:5b:63:7f:b1:57:67:e9:d4:4a:56:bd:43:6d:67:d6:
8b:7b:2f:e1:8e:f6:a1:86:ca:b8:45:45:74:e0:f4:9f:02:7a:
44:64:a6:0d:a8:bd:c7:8d:19:b5:dc:24:5f:72:b6:0b:77:d0:
ac:79:65:04:29:87:3c:2b:ad:cb:18:76:77:68:8c:06:3f:8a:
4e:eb:e7:f0:ab:06:1a:05:b9:ab:b2:3e:f2:ca:7a:b8:26:0d:
d6:66:18:f5:88:e7:f2:10:92:cf:e3:21:98:8d:07:89:7f:c6:
ac:c6:ab:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:18:25 2025 by rpki-client