Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/088478dc-ebf3-3c35-a910-51d3507d68f4.roa
File: 088478dc-ebf3-3c35-a910-51d3507d68f4.roa (raw, json)
Hash identifier: hV6S5jRjikx1GadfSnahUf9IL4h1XyI1NIlRWOZakDI=
Subject key identifier: 3F:50:FA:47:40:0E:6E:79:97:41:BC:52:53:B5:45:75:8C:05:3A:2D
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584A0727D1B8D355078202EC0800
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/088478dc-ebf3-3c35-a910-51d3507d68f4.roa
Signing time: Fri 30 May 2025 19:11:39 +0000
ROA not before: Fri 30 May 2025 19:11:39 +0000
ROA not after: Thu 28 Aug 2025 19:11:39 +0000
asID: 6559
IP address blocks: 152.28.192.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:07:27:d1:b8:d3:55:07:82:02:ec:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 30 19:11:39 2025 GMT
Not After : Aug 28 19:11:39 2025 GMT
Subject: CN=8e6711d8-83f3-4416-83b1-2e51ff0ec3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:eb:a7:55:93:1c:cd:01:6b:89:d6:a3:a3:
be:d0:56:8c:8f:92:73:ef:14:0f:36:ae:8a:d1:f8:
1d:08:41:d9:08:28:2f:64:ad:f7:c7:54:ea:ad:a6:
c1:0a:0a:f2:0a:6e:bb:43:8e:e5:d5:60:ca:65:03:
66:e3:34:04:08:94:ef:90:a8:db:21:dd:b9:71:a8:
58:ff:4e:cf:a8:95:16:d6:d6:f7:8b:16:84:d4:b6:
81:02:ea:cf:a9:67:f4:39:93:c8:46:23:09:2b:a1:
b3:92:9c:31:cf:8d:44:cd:a1:b9:59:7a:c2:86:7b:
44:d5:f5:ef:f4:78:04:c2:55:2a:22:95:dc:69:8a:
5f:3b:5b:c2:de:82:11:77:70:a0:ee:c2:38:7a:5a:
70:c4:40:42:9c:4a:89:a2:06:12:45:f7:68:5d:eb:
d8:87:a0:92:b3:96:3f:f0:4f:7a:cc:28:3d:6e:ce:
54:62:10:76:e3:ec:86:08:24:69:2e:aa:11:1a:a4:
03:56:b7:8f:d3:c4:3b:5e:2a:56:da:02:c7:64:f5:
9b:6e:26:f2:4e:7f:9c:70:d3:51:6a:54:39:72:aa:
b2:02:17:38:2c:da:14:17:31:ab:77:a4:d9:8f:47:
6c:a3:db:69:76:7b:8a:cf:9c:95:24:69:93:6a:ff:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:50:FA:47:40:0E:6E:79:97:41:BC:52:53:B5:45:75:8C:05:3A:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/088478dc-ebf3-3c35-a910-51d3507d68f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.28.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:21:34:1d:e9:c7:89:bc:a6:c4:ff:91:8f:ba:bd:c9:54:76:
60:f5:c7:0a:0b:f1:88:d1:63:6b:53:25:16:d7:e6:7b:c1:0e:
4e:b2:57:9e:db:d7:c8:9e:f7:33:7e:a0:4c:a0:a5:9e:67:87:
18:1b:b1:70:b0:f6:e9:0c:d1:71:34:e0:e1:79:19:b4:c7:b4:
50:6a:ab:e8:b2:b5:2f:20:34:73:61:cb:17:e4:aa:51:7b:8f:
02:7e:b1:93:48:85:21:4a:75:16:75:9d:ae:55:bd:71:3f:ee:
e9:c6:63:11:98:82:58:4c:0d:f4:16:af:14:76:97:32:2b:5c:
94:5a:b0:64:7e:32:29:98:af:50:e3:56:21:42:bb:b5:22:f2:
57:82:2c:b7:84:1e:8b:25:3f:2d:92:d3:69:4a:2e:e1:69:dc:
e7:c3:d4:5c:12:b1:92:9c:41:92:b3:94:d5:69:88:77:a2:51:
90:04:00:e0:b2:5f:85:c7:2b:68:2e:47:9b:7c:c4:f5:27:99:
ab:99:3d:4a:c2:af:13:1f:c9:db:b8:d2:e4:06:80:d5:db:07:
d5:2c:11:42:87:10:4a:8d:dc:9d:91:03:94:3c:be:c6:95:e8:
22:9d:c5:7f:b8:b3:49:58:44:7d:70:cc:63:ba:0a:80:fb:c2:
21:73:68:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:11:21 2025 by rpki-client