Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43dde0b6-ce2d-396d-be5b-cf972fc0d830.roa
File: 43dde0b6-ce2d-396d-be5b-cf972fc0d830.roa (raw, json)
Hash identifier: cH1mkMIGg/yguy8zpgp0xqC3EFI6jJ1NnmK26vJfwck=
Subject key identifier: BD:2D:F8:FB:5F:B2:44:A9:36:4B:FA:72:45:0F:25:D5:34:A0:F2:DE
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584A00F749092870FBA1A5057490
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43dde0b6-ce2d-396d-be5b-cf972fc0d830.roa
Signing time: Wed 28 May 2025 13:59:01 +0000
ROA not before: Wed 28 May 2025 13:59:01 +0000
ROA not after: Tue 26 Aug 2025 13:59:01 +0000
asID: 400175
IP address blocks: 172.252.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 14:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:00:f7:49:09:28:70:fb:a1:a5:05:74:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: May 28 13:59:01 2025 GMT
Not After : Aug 26 13:59:01 2025 GMT
Subject: CN=cad3dead-d3b7-48dc-b766-2601421dfea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:e9:43:2a:9b:c3:e5:37:0b:21:43:33:ba:
28:ce:cd:52:c2:19:5a:f4:31:ef:c4:2f:8b:bf:e0:
fc:85:98:75:f4:8a:d6:bf:a2:5f:78:75:0b:9d:ed:
d5:4d:af:e2:f0:d4:ff:bd:5c:d9:2d:d8:1e:71:6b:
21:97:b6:8f:5d:17:3f:42:0e:81:92:be:4a:5f:8e:
6d:2b:b4:d3:0c:fb:02:1c:a1:3b:cd:b4:c5:89:27:
3e:15:3b:fe:12:3b:39:cd:e2:a8:8d:09:fb:a5:c1:
19:82:87:27:04:42:1f:35:20:c8:17:95:49:c4:0c:
b0:9b:ca:95:89:0f:a8:ee:18:eb:c7:d6:38:20:90:
77:93:51:2d:e7:f0:52:86:b7:11:7c:96:5c:3e:df:
03:2e:0c:c9:9d:9d:de:7e:05:c4:9b:44:c9:aa:19:
3b:d6:eb:9b:89:1b:31:5f:e2:76:e9:04:39:ca:16:
65:c1:89:7a:7c:41:05:97:60:7d:31:5e:0e:a6:12:
bc:ee:8a:ba:53:21:6b:a0:2c:27:e1:d3:1d:f1:6f:
7f:ae:76:f1:7c:55:cf:08:7e:e3:44:ff:22:48:88:
3e:78:63:c1:bf:f8:29:80:fd:1c:83:51:34:94:fc:
b2:35:45:90:59:1a:4b:1d:82:ff:0a:00:f3:26:50:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2D:F8:FB:5F:B2:44:A9:36:4B:FA:72:45:0F:25:D5:34:A0:F2:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43dde0b6-ce2d-396d-be5b-cf972fc0d830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:f9:72:d5:cf:b9:06:10:ae:48:61:85:ff:d7:31:03:be:fb:
c0:95:e2:31:65:45:3d:ce:3c:62:b3:44:d0:f3:1d:5c:0c:be:
a1:57:01:ac:de:ea:4d:c5:47:d2:34:58:f3:9a:ef:d2:6c:df:
bf:8e:72:3c:9a:85:09:4f:a1:b6:cf:d7:1f:09:ee:9e:af:f8:
d2:b0:71:98:da:a9:c5:86:56:7c:ec:14:ec:b3:6a:0a:95:05:
e3:9e:db:9a:e9:da:1c:81:85:f2:3e:27:b4:8c:3b:aa:cf:02:
77:99:30:7b:9b:eb:3f:e9:6d:6f:df:58:79:46:aa:34:36:ef:
31:1f:85:58:c6:57:02:23:be:7a:e5:26:99:cd:98:8f:2e:72:
81:e0:d0:41:73:af:fb:e9:db:39:16:83:57:d7:52:42:e3:65:
a3:de:51:e7:ba:94:da:da:49:bf:07:0f:cc:90:dd:89:05:6f:
96:6d:de:d9:f4:9b:78:39:2e:c6:c2:8e:aa:8f:8a:53:12:4f:
3c:48:47:ba:f0:95:29:75:37:8b:df:3c:7f:e3:aa:d0:73:a9:
35:63:db:6f:2c:d7:56:c8:f6:56:a7:95:d3:28:fb:91:82:8c:
60:75:74:d7:ad:26:f0:80:db:f7:90:2f:26:9b:8e:4f:cd:66:
47:65:7b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:09:37 2025 by rpki-client