Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/76016c91-e840-3398-9819-a844fbf1a390.roa
File: 76016c91-e840-3398-9819-a844fbf1a390.roa (raw, json)
Hash identifier: d+7GDlQydp4NJ4WEv8Woo5ha34eSjAHgWa+u70Xr/Zw=
Subject key identifier: 24:C4:87:13:0F:23:E4:3E:33:C6:F3:98:1D:7D:F7:B4:83:1D:18:48
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848F5B641C6EA5560791B7B5380
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/76016c91-e840-3398-9819-a844fbf1a390.roa
Signing time: Fri 21 Feb 2025 20:27:09 +0000
ROA not before: Fri 21 Feb 2025 20:27:09 +0000
ROA not after: Thu 22 May 2025 19:27:09 +0000
asID: 7029
IP address blocks: 68.182.68.0/22 maxlen: 24
68.182.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 16:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f5:b6:41:c6:ea:55:60:79:1b:7b:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 21 20:27:09 2025 GMT
Not After : May 22 19:27:09 2025 GMT
Subject: CN=a667f9bb-be19-4926-bfbe-c8afc6be11ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:ac:72:fc:fc:fa:fb:e9:3a:18:f7:66:cc:
6c:a8:9f:e8:1d:e7:48:5a:0a:11:b5:e3:47:9d:80:
6c:f9:b3:9c:e0:34:34:19:83:3a:13:0c:3e:70:d1:
25:3c:2f:ce:69:41:d1:69:90:47:f4:cf:3f:9a:21:
16:48:88:dc:31:c2:41:e0:f5:12:7b:37:43:6a:0b:
32:62:0d:69:43:9a:81:61:99:37:44:7f:24:2e:9d:
c8:19:bd:53:e6:a6:d0:28:70:7d:60:2a:3e:87:ae:
8c:ba:e2:6b:b8:43:91:95:f3:31:1a:14:dc:de:8a:
2d:8e:87:2a:9f:67:eb:a8:d4:8f:b4:dd:c7:6c:b6:
d8:a1:30:19:58:2a:4b:0d:ad:47:66:6c:23:a3:65:
73:5c:94:83:a6:ad:ab:f8:dd:23:25:fc:0d:13:95:
47:10:b9:65:36:d0:fd:55:b4:91:fc:ef:60:3b:d3:
82:17:d7:dc:d5:9c:ad:6c:0f:e9:e6:af:a1:7a:ff:
23:4c:9a:9e:81:da:b9:3e:56:c0:c0:3a:30:d3:3f:
d1:48:9d:ca:df:da:1c:12:41:d3:37:60:c3:5d:f7:
1f:a0:92:cb:9d:97:79:f0:39:07:da:1b:eb:e4:db:
76:4f:a9:4b:66:0f:d9:70:c4:1e:18:e1:e9:f2:5d:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C4:87:13:0F:23:E4:3E:33:C6:F3:98:1D:7D:F7:B4:83:1D:18:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/76016c91-e840-3398-9819-a844fbf1a390.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
68.182.68.0-68.182.79.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:ca:df:34:93:ce:9c:aa:47:10:26:11:ab:46:7d:70:00:17:
dd:2b:22:f6:63:ff:3a:4e:68:43:17:a3:89:46:04:e4:91:2e:
5f:04:31:e0:03:db:88:1f:c8:a6:a5:ec:5f:4d:47:36:4a:36:
f2:68:55:ec:4e:7b:42:ca:0d:31:77:92:76:2a:16:c5:73:9a:
d5:f5:03:57:dd:17:b1:f1:f1:e1:95:46:61:68:e0:cf:76:e7:
47:65:08:4a:ef:07:4a:40:9f:c1:f7:c4:70:b4:9d:d5:4a:bc:
f8:94:80:59:de:69:1a:3a:7b:e4:49:8e:89:a9:a9:d2:89:1c:
91:cc:21:97:09:3c:75:6b:82:b5:b8:df:b2:64:61:cb:3a:1b:
37:ee:60:a5:70:b4:a9:20:d8:36:66:12:e4:30:3b:07:19:7a:
e9:52:75:49:fb:e7:7b:d2:e0:99:b8:f8:db:2c:6e:bb:8f:6a:
e2:57:97:49:b1:f7:ad:04:b0:6b:fe:d9:f4:81:5f:ca:99:d9:
13:d5:61:a6:2c:f7:e8:49:ac:a7:f6:cc:b0:ca:11:96:db:65:
4a:47:4c:74:46:cc:0f:43:86:02:54:fe:51:c0:14:da:51:4d:
a6:7c:fa:2e:db:8a:67:d2:db:f6:f5:80:fb:55:70:d1:f5:eb:
ba:72:7f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:20:01 2025 by rpki-client