Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/0147e107-4a40-3be6-9b96-5731b6d05ffa.roa
File: 0147e107-4a40-3be6-9b96-5731b6d05ffa.roa (raw, json)
Hash identifier: a/RGKQDs+/+1oMd1AAZNaqwZhnSE3dJ0/IBmrGJ9HkU=
Subject key identifier: BC:95:0F:F1:DA:D5:2F:A8:6D:27:20:B0:A7:C6:9C:38:9C:95:32:47
Certificate issuer: /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial: 010D0C9F432858491AA6B0016997E09E8B488380
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/0147e107-4a40-3be6-9b96-5731b6d05ffa.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 6939
IP address blocks: 64.112.33.0/24 maxlen: 32
64.112.34.0/24 maxlen: 32
64.112.35.0/24 maxlen: 32
208.69.100.0/24 maxlen: 32
208.69.101.0/24 maxlen: 32
208.69.102.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 10 Apr 2025 05:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:b0:01:69:97:e0:9e:8b:48:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=a54b3a7a-2286-4d8d-bae7-766d88faed46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:bc:47:f8:b9:b6:fc:bb:31:52:1e:60:4a:
83:89:0e:c2:6e:c7:68:c3:9a:14:89:f7:92:9a:b9:
29:bf:9c:7c:cc:27:6c:a2:ef:e9:1f:d3:0d:bc:ac:
a2:f8:5c:33:49:cc:82:da:cb:a3:22:29:2c:c5:62:
0f:02:a2:3a:fb:fd:5b:70:0b:d8:b0:65:e4:88:e8:
11:90:c9:b1:e6:0b:d0:62:56:a1:03:4d:30:92:49:
1e:c3:68:a1:e9:b3:f4:51:28:ba:b0:b6:25:b2:96:
77:e9:4c:fd:a7:a8:47:f2:bf:5c:b9:35:40:6e:76:
22:b9:a0:c3:27:99:8a:38:9b:83:eb:b5:1d:6b:d6:
28:6b:f2:25:10:b8:ec:e3:42:30:0d:30:35:0c:ed:
67:ce:4b:9a:e4:fb:57:c4:de:10:ea:d7:eb:01:d6:
5d:1c:75:3f:8d:64:1d:f5:03:be:2e:15:42:73:ae:
f0:35:39:9c:22:3d:f6:72:90:73:d2:37:c1:bb:a6:
34:96:c4:ef:87:5c:be:11:40:39:b2:48:ed:50:32:
d5:0e:6e:8e:79:da:23:eb:69:ad:c0:91:df:94:e9:
3d:af:23:63:d6:50:4d:eb:99:73:d9:39:2b:3f:83:
b6:20:7b:6d:0e:45:75:01:c2:75:da:b1:b6:93:f2:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:95:0F:F1:DA:D5:2F:A8:6D:27:20:B0:A7:C6:9C:38:9C:95:32:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/0147e107-4a40-3be6-9b96-5731b6d05ffa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
X509v3 Authority Key Identifier:
keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.33.0-64.112.35.255
208.69.100.0-208.69.102.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:84:4d:cb:d2:c7:8e:f5:c0:d3:8f:95:b9:5f:d3:69:57:7f:
cf:6b:0c:01:84:ee:5f:c1:73:52:aa:9a:ac:42:d8:e7:8b:2c:
66:0c:a7:3c:42:78:92:1f:b8:19:7d:7d:ef:19:dc:b3:2a:05:
ba:59:28:84:b4:46:6d:10:44:7b:52:0c:77:a4:90:e5:b7:57:
90:75:3c:5f:f9:7f:09:08:a8:a2:ec:21:44:a3:97:85:90:cf:
66:cb:2a:5f:ae:2c:e7:7d:c9:76:fa:d9:ce:2a:5f:5c:88:a9:
24:8a:08:3c:70:af:86:c4:52:a6:4c:e0:f3:32:79:d6:a2:00:
1d:cf:a5:ee:7f:3a:c1:30:47:56:c6:45:09:2b:b6:95:6b:0f:
8c:61:f5:77:fd:2a:15:89:76:c7:19:0c:8c:f0:91:00:24:e4:
27:5d:3d:e2:ea:14:b7:07:29:4b:b9:2b:02:b8:1a:50:ec:86:
b8:af:28:60:17:42:c4:69:2a:46:8a:e1:f3:50:2e:15:8e:98:
3a:f4:18:f3:c2:e5:ee:b4:fe:23:ed:8b:47:ce:bb:d4:6d:a5:
47:43:58:5e:a8:0b:a4:57:59:81:e8:7e:f3:b2:de:dc:99:94:
c2:db:37:e8:0d:47:f9:43:90:32:11:7a:e4:13:b2:b5:39:95:
e6:a3:9c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:20:52 2025 by rpki-client