Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/5dcbda20-89cc-3de2-a3a9-d9af68878af7.roa
File: 5dcbda20-89cc-3de2-a3a9-d9af68878af7.roa (raw, json)
Hash identifier: 2dwJLhVjgIyQ8W//qbkKKVvin0QcOIUoOa56DhC/ZA4=
Subject key identifier: A9:AF:97:80:B7:9A:CF:16:83:15:C6:5A:60:0B:DA:AE:EB:B1:21:B0
Certificate issuer: /CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71
Certificate serial: 010D0C9F4328584A2AFA116F4199D676FF1F4A80
Authority key identifier: 83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/5dcbda20-89cc-3de2-a3a9-d9af68878af7.roa
Signing time: Thu 12 Jun 2025 15:08:34 +0000
ROA not before: Thu 12 Jun 2025 15:08:34 +0000
ROA not after: Wed 10 Sep 2025 15:08:34 +0000
asID: 401770
IP address blocks: 103.65.228.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 13 Jun 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:2a:fa:11:6f:41:99:d6:76:ff:1f:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71
Validity
Not Before: Jun 12 15:08:34 2025 GMT
Not After : Sep 10 15:08:34 2025 GMT
Subject: CN=7360398e-1aee-4cd1-9978-946207356d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b2:77:15:21:ed:1d:9e:aa:50:a4:54:44:76:
c9:4d:bd:63:ba:e2:05:36:e9:b7:8f:41:ff:04:4e:
8e:ff:d5:75:e5:b4:41:ae:93:df:10:18:fc:f2:d8:
96:97:83:50:2e:b9:25:1e:2b:0e:d3:ab:1b:b3:e6:
12:a9:c9:4b:23:4f:d9:3a:3d:06:dc:41:87:f0:a8:
85:97:60:44:7c:ef:6e:35:72:91:34:73:55:aa:5e:
48:e4:42:30:c4:f6:be:07:63:69:ea:6d:07:61:d4:
d0:08:c7:12:94:d2:9d:b6:31:7a:3a:e6:87:6f:a6:
f8:6c:49:5b:b3:a0:85:c8:06:1b:4a:2c:5e:c8:ba:
61:fc:e1:41:3c:a9:57:d0:29:02:ad:42:8a:6f:3d:
f6:12:9e:36:c2:3c:e7:00:2f:7a:39:fa:c2:01:d3:
4a:4c:3e:8e:cb:2d:7f:2d:03:ba:df:49:44:c0:3b:
f8:c8:4f:29:78:95:52:ab:c0:a7:5f:03:d3:91:10:
d8:32:30:40:82:06:27:32:90:0b:d5:39:26:e3:14:
a0:bb:31:66:5f:db:68:ef:b8:99:5a:ef:45:f7:80:
7c:bc:19:db:07:2c:27:8a:97:46:0f:ca:16:a7:3f:
c4:3e:57:23:19:48:5c:f5:59:f0:d0:c9:e7:6d:32:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AF:97:80:B7:9A:CF:16:83:15:C6:5A:60:0B:DA:AE:EB:B1:21:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/5dcbda20-89cc-3de2-a3a9-d9af68878af7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl
X509v3 Authority Key Identifier:
keyid:83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer
sbgp-ipAddrBlock: critical
IPv4:
103.65.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:68:14:91:97:7c:c5:0a:0f:71:1f:41:1f:d9:f0:c5:fc:ad:
c4:0d:21:70:63:5c:d4:ec:35:6d:a4:24:5e:4c:bd:c6:a0:65:
bf:9a:ee:09:c8:af:17:32:3c:fe:35:6e:e7:f2:18:7f:94:be:
27:dc:55:b9:1a:0f:a7:8a:66:9d:a3:0c:80:a2:eb:b7:4a:41:
7f:3b:73:7e:7c:11:8a:fa:81:73:60:1b:bd:d6:4a:90:52:b1:
11:89:61:f1:0a:f5:33:4c:00:eb:f8:c4:43:b0:41:a1:3e:b2:
95:ff:57:db:b1:4c:a5:44:73:30:07:fb:c6:d3:85:59:7f:72:
b7:d5:34:9d:21:05:d0:25:90:bf:03:8e:67:6c:1f:3d:05:9d:
2e:1f:f8:4a:82:74:01:94:75:aa:7b:58:fd:45:ea:e9:31:ce:
db:51:65:a6:8a:4d:be:a0:a0:bc:77:7b:4d:bf:83:a2:01:85:
19:b3:10:8e:ea:94:f2:1a:86:41:62:b1:c1:d0:a3:42:25:96:
4f:6c:40:92:4f:cc:65:03:0c:c2:21:2c:4e:4c:a7:d4:5f:db:
ed:1e:cf:9c:18:a5:26:c2:2a:76:50:c4:65:41:4f:60:2f:d1:
3c:8f:97:c0:6c:78:71:21:fd:49:47:26:8e:e1:e6:d9:cc:b4:
04:8b:72:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:30:32 2025 by rpki-client