Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a03cc877-9bfd-3ce2-83ab-96499d7afdce.roa
File: a03cc877-9bfd-3ce2-83ab-96499d7afdce.roa (raw, json)
Hash identifier: sDvRbsA70KDzfJvEJMWhKF2Tz5q5CCHN5/fAZe1gadE=
Subject key identifier: EB:6C:FF:E6:C3:C9:EC:19:81:8C:BB:19:F6:4F:B8:37:28:98:17:76
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584902EC36CBF7309B8FC872C2E8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a03cc877-9bfd-3ce2-83ab-96499d7afdce.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 701
IP address blocks: 67.108.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 22:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:36:cb:f7:30:9b:8f:c8:72:c2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=4ce054f0-8911-4c23-ac63-ade8317c0347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:a9:2b:2b:b8:f0:1e:1e:40:fb:c5:7c:f1:
6c:43:ac:1a:fb:08:ba:13:21:16:ee:26:4e:d1:02:
e3:14:bc:03:39:0c:1a:85:fc:0f:dc:75:59:0f:76:
94:93:c0:23:98:62:51:65:55:3b:f8:22:8b:ce:ab:
35:63:4f:81:f2:d1:49:f2:2a:dc:3c:dd:47:56:ce:
bf:fb:5a:08:48:5e:05:63:d0:99:35:3f:cc:a0:5d:
52:53:30:db:3a:c0:e2:6c:b3:57:71:2d:19:e1:7a:
f3:30:82:ab:94:e6:10:8d:5a:71:ba:73:36:d2:cd:
62:c0:1a:6b:13:b9:1b:56:38:34:85:c5:6e:f2:76:
4b:08:03:40:77:73:b0:71:36:d8:f9:83:7b:cf:f7:
eb:86:35:90:51:25:16:ce:a0:24:22:0d:32:bb:01:
17:a5:12:46:98:d8:9d:0e:2a:30:04:e1:d9:62:c2:
26:0d:cd:84:78:65:84:9b:41:4b:9b:65:29:1b:c0:
07:fb:be:ce:79:d3:fb:1f:91:32:d4:92:1b:f8:1d:
c5:2b:d0:7d:bc:52:bf:cc:5a:ff:91:b6:07:35:55:
dd:1c:3b:11:5b:84:af:e7:a1:5b:4d:f6:14:49:8a:
5d:b3:f5:d2:16:d1:32:b7:ca:96:55:93:f0:24:b3:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6C:FF:E6:C3:C9:EC:19:81:8C:BB:19:F6:4F:B8:37:28:98:17:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a03cc877-9bfd-3ce2-83ab-96499d7afdce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
67.108.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:95:cf:1a:b6:33:8c:08:b8:c1:eb:9d:c9:38:41:c4:4e:33:
70:a2:fd:34:9c:65:ed:92:1f:4f:85:cc:10:da:fb:5d:dd:44:
2b:90:37:6e:62:18:d7:14:3c:a4:b5:88:f8:f5:bb:fb:46:4a:
9c:cd:1e:17:01:1c:9c:66:b1:bf:ea:6a:c2:d6:c9:28:f0:fa:
75:7a:8d:d4:d9:19:35:fa:76:a3:82:3b:ed:40:0f:20:da:f3:
a4:a6:3f:6e:15:7b:53:09:e2:44:ff:54:7f:71:64:c5:7f:fb:
e1:20:dd:81:9d:a8:66:a3:5a:a5:a9:31:cd:11:d6:3a:1f:21:
20:0b:5a:27:be:8e:f0:3c:19:a4:11:9a:95:e5:f0:99:15:b7:
57:3c:6f:52:c6:c4:08:50:08:db:9d:d5:08:5a:39:1d:fc:49:
61:2a:a5:52:de:8a:9a:46:5e:35:f5:14:65:8f:e6:5e:2a:85:
d0:55:a7:44:d4:40:8d:35:26:5a:11:7c:09:ec:74:84:38:29:
a5:5e:71:22:04:14:0d:ac:05:9a:fc:8b:24:33:fa:ec:94:8d:
85:61:ec:28:00:b4:b8:62:cf:2b:0e:9c:91:1b:b3:1e:22:0c:
d7:ef:4b:6b:1c:c9:b2:34:ca:6e:8b:8b:30:4d:57:1c:b5:13:
21:1d:43:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:25:53 2025 by rpki-client