Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/5852ea04-56e5-3f87-b742-1800a2843fb3.roa
File: 5852ea04-56e5-3f87-b742-1800a2843fb3.roa (raw, json)
Hash identifier: 1WKR+zH9aGXZH9meQwFvlNPTUO8sEcXtTWGNk5BYJSc=
Subject key identifier: 0F:0C:AF:D1:A7:06:40:4B:AB:94:D4:C9:32:56:ED:81:E1:8F:DC:6C
Certificate issuer: /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
Certificate serial: 010D0C9F43285843303883FFF7FE980A40D87C00
Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/5852ea04-56e5-3f87-b742-1800a2843fb3.roa
Signing time: Mon 11 Sep 2023 14:44:52 +0000
ROA not before: Mon 11 Sep 2023 14:44:52 +0000
ROA not after: Sun 10 Dec 2023 15:44:52 +0000
asID: 30938
IP address blocks: 162.251.0.0/23 maxlen: 24
162.251.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:30:38:83:ff:f7:fe:98:0a:40:d8:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
Validity
Not Before: Sep 11 14:44:52 2023 GMT
Not After : Dec 10 15:44:52 2023 GMT
Subject: CN=553866d9-48e8-4a90-9945-3d7d8d92addd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:8c:da:99:db:0d:2d:30:33:35:79:70:d7:
03:63:28:61:a8:62:c5:c8:67:b1:0b:fa:01:5b:78:
32:68:87:9e:34:3c:39:d1:9b:ac:2a:d6:a7:a8:cb:
43:c7:c0:2c:b7:73:30:fe:21:01:59:c1:63:88:46:
34:e8:a2:6d:c2:b2:34:2a:34:68:0b:62:17:15:a8:
cb:3a:be:73:3c:4b:07:ec:9b:27:5c:7c:5f:32:82:
4a:79:3c:3c:0a:29:bb:fd:06:54:9d:14:f6:0f:bc:
40:ed:e4:fc:26:ed:35:d8:fb:7f:b8:8e:cb:bb:ae:
79:09:6b:e4:e1:65:88:7c:7e:9a:1b:2a:d9:1c:31:
f8:52:e4:37:64:09:ea:49:c4:9c:9c:43:10:57:b7:
6b:42:05:93:13:cd:d7:b5:6a:0d:2e:4c:78:7d:1a:
ba:0e:35:fe:eb:b5:5c:ef:35:a0:37:06:d1:f4:54:
39:13:e1:30:72:de:15:b9:f4:13:68:2c:0c:53:3b:
31:0e:2e:3c:4d:ab:85:91:e8:dc:ff:04:5d:e1:92:
3d:f9:df:24:40:78:14:b8:8f:3a:e2:b6:c9:8e:d6:
d9:3f:d7:22:07:3c:2e:63:ea:97:9a:a2:bd:d6:af:
52:c1:b1:06:9a:05:af:4d:83:df:c5:1c:d1:71:34:
47:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0C:AF:D1:A7:06:40:4B:AB:94:D4:C9:32:56:ED:81:E1:8F:DC:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/5852ea04-56e5-3f87-b742-1800a2843fb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl
X509v3 Authority Key Identifier:
keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
sbgp-ipAddrBlock: critical
IPv4:
162.251.0.0/23
162.251.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:de:07:96:95:1c:67:99:e5:b0:ff:33:84:bc:5b:eb:a6:36:
c9:f8:34:96:34:82:e3:e2:f2:4b:27:e4:89:aa:f5:26:31:c8:
e2:5a:35:26:b2:f4:26:c8:01:1d:5c:c8:a0:1b:63:d9:00:a8:
67:67:14:bc:76:88:52:7b:5c:a2:dd:56:c3:d9:da:fc:a0:ca:
fb:c8:c4:b0:fd:db:6b:7a:e1:a8:fd:db:cd:0a:44:34:92:34:
51:c1:69:38:cf:a8:cb:3f:6c:18:85:89:f4:29:63:b4:aa:16:
06:84:37:89:34:48:27:13:da:18:e9:e7:15:1f:49:95:5a:64:
cd:f8:4b:1d:da:8b:bc:c6:72:5a:40:77:6d:bb:14:3d:ae:29:
05:04:4f:fc:dd:44:d6:4b:cd:79:08:06:23:8f:d7:b1:55:60:
7f:c0:50:0e:44:4c:9c:e3:59:08:64:7c:93:2a:37:cb:2f:22:
a1:24:20:99:45:32:d1:ae:db:72:0b:d5:f9:e0:35:93:8e:55:
23:25:c4:41:bd:ba:e7:60:b1:f5:59:09:1f:5a:31:e7:64:0a:
59:99:ba:e6:1c:34:e1:b7:00:f6:0c:17:f8:9e:58:fd:d6:55:
8b:ca:40:01:52:19:70:e9:15:11:ad:87:db:35:d0:b3:a3:ab:
50:97:53:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 17:44:48 2023 by rpki-client on console-fra.rpki-client.org