Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cac7dbed-4f27-3e57-a609-6ffb8f4b5996.roa
File: cac7dbed-4f27-3e57-a609-6ffb8f4b5996.roa (raw, json)
Hash identifier: qjK0+5WAGRT9HQmDx4VmCQ/lGP0mde4WiiL8VzIUWQ4=
Subject key identifier: 30:30:FF:2F:C2:BC:E1:57:D0:54:EF:4B:84:4F:0A:92:22:D2:F9:68
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584555FD8834AD4D57EB3F2119C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cac7dbed-4f27-3e57-a609-6ffb8f4b5996.roa
Signing time: Tue 26 Mar 2024 13:00:35 +0000
ROA not before: Tue 26 Mar 2024 13:00:35 +0000
ROA not after: Mon 24 Jun 2024 13:00:35 +0000
asID: 11232
IP address blocks: 137.22.32.0/19 maxlen: 19
165.23.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Wed 08 May 2024 13:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:55:fd:88:34:ad:4d:57:eb:3f:21:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Mar 26 13:00:35 2024 GMT
Not After : Jun 24 13:00:35 2024 GMT
Subject: CN=a52ca2cc-ed9e-4a92-968d-9c9a0bb24538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:0e:c2:85:8b:dd:e1:e3:71:c8:7a:2d:d5:
1e:39:c4:6d:b2:cf:3c:ab:8e:e6:86:2c:ec:9f:6f:
5c:9e:f3:58:bb:99:5c:46:06:00:9a:3d:da:15:2b:
a8:42:74:44:88:25:a2:cd:52:00:9f:01:87:8a:54:
ca:25:44:ab:49:dd:48:46:67:d1:c0:cc:11:c5:31:
0b:12:f0:d1:ca:79:42:eb:2c:2c:57:fe:d1:f0:6b:
ed:71:b8:5a:04:aa:4e:f1:cd:15:71:10:33:a3:c3:
aa:ff:cb:48:bf:d3:4e:e4:19:a2:aa:c8:d2:4a:ac:
3b:65:e8:3e:b5:7d:0e:3b:a5:21:2f:a4:11:e6:0e:
86:fc:47:7a:c3:6f:39:02:cd:78:7e:50:db:fd:14:
98:ed:5c:99:4a:9a:81:49:2a:e2:e6:71:f8:13:d1:
2e:eb:8c:ae:24:a4:b0:76:de:cc:08:6d:db:57:35:
62:42:19:bf:98:6f:27:ed:ff:cb:0e:cb:a6:62:9e:
af:03:f6:54:ff:52:70:04:d7:86:85:11:9c:d3:bb:
e9:0d:0d:7e:22:69:f4:36:22:fc:1b:45:b0:d9:2c:
31:53:93:3e:d9:9b:f6:c5:1a:18:2e:78:81:48:88:
6d:ef:e9:73:3a:a3:05:ca:a3:dc:5c:e9:66:f4:53:
25:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:30:FF:2F:C2:BC:E1:57:D0:54:EF:4B:84:4F:0A:92:22:D2:F9:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cac7dbed-4f27-3e57-a609-6ffb8f4b5996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
137.22.32.0/19
165.23.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:f2:4a:1a:80:25:d9:2c:c7:ef:72:05:c9:e8:78:b2:10:94:
bd:66:2e:25:be:13:2c:2e:66:47:be:e3:72:22:c1:83:69:78:
bd:89:e0:9f:cf:61:50:1f:83:bd:2a:27:24:88:93:56:bf:f4:
5c:2f:b6:7d:1c:07:ac:26:60:07:c3:82:e2:67:a0:a5:86:c6:
f9:fd:d5:92:fe:8f:64:ff:e3:f0:bc:e4:90:bb:78:31:ef:52:
5a:05:d5:1b:4d:ab:11:53:2e:70:6a:f5:cf:0c:a3:52:d6:ad:
c2:1e:45:85:cf:2e:ee:93:d2:02:0b:f0:41:98:29:ad:26:f5:
64:19:19:58:43:98:07:39:8a:b1:51:34:fd:d4:66:c4:bc:5a:
9d:08:72:50:d0:c3:01:f1:b1:69:44:ab:50:8b:b3:92:27:c8:
b6:0c:ab:de:7b:2d:d8:3a:75:d6:02:68:8b:2c:c0:6d:98:aa:
d3:e5:0d:48:19:c5:9d:db:f8:27:13:27:2c:fc:5d:63:11:88:
3a:0f:7a:5d:da:c3:b1:c5:0c:d8:51:fe:a5:91:23:a3:3f:e3:
a9:08:4f:1f:39:06:90:3b:b7:1e:95:6e:e4:94:db:e0:7d:85:
98:4b:d9:8f:b0:87:6c:f6:4b:0d:db:8c:bb:06:dc:73:db:cb:
05:82:0d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:42:13 2024 by rpki-client on console-ams.rpki-client.org