Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/94aa53ed-e0b6-4cb6-946e-e09f4a4597fe/3c85b34b-69a6-3d7a-a3d8-89a324035faa.roa
File: 3c85b34b-69a6-3d7a-a3d8-89a324035faa.roa (raw, json)
Hash identifier: HyIKYrvLC0SIis5TmTcVylJD1DD2jjJFHx+2+dbLWRw=
Subject key identifier: BD:87:BB:DA:1B:ED:48:1E:DB:36:7A:BC:6A:67:9D:AE:1C:AE:F0:D7
Certificate issuer: /CN=94aa53ed-e0b6-4cb6-946e-e09f4a4597fe
Certificate serial: 010D0C9F43285844D5AFCDA0758C013BA56D5480
Authority key identifier: 19:91:B6:1C:CD:22:58:89:87:7C:0B:A1:96:91:55:9D:37:44:2B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/94aa53ed-e0b6-4cb6-946e-e09f4a4597fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/94aa53ed-e0b6-4cb6-946e-e09f4a4597fe/3c85b34b-69a6-3d7a-a3d8-89a324035faa.roa
Signing time: Fri 09 Feb 2024 14:00:30 +0000
ROA not before: Fri 09 Feb 2024 14:00:30 +0000
ROA not after: Thu 09 May 2024 13:00:30 +0000
asID: 19224
IP address blocks: 172.98.0.0/22 maxlen: 24
204.10.32.0/22 maxlen: 24
192.210.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 21:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d5:af:cd:a0:75:8c:01:3b:a5:6d:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94aa53ed-e0b6-4cb6-946e-e09f4a4597fe
Validity
Not Before: Feb 9 14:00:30 2024 GMT
Not After : May 9 13:00:30 2024 GMT
Subject: CN=456226f1-c122-4d5e-897e-fd34547f9db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:90:10:66:2d:d9:25:4d:13:62:bc:d8:64:
52:9e:9f:fb:37:65:4f:c0:39:71:6e:16:03:98:93:
0b:3f:c6:09:1f:c7:80:75:9b:48:89:82:40:60:b8:
26:4d:90:71:65:c6:2d:46:25:60:64:bd:af:51:97:
9d:a4:b5:fd:74:57:96:50:8b:38:b6:8f:7e:6a:94:
98:9b:6f:8f:00:af:a6:b1:ff:6e:75:9b:93:4b:ab:
54:7e:53:36:cd:d2:c0:12:af:39:1b:55:26:32:fd:
f2:39:40:f7:5b:ef:a1:45:a5:b4:0d:e4:16:bf:fb:
ed:76:da:65:a5:e3:d6:69:69:b4:66:01:0e:47:39:
14:ac:e8:4c:4e:b9:80:4b:d5:82:9c:95:27:04:c1:
45:e1:f5:84:81:1e:59:43:b2:26:a4:de:4c:80:ff:
73:6b:54:5d:71:85:ee:41:14:50:10:40:16:49:d7:
7f:03:5d:90:a4:eb:fd:84:4b:10:02:6f:73:d7:8e:
b4:72:26:3e:24:48:28:8a:3a:80:43:bc:63:f6:f9:
9b:62:e4:de:50:4a:38:6d:d5:35:88:a3:ce:a8:d3:
ad:da:02:b5:e8:b0:b5:6b:bc:c1:8c:9b:c0:69:4e:
f0:24:4b:91:14:35:44:21:2c:a3:97:e0:0d:8b:8d:
5b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:87:BB:DA:1B:ED:48:1E:DB:36:7A:BC:6A:67:9D:AE:1C:AE:F0:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/94aa53ed-e0b6-4cb6-946e-e09f4a4597fe/3c85b34b-69a6-3d7a-a3d8-89a324035faa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/94aa53ed-e0b6-4cb6-946e-e09f4a4597fe/94aa53ed-e0b6-4cb6-946e-e09f4a4597fe.crl
X509v3 Authority Key Identifier:
keyid:19:91:B6:1C:CD:22:58:89:87:7C:0B:A1:96:91:55:9D:37:44:2B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/94aa53ed-e0b6-4cb6-946e-e09f4a4597fe.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.0.0/22
192.210.0.0/24
204.10.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:83:3a:76:9c:a4:d6:33:33:73:4e:47:1c:1e:a0:55:dc:15:
4d:a4:ac:da:e1:43:d2:c7:8f:73:30:9b:b5:70:5b:53:7b:69:
98:87:21:74:d1:ac:ef:79:e3:d7:bf:45:34:2b:6c:5a:16:c4:
f4:e8:14:9c:21:39:49:e0:fd:39:74:b3:b4:72:73:b0:75:f0:
c3:e2:e5:28:56:bf:bd:9b:06:44:06:5b:e9:24:06:01:01:29:
8a:3d:2c:8a:c1:11:08:19:cb:8d:f7:2b:21:d8:3a:28:4d:ca:
b3:57:90:3f:18:a6:45:f6:bb:21:dd:fa:5a:bd:89:f3:72:23:
fa:f5:49:02:dc:03:18:17:62:6d:15:ea:55:2d:14:31:7f:01:
41:b5:ee:80:be:40:a9:15:48:58:20:1f:03:9d:e3:2c:12:05:
4f:3c:ae:c2:b3:c7:9d:14:6a:4d:36:60:52:64:09:61:bf:a5:
0f:fd:83:19:14:f7:c7:9b:90:5c:d2:32:e7:1e:0e:52:6c:88:
39:9c:fe:da:d9:b9:11:00:ee:ee:29:58:58:a2:d9:6b:47:f5:
5d:78:1b:ff:f8:b9:9d:08:5f:be:eb:af:ac:d8:51:bc:98:e2:
f6:70:98:b3:5c:31:72:7e:b9:b3:3d:59:6a:e4:9e:c9:94:10:
ff:87:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 23:44:43 2024 by rpki-client on console-fra.rpki-client.org