Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/83a0df85-0c25-3b34-a72a-c4a1aa99cfc2.roa
File: 83a0df85-0c25-3b34-a72a-c4a1aa99cfc2.roa (raw, json)
Hash identifier: zwmxPLAYV0iZKA+KqUvtRJ72f6wEilPOr9+JbFYMV2s=
Subject key identifier: 45:4D:66:39:E7:EC:AD:A3:A3:46:8A:E2:D2:09:96:82:F5:2C:84:78
Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial: 010D0C9F43285843DBD3785FC26B2ADF32EF3EC0
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/83a0df85-0c25-3b34-a72a-c4a1aa99cfc2.roa
Signing time: Sun 12 Nov 2023 02:00:16 +0000
ROA not before: Sun 12 Nov 2023 02:00:16 +0000
ROA not after: Sat 10 Feb 2024 02:00:16 +0000
asID: 23467
IP address blocks: 162.247.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 17:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:db:d3:78:5f:c2:6b:2a:df:32:ef:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Validity
Not Before: Nov 12 02:00:16 2023 GMT
Not After : Feb 10 02:00:16 2024 GMT
Subject: CN=a17a8d53-c668-495c-969d-e6ab679e753c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:10:b7:4d:b3:fc:80:e5:57:87:ac:b8:08:
c2:9c:06:31:4e:21:41:28:e5:da:2d:b3:68:5a:51:
15:14:b8:ec:4d:31:df:a9:83:d3:16:e2:16:81:97:
a8:16:82:05:86:43:81:e9:e2:d8:43:ca:a0:f4:af:
f9:ef:46:58:cb:e0:ed:cb:82:e0:c8:20:c4:cb:33:
b7:f2:7b:6a:e5:1e:1b:8f:24:56:0d:9f:90:68:43:
c5:a9:7b:e9:73:d4:af:d8:d5:b0:cc:a9:13:73:92:
01:21:32:e4:6a:89:4e:74:db:91:df:ea:7c:b1:19:
05:50:ee:56:1c:7b:08:41:15:0d:59:75:52:0b:e6:
a5:ae:8d:0c:61:b0:fe:5a:10:16:80:0c:51:65:4d:
0e:da:ed:b6:31:98:a8:3e:61:73:d6:6e:7f:16:8f:
49:af:dd:a6:f6:cc:41:a0:5c:85:18:59:f8:1d:74:
d1:4a:06:3e:0b:26:20:d6:a9:29:b8:a1:ce:9a:93:
56:9a:26:aa:8d:f1:0c:72:09:69:f9:4f:22:9e:ab:
cc:32:6b:59:8c:ac:05:66:70:ef:5e:6d:f9:53:29:
69:98:47:bd:e3:73:f9:e7:ea:26:d8:78:dc:92:b3:
26:76:60:08:ff:e0:1c:fc:68:b8:e0:01:89:ae:8d:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4D:66:39:E7:EC:AD:A3:A3:46:8A:E2:D2:09:96:82:F5:2C:84:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/83a0df85-0c25-3b34-a72a-c4a1aa99cfc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
X509v3 Authority Key Identifier:
keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
sbgp-ipAddrBlock: critical
IPv4:
162.247.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:82:6f:02:0f:68:10:49:0f:06:15:0a:72:f0:42:ca:2f:b4:
e2:8b:5a:a8:4e:8a:07:39:c5:08:3c:fe:c8:76:49:62:56:ed:
b4:30:d4:ab:c5:77:47:10:b7:80:6b:05:1e:b7:09:16:69:8e:
6e:64:b0:b0:54:d1:80:f7:c7:7d:f0:c9:72:8f:e3:df:d9:44:
cd:18:83:67:4c:e1:09:03:ad:3d:ba:db:5c:77:f1:59:4a:42:
a3:23:62:67:57:87:87:b6:fa:a8:7b:4e:73:97:72:99:88:1c:
a6:83:3c:b9:cf:22:08:4d:de:b7:71:40:74:6c:64:6c:2a:23:
5a:bf:64:d7:46:8d:a8:77:52:f9:d7:83:9e:bb:e8:60:25:c3:
34:00:06:03:5e:80:ba:ac:f1:c3:ab:ec:05:eb:5f:94:74:b0:
fe:7f:c7:17:24:69:b9:c6:20:86:2b:7c:94:55:44:47:a7:89:
80:2b:20:04:6d:9b:7f:6f:95:62:07:32:a5:50:61:09:bf:47:
74:89:1f:27:7b:08:b4:a0:39:5e:67:41:82:a5:bc:ab:b8:fa:
f5:f8:e2:f7:09:4c:f1:b0:e0:e2:4c:98:84:1a:b5:39:c6:74:
55:c6:a4:b8:cf:d9:da:82:1d:90:f1:cb:e0:2a:85:97:8b:b6:
8a:4d:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 21:34:00 2024 by rpki-client on console-ams.rpki-client.org