Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/e8e68dd8-6eb2-3981-bad2-ed1c4568edbd.roa
File: e8e68dd8-6eb2-3981-bad2-ed1c4568edbd.roa (raw, json)
Hash identifier: IXxYaLfn0gnbnVJa+qhZS8e8rgYyDRfUhOqx/0R11e0=
Subject key identifier: B5:54:E7:A0:C0:C4:1D:54:84:12:08:1C:16:AC:B9:66:6F:BE:84:90
Certificate issuer: /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial: 010D0C9F43285842C2EB6B95767E69D185B76C90
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/e8e68dd8-6eb2-3981-bad2-ed1c4568edbd.roa
Signing time: Thu 03 Aug 2023 11:06:25 +0000
ROA not before: Thu 03 Aug 2023 11:06:25 +0000
ROA not after: Wed 01 Nov 2023 11:06:25 +0000
asID: 10753
IP address blocks: 170.205.40.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c2:eb:6b:95:76:7e:69:d1:85:b7:6c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Validity
Not Before: Aug 3 11:06:25 2023 GMT
Not After : Nov 1 11:06:25 2023 GMT
Subject: CN=a2c38abb-5aae-481c-9818-84dbaa915302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:27:da:27:53:40:7e:35:0b:07:49:88:c1:
50:0e:98:74:ae:c6:8d:b6:42:6e:70:f9:85:33:22:
18:67:79:4f:2f:06:44:3e:ae:77:85:12:8d:69:35:
ec:76:0f:fa:d5:98:9f:c6:67:56:56:49:95:2e:ea:
5d:e1:16:fe:19:49:66:a6:13:0e:8e:2b:55:36:0b:
3b:5c:fd:2b:a3:c8:9d:00:ca:40:ba:43:fa:0d:c2:
aa:5f:8f:f9:43:3d:d6:38:a7:3d:c2:ee:23:6e:10:
7a:b2:bb:39:a5:ed:03:5a:3d:a4:86:84:85:8a:6a:
16:33:f4:51:4e:14:8e:28:e4:97:70:45:d5:57:40:
aa:b4:8d:7f:84:0c:89:81:32:42:48:8c:05:f9:c3:
e4:59:27:7f:29:15:bb:a8:5f:69:a2:58:a3:67:b2:
c3:cc:51:60:c2:e2:19:d8:57:44:a6:7f:0d:85:31:
4d:f0:04:51:c9:76:48:c9:fc:86:a8:4d:76:29:95:
2e:26:3a:38:57:f8:60:25:09:d5:1a:80:b3:b3:6d:
22:ec:4a:a7:c2:d3:c0:4d:95:72:1e:43:78:f8:af:
4f:fe:8f:5e:d0:5c:14:c1:bf:19:45:bd:7a:b9:29:
49:0a:00:1e:6f:87:52:ba:d4:da:ca:61:05:d4:fe:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:54:E7:A0:C0:C4:1D:54:84:12:08:1C:16:AC:B9:66:6F:BE:84:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/e8e68dd8-6eb2-3981-bad2-ed1c4568edbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
X509v3 Authority Key Identifier:
keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:68:88:cb:a2:d3:22:41:66:07:1a:c5:8c:df:c6:24:79:fd:
66:18:a2:da:eb:a6:5f:64:49:0a:e5:81:dc:39:97:ba:70:31:
55:b3:9a:de:0c:25:af:f0:29:01:6a:66:cd:d4:9b:06:24:ed:
2b:4a:c1:d3:7d:d2:36:07:06:79:36:3a:db:49:d3:ea:3f:02:
de:1d:39:ea:fb:df:1a:45:bd:7f:81:9b:87:7a:92:52:dd:e7:
cc:32:b8:52:d9:a1:47:a3:27:a3:f8:0e:48:ae:bd:19:f5:9d:
67:8f:1c:b7:0c:e0:ae:a2:f2:0f:7c:0d:70:75:c1:7c:54:c0:
8f:03:e6:9e:d5:49:21:a0:05:1e:10:cb:36:bb:dc:ef:80:c9:
63:de:ab:df:1b:1b:8c:8d:cb:a7:07:54:ca:ce:85:b9:3d:4e:
0d:b3:66:8c:64:04:ba:2d:d2:c6:64:56:6d:7b:7f:ee:f8:11:
ed:c1:2e:45:15:a1:74:2e:f7:09:b7:ef:e1:d7:86:e2:8d:d7:
62:32:c8:46:15:e6:44:2c:9d:63:cb:90:97:ea:24:50:83:73:
bf:13:0e:ce:dc:62:78:7d:d2:65:cc:b1:f6:46:b5:9e:07:12:
11:bc:bf:a1:3b:bd:6e:11:b2:53:ea:78:21:be:5b:14:d6:87:
9e:1a:75:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 16:43:38 2023 by rpki-client on console-fra.rpki-client.org