Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/a5a436af-bf2b-3d12-8e01-af72db905851.roa
File: a5a436af-bf2b-3d12-8e01-af72db905851.roa (raw, json)
Hash identifier: oT3Ib8By5CignI9AASM+qGYt8dNnlZUNMakQrkttvxY=
Subject key identifier: 17:02:D3:8B:B2:16:E5:8F:5C:A6:1B:3C:1D:77:B7:83:90:69:E5:E6
Certificate issuer: /CN=d3de683a-04b1-4e1c-94c5-cb45e983323d
Certificate serial: 010D0C9F43285845B92A509A8272F77A8D021300
Authority key identifier: 21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/a5a436af-bf2b-3d12-8e01-af72db905851.roa
Signing time: Wed 01 May 2024 01:35:53 +0000
ROA not before: Wed 01 May 2024 01:35:53 +0000
ROA not after: Tue 30 Jul 2024 01:35:53 +0000
asID: 396295
IP address blocks: 163.123.216.0/24 maxlen: 24
128.254.220.0/24 maxlen: 24
2602:fd02::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 01 May 2024 02:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:b9:2a:50:9a:82:72:f7:7a:8d:02:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3de683a-04b1-4e1c-94c5-cb45e983323d
Validity
Not Before: May 1 01:35:53 2024 GMT
Not After : Jul 30 01:35:53 2024 GMT
Subject: CN=944b712d-4e7d-4551-aa2a-e1f76975639e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:a5:45:4b:86:a8:a3:0a:b4:20:19:0b:ae:
a1:c8:40:89:73:da:8b:04:c4:36:97:ef:4c:bc:ca:
3d:d0:d3:fd:10:eb:88:8d:e7:18:8a:9e:ea:e8:f1:
82:05:33:80:03:3d:22:3f:2c:5a:99:41:70:15:0f:
30:3f:53:f3:0b:12:05:e2:b6:57:0a:de:54:f7:57:
fe:0c:6b:12:ea:81:04:fa:08:25:5e:25:89:dd:cf:
b4:ac:10:d2:76:83:b4:9f:b8:a2:11:4d:67:4c:b1:
2a:5d:c9:d9:4f:01:30:a4:02:e2:84:a8:21:20:02:
64:7e:90:9e:34:f4:05:3e:0f:f8:ba:70:af:7d:36:
ec:34:94:84:69:5e:fa:42:76:4d:d2:62:1e:47:8e:
2f:01:46:00:bd:01:6c:06:a7:bc:f9:42:67:74:b1:
f5:27:5e:b7:79:ea:b6:f2:10:61:9d:ff:f7:bd:d2:
97:1c:5c:40:12:3e:e6:73:a0:82:0a:d0:14:ed:47:
e0:a5:46:d9:cb:d1:33:98:ab:68:ea:50:e9:8f:cf:
a6:63:af:95:cb:ba:c8:1d:9d:96:af:5b:ed:15:98:
36:0f:0c:75:f4:36:f9:46:79:e8:90:9e:d1:31:e5:
37:7e:72:2c:45:4f:f9:c7:3f:77:75:dd:b0:dd:90:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:02:D3:8B:B2:16:E5:8F:5C:A6:1B:3C:1D:77:B7:83:90:69:E5:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/a5a436af-bf2b-3d12-8e01-af72db905851.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.crl
X509v3 Authority Key Identifier:
keyid:21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.220.0/24
163.123.216.0/24
IPv6:
2602:fd02::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:a2:8d:83:9c:2f:b1:02:6d:7e:fc:95:b0:f5:e8:3d:99:cc:
52:c4:cc:75:f6:b0:24:69:a6:cd:81:94:1b:84:b6:f9:2c:85:
ac:5f:40:b1:d2:c9:cd:2e:17:72:90:af:ce:43:ae:c2:43:ab:
68:c9:be:26:2c:c0:e0:04:1e:0a:9a:a9:44:4d:92:e8:94:b4:
38:54:0d:e8:1f:21:c9:09:0a:78:1d:4c:61:5b:31:5a:a4:22:
84:83:85:33:3b:0c:ac:90:25:60:cb:22:cb:f8:fb:7a:04:bf:
e2:13:53:dd:16:63:e7:fc:f0:84:eb:d0:f1:eb:15:62:0c:16:
65:2d:8a:86:5b:a1:c4:7d:ae:76:e3:76:df:9e:73:ed:9d:86:
4a:c4:37:2c:0c:43:87:e9:ce:cf:05:0c:dc:3f:93:09:f5:7f:
1e:8f:fb:bf:b8:dd:35:ba:34:c8:78:62:d0:69:9a:28:a6:a1:
c3:c6:1c:6d:0a:c0:b9:19:74:b8:fd:71:e0:ca:2c:11:de:1a:
e5:84:e9:77:50:fc:c7:af:9a:e2:9f:b8:b0:01:cc:b9:09:0b:
ab:36:60:2a:06:68:33:55:11:28:33:79:59:26:27:46:5c:16:
9a:12:d4:b4:a8:70:9d:8a:a1:8b:12:df:f1:ee:bd:c4:a4:00:
dc:18:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:15 2024 by rpki-client on console-fra.rpki-client.org