Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/da5c88e6-b7de-3b61-b783-acb2d5baa069.roa
File: da5c88e6-b7de-3b61-b783-acb2d5baa069.roa (raw, json)
Hash identifier: 5fDqHxnfH9aA3UzbnDRePTx/G1X0UIJk0XOb5HE5kS8=
Subject key identifier: 0E:76:CC:EA:75:63:D0:3C:67:0D:03:B0:5A:BC:B9:8D:AA:60:F4:65
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F432858430A0681FCA8D7F583AF2C2B20
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/da5c88e6-b7de-3b61-b783-acb2d5baa069.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 208.117.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:06:81:fc:a8:d7:f5:83:af:2c:2b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8bf4ac02-a347-495c-84e2-c7968cc80862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:00:d0:7b:f0:aa:96:85:bc:33:b5:fc:cd:
ba:e4:83:3c:02:e4:9c:01:41:34:0e:a2:54:64:d5:
6f:c2:6e:eb:40:1a:1d:4c:75:6b:c8:e5:2e:41:8f:
4b:83:1f:03:77:32:0e:73:39:4a:74:e2:9e:4e:02:
60:b6:22:1c:8c:3e:9e:e7:48:d2:d1:2e:33:63:4d:
99:be:cc:32:e5:57:d8:9b:4c:74:35:18:60:e4:f5:
e3:9e:1c:0e:80:af:b0:7b:29:95:fd:b1:ec:ce:97:
35:82:dd:8a:07:89:30:36:f2:0a:18:3e:64:49:60:
f4:9c:9c:ee:2e:2f:52:f1:8f:de:2a:ff:ee:62:7b:
fb:de:76:e7:48:54:46:9f:e1:43:ce:48:40:96:ce:
0f:3f:1a:aa:ab:61:38:36:5c:f8:1a:d1:34:97:43:
75:ff:d4:00:52:db:0d:ae:d9:bc:3d:73:8a:62:48:
a3:1e:6e:83:4c:53:27:f4:6f:d5:7e:13:38:7a:8a:
29:c0:e7:a4:80:f9:a8:c9:1e:71:32:da:bc:57:29:
de:a1:5d:d1:f5:e1:fe:91:fd:d9:70:2f:10:66:8d:
ca:ba:3b:15:ca:54:bb:95:f8:f1:da:b1:37:4f:cb:
55:f1:3b:37:b8:63:9f:ef:19:aa:71:3f:73:4f:5a:
87:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:76:CC:EA:75:63:D0:3C:67:0D:03:B0:5A:BC:B9:8D:AA:60:F4:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/da5c88e6-b7de-3b61-b783-acb2d5baa069.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.117.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:fb:b0:0b:68:4d:7c:03:7b:32:bb:33:18:8c:08:08:0b:c2:
ad:28:d8:2c:1d:7a:c6:2a:74:f3:18:71:91:53:d7:51:ed:ae:
a1:2d:be:8d:38:71:38:bd:bc:f5:21:af:39:9b:f5:01:74:6f:
44:1f:54:f4:e1:52:6e:6d:df:09:e7:d7:ba:1d:c2:57:ac:56:
0c:1f:1e:a6:b2:39:7b:50:70:c0:a5:c4:c1:8c:16:96:0b:cc:
1f:77:9f:95:0e:b6:2b:02:fc:0e:39:0b:82:c0:be:3d:a5:03:
f6:0b:08:49:26:70:1e:e2:4f:4b:0c:fb:3a:16:86:90:c5:75:
01:fc:cc:b6:55:d6:f6:7b:65:a0:73:b4:e1:a4:42:53:64:4c:
98:02:59:11:88:62:a5:6f:6e:fd:9d:38:98:c0:e1:35:60:b1:
da:65:59:ad:a4:a8:80:dc:48:9b:f8:3e:04:e6:5f:b2:d1:2d:
42:d6:6a:cd:ab:a3:5d:4a:26:54:2b:1a:15:a4:5d:b6:33:a0:
bd:f3:01:5a:ec:97:d2:89:85:d2:8f:b1:6b:16:98:58:71:04:
02:d4:b2:80:e8:70:cc:35:68:21:ed:4c:21:a1:86:c8:16:dd:
62:33:b0:c2:62:92:b7:c4:84:8d:ab:17:bd:cc:5d:9a:d1:3c:
61:a8:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:57 2024 by rpki-client on console-fra.rpki-client.org