Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/828d4f30-88e1-30bb-8e87-3be3e4ea22ad.roa
File: 828d4f30-88e1-30bb-8e87-3be3e4ea22ad.roa (raw, json)
Hash identifier: 91DPyP3SYfg6QowRw5qaq4aGMpRSsAABnByUxRLmqOg=
Subject key identifier: E9:A3:90:57:2F:E8:16:B3:1F:F0:E3:DF:02:2E:60:7F:8B:F9:90:B0
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285844D2E52FEA1FC9ABC69CE99F00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/828d4f30-88e1-30bb-8e87-3be3e4ea22ad.roa
Signing time: Thu 08 Feb 2024 14:00:33 +0000
ROA not before: Thu 08 Feb 2024 14:00:33 +0000
ROA not after: Wed 08 May 2024 13:00:33 +0000
asID: 147186
IP address blocks: 200.229.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 14:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d2:e5:2f:ea:1f:c9:ab:c6:9c:e9:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Feb 8 14:00:33 2024 GMT
Not After : May 8 13:00:33 2024 GMT
Subject: CN=f62983e2-4d9c-4472-8235-9e3e13d1540f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:1e:f3:3f:7b:ec:6a:34:11:4f:e4:de:8a:
c2:3a:c0:82:f2:81:de:89:d9:8f:91:b6:1a:49:6c:
5c:c3:e9:ce:99:a3:ea:b3:f8:6a:1e:38:f4:9c:2b:
64:d9:11:af:16:1a:8b:3b:48:11:28:6f:5b:be:7c:
f5:66:e2:02:eb:11:17:d0:11:e1:7b:3a:c7:0f:64:
bc:1b:3e:6a:b5:19:13:05:f0:9b:04:0b:e8:ae:7e:
ba:82:21:45:ac:eb:4f:48:40:2e:2b:d4:f9:2f:10:
a5:77:3f:31:b3:ce:37:2b:4f:4e:51:89:7e:8f:44:
54:e2:5c:30:00:7a:22:d5:b6:39:e3:5b:f3:a2:b1:
4a:64:7d:bb:f3:1b:7d:f2:9d:55:1d:71:a1:67:6b:
1e:05:3c:e7:5d:1f:91:91:36:92:c7:a0:6c:52:66:
8b:cb:bf:b0:a4:86:61:21:65:45:66:02:fc:3a:d2:
e7:fb:28:23:17:d4:f4:9c:60:4f:9e:2f:7b:9d:6e:
e1:81:25:ca:dd:b7:6d:cd:1b:85:87:8f:3f:f2:c5:
81:1b:c6:2a:3c:a4:06:5d:d9:ec:40:51:54:4c:3e:
ad:5d:0d:a6:7f:ba:0f:f7:aa:47:62:ad:76:e6:a7:
6b:a4:40:8d:61:5a:95:63:ae:eb:8e:85:8c:e1:7d:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A3:90:57:2F:E8:16:B3:1F:F0:E3:DF:02:2E:60:7F:8B:F9:90:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/828d4f30-88e1-30bb-8e87-3be3e4ea22ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
200.229.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:c3:37:d2:b7:e6:84:fd:00:12:b5:4a:3d:27:cb:31:34:fd:
c9:87:b7:27:0e:23:fb:07:f2:97:8e:f8:67:fc:4d:1d:44:83:
c4:4b:4a:27:87:77:b3:cb:65:47:08:02:bf:fc:11:57:26:a0:
a1:c3:dd:a6:0c:f1:83:8b:ad:06:54:43:9a:5e:a5:c0:f7:8a:
c6:a7:0b:23:6e:8f:87:25:09:b6:f1:d7:9d:e3:04:11:40:87:
01:63:8d:6c:33:46:cf:f4:e8:80:c8:3a:10:f8:bb:ec:83:fb:
ed:3a:db:ec:12:3a:0b:52:37:6a:ef:b3:76:96:5b:9a:9b:a9:
dd:b5:14:13:24:e7:94:01:c2:57:79:46:f4:9c:a0:22:b1:0a:
07:97:98:88:ba:a2:56:44:94:0e:24:1f:9b:7c:d7:d2:3c:69:
65:2b:ec:90:98:89:c2:a2:5c:a6:0f:83:27:64:08:92:44:ab:
c4:e2:06:cd:64:31:c6:03:a7:c5:8e:ac:00:e8:aa:42:8c:49:
9f:d9:52:99:e5:df:ad:fc:58:fe:46:8e:0b:89:5f:e1:d7:fd:
9c:5b:59:14:3f:0d:39:d0:10:90:0d:8e:78:2b:8e:43:8f:a3:
e0:95:db:a9:d4:de:fb:87:d8:7a:84:df:fd:c7:16:79:69:04:
6b:b2:bc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 19:52:58 2024 by rpki-client on console-fra.rpki-client.org