Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ee68067c-47ed-3eb5-89c6-0abe74f3ea0b.roa
File: ee68067c-47ed-3eb5-89c6-0abe74f3ea0b.roa (raw, json)
Hash identifier: NrFsn+ewFRyg3oF2aYoNL8AQjr3/TdeihNdwyBhJlUU=
Subject key identifier: 01:6B:86:B1:F8:81:1B:66:C4:C1:6C:91:92:09:3E:FF:60:79:64:C8
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F43285845A15DFD2338B9C7477F0C1340
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ee68067c-47ed-3eb5-89c6-0abe74f3ea0b.roa
Signing time: Mon 22 Apr 2024 13:00:33 +0000
ROA not before: Mon 22 Apr 2024 13:00:33 +0000
ROA not after: Sun 21 Jul 2024 13:00:33 +0000
asID: 46450
IP address blocks: 198.145.96.0/20 maxlen: 20
198.145.98.0/23 maxlen: 24
198.145.104.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 01 May 2024 00:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:a1:5d:fd:23:38:b9:c7:47:7f:0c:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Apr 22 13:00:33 2024 GMT
Not After : Jul 21 13:00:33 2024 GMT
Subject: CN=7bf03a1f-15ce-4d39-ba57-0d5af33dec51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:1d:9a:02:13:0b:04:d3:0c:99:fd:72:3b:
36:22:77:cb:05:d7:ce:a3:88:68:9f:58:06:33:8b:
3b:08:64:c1:d4:3b:f3:26:64:3d:01:2c:5c:b0:d6:
c3:15:53:24:71:03:c5:19:16:0e:16:f7:1e:5c:e4:
cf:42:59:ea:0c:5b:40:a8:a3:3a:0e:d0:82:01:c0:
c8:d3:25:3b:7b:d1:96:42:1b:41:32:a6:d2:73:75:
d6:3f:af:ff:e8:7b:1f:55:46:af:bd:26:e3:e9:e1:
27:6d:4f:12:11:f6:01:ac:51:3d:4d:74:54:fb:aa:
b4:73:1a:99:07:ed:37:1d:eb:57:af:83:a8:e9:56:
41:65:b6:34:ab:67:5f:cb:b0:0d:21:6e:a6:03:e6:
33:dc:e2:67:6b:4b:95:38:02:67:af:2a:62:23:04:
59:80:8a:4f:4f:33:4d:c3:f5:77:e6:da:c7:43:15:
8e:d9:32:54:0a:83:df:97:dc:1e:32:e4:f5:11:c3:
9f:ff:60:a1:5b:7f:f6:23:57:6d:54:03:7a:92:aa:
ff:50:bb:4b:be:62:5d:28:aa:64:ed:30:b1:b5:f6:
15:d3:ff:24:03:43:f0:19:33:83:7d:78:dd:37:53:
cb:da:ff:ca:fe:54:c8:1b:2f:60:d6:86:3a:b1:72:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6B:86:B1:F8:81:1B:66:C4:C1:6C:91:92:09:3E:FF:60:79:64:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ee68067c-47ed-3eb5-89c6-0abe74f3ea0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:ac:32:5b:41:d6:b7:98:b6:b5:98:1f:6b:76:d3:56:31:23:
c2:61:bc:e0:4c:4b:77:c8:f8:15:01:f2:16:40:72:46:d0:c6:
dd:2a:73:46:84:e2:08:03:3d:15:32:73:ce:03:7e:de:95:93:
8d:ab:78:53:7a:ae:36:9b:98:96:d5:f6:f9:47:72:7f:3b:76:
37:da:8c:9e:6e:77:0c:55:a1:d9:9b:95:98:18:bf:4a:b5:12:
38:09:5a:4d:a2:84:b7:4b:67:20:9a:0a:01:39:d8:d4:32:31:
41:5a:4a:ed:87:f3:2f:a7:49:d8:2b:49:68:ae:b5:7a:51:76:
7e:72:bb:15:8e:b0:b3:50:17:5a:85:b4:cd:f1:18:f4:b4:c1:
98:42:1e:88:f7:48:c3:74:6b:0b:a3:16:29:00:b4:44:8b:c3:
19:5c:73:24:c1:39:c5:db:7b:34:46:bd:e7:14:07:f5:3e:c4:
4e:16:5a:64:b3:cc:e8:0d:b8:5d:83:2f:b5:d6:06:b6:e8:19:
68:75:46:36:72:da:09:b1:a5:60:8b:d8:c9:94:a7:b9:ec:77:
96:b9:54:f8:08:bc:d8:85:8c:61:df:68:78:a5:f6:00:43:1c:
e8:eb:3c:0b:23:c4:d6:0d:e4:29:3d:e7:7e:b5:92:ec:76:83:
61:45:ed:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org