Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cbe51831-65fb-351d-98cf-f876b697ad5f.roa
File: cbe51831-65fb-351d-98cf-f876b697ad5f.roa (raw, json)
Hash identifier: 0R4DHBKniG22Bq6EiGy3Ql/OZqhNoQZR6GQYczyS814=
Subject key identifier: 89:97:48:1F:BF:5D:C0:E8:7C:B1:0F:39:E7:9A:B9:ED:DC:BD:FE:0A
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F432858423D2325D649A968B280A25050
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cbe51831-65fb-351d-98cf-f876b697ad5f.roa
Signing time: Fri 16 Jun 2023 13:00:19 +0000
ROA not before: Fri 16 Jun 2023 13:00:19 +0000
ROA not after: Thu 14 Sep 2023 13:00:19 +0000
asID: 9009
IP address blocks: 104.218.196.0/24 maxlen: 24
104.218.193.0/24 maxlen: 24
104.218.194.0/24 maxlen: 24
104.251.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:3d:23:25:d6:49:a9:68:b2:80:a2:50:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Jun 16 13:00:19 2023 GMT
Not After : Sep 14 13:00:19 2023 GMT
Subject: CN=e95cba3a-7dee-4528-afb6-f1e36be3d0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:5c:7d:b8:1c:6e:5f:83:a8:be:2c:db:90:
42:9c:85:ba:6f:40:62:34:b4:ff:1b:f8:0e:ea:fb:
be:7c:24:ee:73:28:f2:67:e8:e1:69:bc:64:46:42:
f0:7f:7c:e1:8f:22:14:47:88:6e:f7:33:ad:10:f8:
d9:f6:30:15:f8:38:95:02:1d:04:df:e2:af:ad:6a:
33:06:8c:72:d0:dd:ac:0a:66:6d:3a:54:94:94:3d:
d7:7f:cb:f6:49:3e:27:9c:38:92:29:4f:02:f0:fa:
5f:be:2f:b2:5e:7b:d0:68:53:49:d4:20:3b:26:03:
6b:a4:b3:d7:16:8a:33:0a:4a:d7:98:a3:96:53:97:
8c:09:b2:f7:a5:49:77:1c:c5:34:16:00:cd:b6:4b:
65:30:fe:ed:55:3d:63:b2:eb:7f:7c:55:fe:73:db:
d1:aa:4c:a9:e0:1d:dc:60:f5:d3:a1:09:ce:5b:8f:
e8:9c:22:e4:67:bb:7e:e4:5f:6e:ce:68:a3:9e:a0:
1e:71:86:cf:44:27:1f:84:11:81:7a:81:7b:8d:56:
9f:39:6e:ba:c8:46:db:11:25:4e:67:d2:18:44:94:
c9:62:8e:bc:fe:cc:bf:91:f6:88:8d:a6:2c:54:c1:
40:e4:95:3d:5a:49:d9:6d:25:0b:df:7c:87:26:5a:
00:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:97:48:1F:BF:5D:C0:E8:7C:B1:0F:39:E7:9A:B9:ED:DC:BD:FE:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/cbe51831-65fb-351d-98cf-f876b697ad5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
104.218.193.0-104.218.194.255
104.218.196.0/24
104.251.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:11:59:0f:af:fd:b3:5f:a6:ea:38:10:4d:20:92:87:bd:70:
1c:f7:1c:54:55:ce:36:fc:9d:2b:87:24:bd:26:17:63:a9:39:
76:48:e8:7d:bc:69:66:89:a9:82:55:3e:96:c5:17:e4:ac:98:
54:86:6d:94:2e:42:91:c4:77:cb:78:96:df:67:de:ca:ff:14:
be:d7:76:cb:02:3c:b5:c8:a8:9f:ea:22:80:03:ad:6e:42:e1:
bd:04:b1:15:aa:45:51:c7:c0:fa:25:aa:7a:b0:a8:18:90:bb:
7a:ff:36:b7:c2:24:3d:1f:d7:52:11:e6:e0:38:1c:83:89:2a:
ca:71:30:d2:22:4a:b0:a6:a7:3e:7b:ab:b8:28:c7:b8:71:b8:
53:07:26:a4:75:64:fd:aa:47:11:c7:e7:d7:20:98:06:1c:23:
47:a9:97:41:48:f6:be:0e:5d:84:ba:8c:ab:b7:16:17:db:be:
15:66:08:da:17:7e:3d:a3:e3:7c:cc:e1:b8:69:bf:06:67:10:
3c:0b:b7:84:68:66:0d:70:de:cd:0a:fd:b5:ec:98:11:46:51:
fc:7c:7b:2b:25:00:49:2f:4e:9f:1d:38:0d:65:73:28:3d:21:
87:8f:47:ba:03:a5:b9:11:1e:25:c7:51:9c:81:49:1f:f6:a3:
e5:db:c2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 12:32:11 2023 by rpki-client on console-ams.rpki-client.org