Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e280a01b-1a32-3d00-b40c-2d51671d6d75.roa
File: e280a01b-1a32-3d00-b40c-2d51671d6d75.roa (raw, json)
Hash identifier: 6aRDyfNyEcZbF/L19M3cXBDDbNHv2GcjsmRiP6qfBdw=
Subject key identifier: AA:A2:EA:E0:52:21:B9:21:CF:50:9D:6F:7E:9C:84:A7:06:05:32:37
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F432858442C1CE2BF1B4BFD1DF94B1980
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e280a01b-1a32-3d00-b40c-2d51671d6d75.roa
Signing time: Sun 10 Dec 2023 20:12:54 +0000
ROA not before: Sun 10 Dec 2023 20:12:54 +0000
ROA not after: Sat 09 Mar 2024 20:12:54 +0000
asID: 5650
IP address blocks: 172.98.169.0/24 maxlen: 24
104.218.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 08:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:2c:1c:e2:bf:1b:4b:fd:1d:f9:4b:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Dec 10 20:12:54 2023 GMT
Not After : Mar 9 20:12:54 2024 GMT
Subject: CN=c569b1d0-d221-4700-9ec5-4f4c340956b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f4:21:e8:ba:e3:6c:81:ee:68:24:c7:0e:f8:
d2:3c:48:d1:fc:04:68:e7:1a:eb:2f:dc:c1:36:ab:
ea:0b:52:28:ac:7c:c1:34:84:1f:f6:27:e1:24:39:
f2:3a:56:ac:ad:e7:af:4c:5e:38:fd:11:0e:b1:89:
07:f2:fc:02:e1:6f:86:3b:54:40:7c:e0:44:77:5b:
53:0b:88:81:cd:84:58:9c:0f:37:08:5d:71:7c:a1:
c4:c0:e3:35:ce:56:66:8d:f5:72:4d:da:6a:b5:c0:
bf:6a:6f:75:b5:ab:3f:89:42:33:a5:38:e3:aa:f8:
15:28:39:27:82:34:c6:df:98:98:13:9a:99:0b:e7:
e9:ea:2a:dc:af:63:f4:73:db:8e:be:f6:6d:16:c0:
4d:2f:29:65:f8:b7:b5:2f:04:df:fb:20:25:f2:2c:
97:fd:1c:d7:2a:28:1b:97:42:d1:80:71:34:44:a0:
72:0e:55:ac:d9:ab:0a:bc:04:e8:2e:a1:62:13:74:
5d:77:06:aa:db:db:15:41:61:95:84:37:82:da:1d:
a7:f9:65:53:88:6d:b4:4f:8e:2f:10:58:5c:7f:06:
98:86:76:36:80:2c:7c:33:ec:80:b8:73:84:28:22:
df:db:8c:69:24:b6:63:64:b1:47:fe:fd:c9:2d:22:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A2:EA:E0:52:21:B9:21:CF:50:9D:6F:7E:9C:84:A7:06:05:32:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e280a01b-1a32-3d00-b40c-2d51671d6d75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
104.218.193.0/24
172.98.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:d0:e2:8a:9a:85:ad:06:1b:35:63:35:12:27:c8:46:03:cb:
4b:7a:85:f1:c5:ac:c2:b0:0a:78:72:85:d1:98:d2:2c:b2:c1:
14:76:0f:2c:e7:88:f7:5b:26:54:18:df:69:34:91:95:2d:06:
4b:fb:79:19:74:06:34:c8:a8:a3:39:55:4b:62:b5:29:05:75:
53:cc:4c:ed:18:16:0e:92:77:93:95:75:3c:f4:74:80:d6:42:
28:be:dc:a8:f9:3e:9d:24:95:bf:f2:14:12:0a:fc:d1:98:8b:
02:ef:be:a1:66:8c:bb:6d:0f:ad:59:95:d5:50:22:5c:68:29:
de:1d:ab:25:92:cc:2f:06:bc:08:8e:98:8b:a2:86:dc:7d:32:
9d:ec:8f:05:f4:b6:ce:6e:89:ce:3d:fb:56:76:80:9c:f8:f6:
65:32:fe:b7:fb:48:c1:00:80:d9:22:e3:1a:fe:95:07:1a:94:
b4:57:bd:3a:53:6b:b9:bd:a4:f2:a1:2b:6e:6f:e2:ce:a6:b2:
3b:c3:f5:30:a7:6a:73:90:15:85:16:6f:df:c3:75:d5:0a:18:
83:b1:45:4a:4e:cb:af:15:b7:a6:96:45:39:69:c9:d3:ef:de:
12:41:90:c0:34:5e:e7:64:a2:e8:05:ba:fe:79:92:db:82:72:
87:cb:9a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 11:49:35 2024 by rpki-client on console-fra.rpki-client.org