Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/053accbf-93c7-35ba-b191-0a4ea794c0c9.roa
File: 053accbf-93c7-35ba-b191-0a4ea794c0c9.roa (raw, json)
Hash identifier: eEIN/KI0iunO/rUAeXd/LMqhjEigh/i3tiu31FjQoA0=
Subject key identifier: 24:1B:A2:F9:5F:3F:A4:6E:3C:79:FC:1B:FD:4E:D9:D6:E0:C4:1E:24
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285844207CED676DCDE335F3FA2D10
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/053accbf-93c7-35ba-b191-0a4ea794c0c9.roa
Signing time: Wed 06 Dec 2023 16:16:43 +0000
ROA not before: Wed 06 Dec 2023 16:16:43 +0000
ROA not after: Tue 05 Mar 2024 16:16:43 +0000
asID: 10753
IP address blocks: 209.178.232.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:20:7c:ed:67:6d:cd:e3:35:f3:fa:2d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Dec 6 16:16:43 2023 GMT
Not After : Mar 5 16:16:43 2024 GMT
Subject: CN=72ab0305-8cff-48f8-8fd9-621b0c4850d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:13:dd:91:f9:5f:33:fc:a1:c4:eb:4b:ac:
ca:a3:6e:01:a5:4d:ca:74:7d:97:ac:fe:f6:a7:fa:
ab:5a:1a:63:f8:55:cd:97:9e:5d:be:03:87:37:b2:
d3:9a:5e:7f:39:79:38:2e:16:ff:ef:05:ad:ff:39:
e6:6c:71:1e:79:2e:44:fd:88:66:41:34:eb:96:0f:
35:39:9b:4a:81:36:18:03:be:74:ac:ab:dc:0d:92:
7f:c9:a8:1c:b7:c2:71:dd:ea:c4:12:72:a4:19:37:
a6:57:c5:66:af:d7:2b:27:57:33:38:4e:0d:64:20:
68:d6:f8:52:08:94:7d:77:21:a4:15:0c:87:8f:60:
c5:52:be:fd:f3:ff:84:e4:dd:c3:6a:c0:b3:df:16:
32:26:b1:27:98:3d:fe:b0:a8:bb:f5:6c:2f:07:91:
21:f6:5c:ad:27:54:22:c9:f3:81:40:08:99:6e:32:
19:71:e6:c1:42:db:5e:eb:b2:c8:43:99:89:21:08:
b5:7b:b2:29:9b:79:da:44:ad:bd:91:4a:3e:63:4f:
36:1b:a4:39:73:d5:8b:72:3a:91:9f:f7:6f:5e:9b:
5b:bb:82:0e:8b:8f:cc:5c:c1:eb:c0:1f:b4:ea:12:
5f:ff:8c:da:87:19:4e:e2:c6:42:36:13:b8:47:25:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1B:A2:F9:5F:3F:A4:6E:3C:79:FC:1B:FD:4E:D9:D6:E0:C4:1E:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/053accbf-93c7-35ba-b191-0a4ea794c0c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
209.178.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:e0:30:df:fd:26:d3:f9:3e:79:af:09:68:35:4f:68:d3:df:
d8:3c:9c:9c:f0:70:50:81:df:58:cf:aa:6d:79:76:2b:1c:8b:
df:06:11:11:78:13:e7:b2:ae:01:59:3c:12:1e:e2:c8:7e:cf:
e4:b4:51:ff:92:f9:93:8c:d6:3d:3b:c8:1c:69:85:d5:9d:f0:
1e:bf:c7:c8:e3:a3:02:98:b0:4f:74:1b:88:35:1e:8d:70:60:
8b:0c:89:f1:d9:89:d9:9e:18:9d:f4:f8:da:56:5d:de:92:ef:
36:b9:f2:9d:c1:e8:00:a0:fe:d4:a5:2c:da:79:11:e6:e5:b9:
1b:99:b7:66:c3:0f:c1:f3:ac:0c:ec:29:5d:83:2d:7e:ba:b6:
7f:92:62:42:35:39:67:6d:bf:cd:94:27:36:da:98:07:7a:9b:
f4:20:f1:90:c5:6c:99:40:09:78:05:52:5a:c8:bb:0f:b8:b3:
af:e7:e2:f4:05:07:75:ba:2a:ad:18:0e:7e:e0:b7:d2:4c:40:
14:c0:2e:4c:3f:15:c4:43:c6:04:7c:53:b7:8b:18:28:ae:77:
db:0b:ff:44:18:00:ae:4c:49:a4:e5:00:77:4a:df:29:67:de:
38:24:b5:04:84:49:3f:75:0c:95:72:dc:71:a9:16:ba:d1:bd:
d3:43:38:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 21:31:22 2023 by rpki-client on console-fra.rpki-client.org