Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/3ff28558-44dc-3ae9-b8e9-53be8c162439.roa
File: 3ff28558-44dc-3ae9-b8e9-53be8c162439.roa (raw, json)
Hash identifier: K16NKZZ+bBgfqLjNNm1v5hIuqKCyhBq9vdUrc+hA8Q4=
Subject key identifier: 28:E8:E0:00:97:87:94:E5:BE:7A:4A:DA:35:6A:52:46:29:88:95:E7
Certificate issuer: /CN=9c2a7225-dfea-460d-aa69-804ae5740036
Certificate serial: 010D0C9F43285842988723001C3BD1EAC0E239C0
Authority key identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/3ff28558-44dc-3ae9-b8e9-53be8c162439.roa
Signing time: Wed 19 Jul 2023 06:40:25 +0000
ROA not before: Wed 19 Jul 2023 06:40:25 +0000
ROA not after: Tue 17 Oct 2023 06:40:25 +0000
asID: 30221
IP address blocks: 63.247.144.0/20 maxlen: 24
68.68.192.0/21 maxlen: 24
68.68.200.0/22 maxlen: 24
68.68.206.0/23 maxlen: 24
68.68.208.0/21 maxlen: 24
68.68.216.0/24 maxlen: 24
68.68.218.0/24 maxlen: 24
68.68.220.0/24 maxlen: 24
208.122.112.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:98:87:23:00:1c:3b:d1:ea:c0:e2:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2a7225-dfea-460d-aa69-804ae5740036
Validity
Not Before: Jul 19 06:40:25 2023 GMT
Not After : Oct 17 06:40:25 2023 GMT
Subject: CN=94063af6-3679-4d00-be82-3d96b0b37390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:98:a8:68:e7:6f:6c:36:5b:31:bf:1a:23:
d9:ee:11:47:1c:bd:16:8a:9f:29:57:5c:96:83:23:
ef:8f:c8:b5:3a:71:53:be:24:c7:d1:ba:05:55:f7:
c5:12:75:db:c7:4e:c6:84:5b:94:c7:3a:15:f0:d5:
02:34:fa:2b:f5:b1:9a:7e:38:d1:3a:73:a3:4e:fa:
f5:03:4d:d6:e5:d4:00:03:57:39:f1:96:da:75:e5:
69:05:ad:13:62:b7:1f:48:60:03:d4:0b:ee:55:2b:
3d:54:c9:10:42:a7:7d:ed:8c:ff:e7:82:e0:58:4e:
5e:0f:b7:f5:32:c0:83:80:f5:bd:55:de:a6:30:ed:
f7:7e:08:26:ec:4b:60:bf:68:24:f3:59:b8:16:d6:
15:67:ca:6f:e9:14:12:74:b9:62:16:8a:e2:77:de:
d8:26:49:d9:b8:af:92:cb:43:90:34:bc:98:13:2a:
5a:d9:5e:5b:92:19:2c:ea:be:eb:13:63:bb:25:a5:
80:20:06:10:fb:6e:28:e1:60:b5:36:33:d2:9d:4b:
2d:5b:4f:f2:9a:c5:54:6e:6d:65:87:2a:ab:21:a5:
e7:cd:6f:31:2c:ac:71:b5:cd:05:43:47:a9:4f:85:
49:d8:61:72:1c:f6:0e:ec:c3:0d:5f:fb:76:b8:1f:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E8:E0:00:97:87:94:E5:BE:7A:4A:DA:35:6A:52:46:29:88:95:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/3ff28558-44dc-3ae9-b8e9-53be8c162439.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl
X509v3 Authority Key Identifier:
keyid:95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
sbgp-ipAddrBlock: critical
IPv4:
63.247.144.0/20
68.68.192.0-68.68.203.255
68.68.206.0-68.68.216.255
68.68.218.0/24
68.68.220.0/24
208.122.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:26:bd:91:e6:fa:73:23:8e:25:6a:0c:41:ba:05:cc:06:9a:
6f:95:53:89:34:fa:76:73:24:01:d8:73:81:a4:45:79:87:8f:
9a:5d:cf:1c:f9:18:02:6d:d6:de:8f:21:76:ed:49:b9:5a:9e:
6e:79:34:24:c2:e6:53:73:6a:3d:1d:c5:90:3a:bf:09:f5:fc:
e0:07:8e:f7:8b:d1:83:bc:10:b6:08:ca:07:70:20:94:aa:3d:
18:e3:72:1b:98:42:dc:aa:48:30:33:b9:ea:fb:fc:fb:42:e3:
2f:fe:07:dc:a6:dd:9d:ae:7c:89:b3:75:9a:68:a8:2d:f6:ed:
0d:1a:6a:29:9c:0a:e4:06:aa:37:76:35:db:bb:ae:fd:38:cb:
cb:01:87:12:86:f4:a2:2f:c1:39:44:cc:eb:79:fa:1c:f5:c5:
b0:1f:ef:d9:50:74:26:26:a9:a8:53:f0:71:78:ba:2e:d4:bf:
db:3e:5e:21:b6:ae:66:d2:d6:e5:87:d1:fd:e6:0d:fc:f1:b8:
35:c8:73:54:f2:87:aa:ad:0c:98:5e:94:40:55:28:60:a0:57:
f2:90:62:e3:b6:c7:6e:c0:77:84:41:f7:14:cb:e6:d3:7b:43:
96:ab:36:5a:b8:2a:3f:40:0f:4c:3d:1a:3c:87:34:b8:cc:0a:
f6:a4:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:50 2023 by rpki-client on console-fra.rpki-client.org