Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/1fc71622-03c0-3860-87ba-4e246c4ff386.roa
File: 1fc71622-03c0-3860-87ba-4e246c4ff386.roa (raw, json)
Hash identifier: VswgzzrQpp/NwEOq5BnHh1RUKQmriEx7d65P+ASCYss=
Subject key identifier: 9A:43:30:87:8E:FD:25:10:BC:16:D1:D2:CB:F0:FE:04:F7:D2:0B:A6
Certificate issuer: /CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
Certificate serial: 010D0C9F432858447F249A602EE40E59AF10B600
Authority key identifier: 89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/1fc71622-03c0-3860-87ba-4e246c4ff386.roa
Signing time: Tue 09 Jan 2024 14:00:29 +0000
ROA not before: Tue 09 Jan 2024 14:00:29 +0000
ROA not after: Mon 08 Apr 2024 13:00:29 +0000
asID: 11472
IP address blocks: 208.65.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Feb 2024 17:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:7f:24:9a:60:2e:e4:0e:59:af:10:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
Validity
Not Before: Jan 9 14:00:29 2024 GMT
Not After : Apr 8 13:00:29 2024 GMT
Subject: CN=5347720f-2ed0-4ba0-a80b-af56d34a61de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:c5:a1:74:59:b5:9e:2a:96:12:5a:69:20:
30:29:a5:bd:ff:86:95:82:a4:60:95:f8:8d:59:27:
8e:28:73:3a:12:ea:e4:76:97:5c:a7:73:a0:33:9b:
99:36:cb:47:1a:32:10:13:c0:6f:ce:b7:85:59:44:
c3:d0:6c:80:46:a4:d7:d7:05:89:3c:c5:0a:51:d4:
b4:8d:97:36:b5:de:43:20:0b:e3:97:9e:cf:6b:f9:
2a:59:98:91:96:f0:e6:78:fc:80:de:f6:9b:e9:66:
f8:5c:72:3a:a6:1d:23:c8:e3:02:86:97:6b:bf:6b:
ca:14:33:42:c9:be:6c:4c:9d:d5:d1:78:fe:c2:30:
30:66:a4:5c:b7:60:db:51:4a:6f:69:bd:c4:4e:45:
6a:c7:25:be:25:7e:6a:35:6c:38:4f:7d:cb:fa:9f:
f7:53:4e:11:d1:16:4b:89:26:1c:57:a2:66:29:7a:
ca:1c:f8:5d:c2:95:18:2f:9f:14:f7:35:4b:c9:5b:
cd:a7:5b:8e:b5:4b:6d:0e:4f:82:b8:18:cb:77:1e:
03:79:dd:a4:34:e2:dc:7a:47:23:c2:81:8d:71:0c:
78:80:68:2b:fb:8b:e1:1e:ef:28:82:ea:ae:35:1d:
17:54:4f:14:56:4e:91:47:ff:8f:85:02:02:ec:29:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:43:30:87:8E:FD:25:10:BC:16:D1:D2:CB:F0:FE:04:F7:D2:0B:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/1fc71622-03c0-3860-87ba-4e246c4ff386.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl
X509v3 Authority Key Identifier:
keyid:89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer
sbgp-ipAddrBlock: critical
IPv4:
208.65.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:a7:09:17:bd:0c:ee:55:77:95:f4:ea:76:83:0a:25:52:b1:
8d:f1:f7:7b:11:a9:fc:05:41:d0:75:c7:d7:9a:f5:3b:38:2f:
a6:03:14:5f:c1:ab:5a:4e:cb:75:a2:f3:e8:d9:a7:0b:d3:d6:
1a:75:35:c3:12:a7:ba:0d:ab:de:b1:ab:e8:bc:03:22:85:f2:
77:88:6d:6e:94:e1:66:e0:77:85:7b:62:15:9b:de:11:2e:7c:
7b:da:a5:22:1a:d6:d7:e3:f8:d1:9a:31:44:24:e8:98:a8:d4:
33:08:4f:0b:59:53:15:80:b3:a6:cb:73:fa:00:74:83:66:d4:
31:5d:19:63:51:83:c8:98:9f:81:78:80:c4:35:81:7f:45:3d:
37:2c:23:7a:3a:94:3a:a0:ea:e1:52:a2:f3:7f:b2:c7:21:e0:
03:e9:72:25:39:64:5e:14:9d:1d:3c:87:c2:bf:e4:7d:cb:04:
f7:b5:ee:98:96:13:74:8c:03:24:84:46:35:65:ef:5a:78:d5:
12:c6:fb:12:a3:c3:3e:3f:c6:92:2f:96:a2:cd:ea:f7:d1:7d:
3a:52:92:5b:a3:39:5d:e4:2e:f6:cd:bc:ca:6b:60:a0:a3:bd:
b3:f7:3b:94:7f:54:e0:d4:15:d2:88:cb:95:62:81:0e:ef:97:
a4:55:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 18:53:59 2024 by rpki-client on console-ams.rpki-client.org