Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524e5dad-ac74-399f-9a85-27c0f68c4e81.roa
File: 524e5dad-ac74-399f-9a85-27c0f68c4e81.roa (raw, json)
Hash identifier: SXmvDLn704zKfIhqbKiWX8F0ripv4WlavlYlUho+0Xw=
Subject key identifier: 1B:6C:4A:9C:37:EC:11:F6:07:01:6B:7C:89:45:C1:4C:5A:BA:D3:BF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584585732ECFFC6410311F89AA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524e5dad-ac74-399f-9a85-27c0f68c4e81.roa
Signing time: Fri 12 Apr 2024 13:00:34 +0000
ROA not before: Fri 12 Apr 2024 13:00:34 +0000
ROA not after: Thu 11 Jul 2024 13:00:34 +0000
asID: 23454
IP address blocks: 72.247.120.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 16 Apr 2024 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:85:73:2e:cf:fc:64:10:31:1f:89:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 12 13:00:34 2024 GMT
Not After : Jul 11 13:00:34 2024 GMT
Subject: CN=5d32fde0-2623-4cf6-a800-d28a38c92d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:99:71:bd:a6:1f:4c:2d:59:6f:dd:bc:a1:fd:
dc:64:fb:bb:d1:2b:10:85:12:de:37:f6:71:1f:de:
b0:87:ee:86:85:2c:cc:ee:d6:e9:81:ef:04:d6:44:
54:0a:b7:ea:d9:2a:a9:2b:9a:c0:e2:ec:f0:37:fa:
a7:fa:6e:8b:34:d0:27:55:7b:c3:26:47:6f:30:b8:
28:b9:ea:60:5e:fe:ca:fe:4e:73:9e:cd:7e:9a:e1:
60:9b:3b:12:48:60:47:41:0f:90:4e:82:c0:9b:ca:
44:73:af:fd:d0:2a:7b:66:b3:2d:35:6f:d5:71:94:
31:d5:cc:8e:e5:f8:08:56:75:84:c2:d3:5c:55:08:
d9:2b:2d:6a:ba:4f:f3:ea:f8:22:cd:4f:ba:72:4a:
40:e2:75:68:6b:bd:fa:40:43:6b:4f:c1:d8:44:ab:
59:3c:1f:2f:51:73:ae:81:1e:0d:e9:ec:79:8b:c0:
15:97:09:00:f7:8e:57:d8:16:88:b5:b0:69:06:19:
7b:15:28:2a:b0:f8:d8:8f:0f:a5:a2:fb:5c:e4:70:
fc:6b:31:ef:24:d7:9b:dd:b5:f5:62:c1:c9:5a:b9:
41:52:d5:c0:51:21:12:cb:05:35:4f:53:91:af:53:
8a:28:f9:92:6b:32:1a:c0:f2:11:de:76:ef:f0:d3:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6C:4A:9C:37:EC:11:F6:07:01:6B:7C:89:45:C1:4C:5A:BA:D3:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524e5dad-ac74-399f-9a85-27c0f68c4e81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.247.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:59:78:8c:1a:e0:de:7b:85:52:43:64:35:73:d1:3c:f5:a1:
91:82:4a:8c:54:f9:e9:ec:37:02:84:46:d1:89:c5:06:34:ec:
cb:de:ae:38:8a:c8:6e:28:45:8c:2f:f7:c6:c7:be:74:a1:6b:
35:c3:a2:12:20:eb:1e:35:5e:e9:d4:14:d2:d3:ce:d5:8a:fa:
f5:47:1b:0b:4f:00:73:4e:cb:a5:9c:ae:e5:fe:88:52:ba:49:
32:04:f8:88:c1:f0:4d:e0:7d:9d:ca:cd:48:f1:3d:13:1c:f0:
94:74:46:92:6a:24:70:d5:ff:ab:e6:3e:12:43:43:51:a6:16:
96:c0:a6:29:23:29:b7:5b:07:54:d4:8a:07:17:ff:77:2c:7f:
2e:0f:9f:d3:80:54:06:64:31:38:80:3c:81:ea:c4:32:3f:b7:
d7:17:d5:c5:23:fb:18:c2:fb:9d:a4:f8:f8:58:5e:81:b9:b6:
2e:ef:c2:a2:a6:b4:b9:2e:f8:30:c3:53:45:e7:59:a6:0b:c0:
ab:87:e3:b3:96:94:2a:ed:37:a4:ad:ad:47:3a:70:6a:1f:e2:
9a:ae:1e:3e:c0:f0:37:3f:00:c1:e2:41:de:b8:a9:f2:7b:45:
03:b1:8f:63:28:1b:f6:5d:d0:f8:12:81:19:3a:50:3e:08:02:
7d:d4:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:27 2024 by rpki-client on console-fra.rpki-client.org