Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/ac56386d-183a-3a2d-a495-762a3f726427.roa
File: ac56386d-183a-3a2d-a495-762a3f726427.roa (raw, json)
Hash identifier: Z36fTEsSIGcmY0vogQ3rZqGPRvA/cSayiq4avyhCmgM=
Subject key identifier: D1:7B:E1:F9:B4:66:98:00:D8:38:21:2D:9D:70:59:74:4F:E9:DD:07
Certificate issuer: /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial: 010D0C9F43285841B1715355F09EC4C1F9319380
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/ac56386d-183a-3a2d-a495-762a3f726427.roa
Signing time: Tue 24 May 2022 21:33:00 +0000
ROA not before: Tue 24 May 2022 21:33:00 +0000
ROA not after: Mon 26 Aug 2024 04:00:00 +0000
asID: 19551
IP address blocks: 160.129.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 27 Apr 2023 13:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:b1:71:53:55:f0:9e:c4:c1:f9:31:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Validity
Not Before: May 24 21:33:00 2022 GMT
Not After : Aug 26 04:00:00 2024 GMT
Subject: CN=32f80744-1350-4e80-b3f8-2209c0a7a604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ee:7a:e3:3b:80:21:7f:e1:f7:4e:99:c9:c1:
cb:5f:95:88:2e:0d:a4:f0:dd:39:6d:eb:1b:b4:f6:
44:9b:d4:9b:5d:88:b4:5a:9b:d4:e3:e5:31:56:58:
4c:d5:ca:93:c4:e5:e5:bc:e6:c5:9e:d7:7a:ee:d6:
57:c9:77:b7:43:5c:27:a4:86:02:e6:92:54:1e:ae:
e4:70:36:2c:20:fc:87:a3:99:9d:d2:b0:be:c5:dd:
7a:eb:bf:4e:68:6f:e1:9a:90:1e:0f:df:a3:7d:6e:
c5:a9:70:cb:ee:d1:e8:70:21:df:73:ab:20:f2:72:
f5:8a:f7:aa:be:f7:9d:ca:e9:ff:d1:af:d5:52:f3:
58:fd:d0:23:52:2a:21:06:7c:b6:bb:10:b5:cc:a2:
0f:09:6e:55:39:ad:2c:03:85:cc:d5:fd:b0:ca:7e:
73:71:25:4c:77:70:7f:62:31:a8:86:e7:a1:b4:73:
61:b2:cb:06:f2:33:68:61:70:79:a3:ef:d1:5e:03:
c3:79:69:f0:c4:d2:29:87:5c:6a:d5:06:34:ae:54:
47:11:a1:87:a8:21:18:5b:16:be:b3:31:71:33:66:
34:e1:7c:26:a4:c1:04:ea:f6:97:53:9b:0f:31:1f:
30:0d:d3:c2:93:88:b1:f8:eb:62:09:86:ff:0a:f0:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7B:E1:F9:B4:66:98:00:D8:38:21:2D:9D:70:59:74:4F:E9:DD:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/ac56386d-183a-3a2d-a495-762a3f726427.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
X509v3 Authority Key Identifier:
keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
sbgp-ipAddrBlock: critical
IPv4:
160.129.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:b0:a7:a4:c2:e0:2f:12:af:a8:ee:f7:f7:d5:76:90:91:0f:
9a:f9:b3:6b:54:72:b1:eb:49:2b:ad:36:99:1a:c3:09:44:39:
bb:30:d4:fc:0b:9a:f8:82:a8:d2:27:8a:85:36:bc:4a:2c:74:
da:32:a5:53:50:7f:38:7a:a3:1e:25:d9:2c:bc:29:6c:00:30:
d3:b4:99:65:1d:75:35:84:fc:54:3d:4a:4b:c8:ce:54:ae:44:
c6:74:ab:45:b1:00:6b:f4:cb:1d:dd:af:a6:77:44:f7:e4:f3:
98:30:68:4d:39:99:59:30:43:58:31:c3:11:b6:c5:74:24:69:
4d:e7:b3:5b:d2:ac:0e:9d:ed:78:2e:9f:01:ac:89:ba:06:5b:
f4:95:0e:71:2d:0b:f1:47:c1:c3:ff:ce:a9:e2:0f:e7:f7:a0:
43:ae:e7:4a:b9:cb:49:1b:d9:09:55:db:66:ac:91:df:4a:c9:
d8:ce:22:f2:2c:35:bc:a2:4f:5c:90:53:56:f5:11:e4:57:71:
67:44:29:e3:b6:d8:62:bc:ff:d2:05:4d:9f:90:b1:c1:0f:8e:
44:08:c9:65:73:d8:0c:5a:e6:b1:b7:25:bc:c5:1f:6e:97:67:
d6:b2:85:1a:af:6c:72:9f:29:18:fd:c0:d9:49:10:64:15:90:
ac:da:e9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:56 2024 by rpki-client on console-fra.rpki-client.org