Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/84befcc6-4ec2-3204-9a6f-29e72dfada25.roa
File: 84befcc6-4ec2-3204-9a6f-29e72dfada25.roa (raw, json)
Hash identifier: e1o6p412ZODFlNG9HtjF4u46SBe3hhrwbB47euEAHPo=
Subject key identifier: B2:F3:CE:5A:78:59:6C:C9:EC:90:0A:2F:A9:80:F0:FD:15:F6:12:00
Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial: 010D0C9F43285847924BD82C7A68780235AB3680
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/84befcc6-4ec2-3204-9a6f-29e72dfada25.roa
Signing time: Thu 17 Oct 2024 13:00:42 +0000
ROA not before: Thu 17 Oct 2024 13:00:42 +0000
ROA not after: Wed 15 Jan 2025 14:00:42 +0000
asID: 54203
IP address blocks: 173.245.203.0/24 maxlen: 24
216.151.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 20:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:92:4b:d8:2c:7a:68:78:02:35:ab:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Validity
Not Before: Oct 17 13:00:42 2024 GMT
Not After : Jan 15 14:00:42 2025 GMT
Subject: CN=9107b3e1-95f4-45ba-a14f-235cc517afc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c8:4c:72:b4:2a:bf:83:e2:f9:40:04:11:8b:
31:10:c6:97:21:f1:f7:60:81:17:6b:ad:96:dc:e8:
b7:ae:2b:56:66:03:6c:94:50:c8:45:99:cb:47:11:
ae:f1:7b:ac:c8:bc:47:7e:99:54:fb:5f:3e:5b:8a:
d3:6a:1f:5e:8a:74:fa:2d:ca:e8:00:59:b8:78:fe:
71:14:0c:73:64:e4:6a:00:ea:d8:7d:ab:e4:8c:28:
56:4a:4e:22:1b:48:b8:83:ce:2a:9e:e1:4a:84:af:
af:81:10:0e:94:95:5a:e0:9f:74:ff:40:6d:e8:89:
ae:de:3f:3b:51:44:c7:7b:d1:f9:ce:c0:5f:ef:7e:
42:b2:76:ed:71:00:08:35:f2:f9:ba:93:48:6a:5b:
89:1a:95:0e:75:cc:ae:ae:88:bb:8f:e6:de:2a:d4:
28:dd:aa:0c:a8:b0:00:4e:53:2d:30:4a:0e:40:0b:
a3:de:f0:7f:3e:0b:d0:24:09:11:60:f5:ea:5a:8d:
c9:a6:4e:82:2c:59:c3:60:73:7c:60:1c:d9:46:16:
12:a4:e1:28:9f:e0:83:20:b5:1b:ee:36:72:9e:06:
8d:bd:70:20:e4:17:40:b2:d8:f7:bb:cf:34:aa:c7:
25:6c:5e:d0:ee:cf:6e:8b:c8:a4:41:63:f8:ca:bb:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F3:CE:5A:78:59:6C:C9:EC:90:0A:2F:A9:80:F0:FD:15:F6:12:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/84befcc6-4ec2-3204-9a6f-29e72dfada25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
X509v3 Authority Key Identifier:
keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
sbgp-ipAddrBlock: critical
IPv4:
173.245.203.0/24
216.151.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:ac:d0:34:2a:ef:b2:e6:42:2e:88:da:77:eb:d7:0f:17:a9:
47:7b:ec:84:26:68:db:02:22:36:33:41:ec:73:9e:d0:f5:e1:
98:f7:18:45:60:a2:6c:72:d3:ea:2b:5a:50:38:76:f3:06:72:
d4:d3:4a:6a:04:a6:d5:9f:c8:1e:f2:1a:98:5c:5b:ff:ac:49:
cc:00:c8:95:48:65:67:28:41:43:89:23:0f:45:69:e4:ef:ae:
13:78:06:dc:03:df:9c:1f:f5:21:b5:62:71:6a:97:00:d2:67:
83:7d:10:0e:09:45:f7:0d:b0:46:90:d4:0b:78:83:d1:b0:05:
02:1e:10:8b:ed:78:71:a1:98:a3:ed:4a:31:31:40:5f:14:ee:
81:db:c7:fb:ea:54:be:cf:ca:15:5c:43:6e:03:d5:8a:b0:bc:
8f:70:5c:ae:c2:1a:76:32:57:28:4c:c9:20:9c:4b:31:12:43:
23:e5:f8:29:36:d9:09:af:cc:dd:c6:e8:21:93:85:26:ae:dd:
8e:1b:80:4b:9b:34:16:b3:7e:94:20:f6:0b:79:6d:dc:14:73:
f2:36:39:72:3d:e3:2f:d3:94:6d:8f:40:b3:a5:f3:d9:0e:87:
76:0d:16:86:75:dc:3c:3e:dd:f2:45:9a:ad:4a:32:0e:2d:7a:
fa:65:a4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 00:04:45 2024 by rpki-client on console-fra.rpki-client.org