Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/090b1403-746c-3184-ba2a-20199ab893c1.roa
File: 090b1403-746c-3184-ba2a-20199ab893c1.roa (raw, json)
Hash identifier: xAnR2f0eoxNc0fFlV6YKTu61qgNc4kqbV8okNCNLfd8=
Subject key identifier: CB:1F:E7:88:2B:DE:F8:E7:AE:CD:C9:8A:B8:B7:EB:04:6F:0E:D6:1E
Certificate issuer: /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial: 010D0C9F43285845840DBDE9B6F46351DCD52200
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/090b1403-746c-3184-ba2a-20199ab893c1.roa
Signing time: Fri 12 Apr 2024 01:00:26 +0000
ROA not before: Fri 12 Apr 2024 01:00:26 +0000
ROA not after: Thu 11 Jul 2024 01:00:26 +0000
asID: 7922
IP address blocks: 67.220.72.0/23 maxlen: 24
67.220.74.0/24 maxlen: 24
67.220.80.0/24 maxlen: 24
67.220.88.0/23 maxlen: 24
67.220.82.0/24 maxlen: 24
67.220.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 May 2024 13:14:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:84:0d:bd:e9:b6:f4:63:51:dc:d5:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Validity
Not Before: Apr 12 01:00:26 2024 GMT
Not After : Jul 11 01:00:26 2024 GMT
Subject: CN=7a9d3359-f4c7-40a1-b3c7-2c8ebb3a2a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d4:df:4d:09:84:a7:57:77:e2:d7:ff:f6:18:
2b:84:38:7f:3f:45:ce:3f:58:96:41:39:0b:a4:ca:
d8:52:09:52:31:8c:be:0a:c0:78:71:17:44:a1:43:
cd:22:36:d6:cc:f1:d7:fe:7e:ab:51:13:43:1b:35:
c6:f2:f5:97:1d:b5:26:8e:22:50:0d:02:d7:87:49:
6a:67:91:7f:c7:d8:b7:d3:3d:e7:bc:fa:29:d9:70:
14:a3:63:6e:41:4e:14:78:36:7d:13:7f:6a:e0:5b:
21:c8:ea:2d:78:ec:19:94:30:e9:e0:b4:f9:e0:0a:
9b:a1:8b:73:4b:b2:ed:98:f0:40:00:0a:ad:79:79:
41:8f:8d:a1:3a:2a:23:04:d1:d2:02:8b:49:46:64:
f2:e1:37:f1:81:9b:ac:92:35:04:83:64:81:c2:ea:
20:e8:f7:bd:01:78:d8:f4:70:cc:ca:0b:41:9c:14:
cc:d1:b8:f1:f2:ae:ad:1b:99:17:d3:9b:a4:d0:04:
c7:2d:4b:c6:d3:b3:fe:8c:1e:d3:55:59:da:00:f5:
d7:02:2c:1e:da:18:c7:56:a0:cd:1f:fb:d8:b1:e3:
29:00:7e:a1:7d:ac:4e:d5:c5:a1:cb:31:39:7a:bb:
e8:1d:4f:4e:31:4d:04:33:05:1e:25:f9:b8:1b:80:
c7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1F:E7:88:2B:DE:F8:E7:AE:CD:C9:8A:B8:B7:EB:04:6F:0E:D6:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/090b1403-746c-3184-ba2a-20199ab893c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl
X509v3 Authority Key Identifier:
keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.72.0-67.220.74.255
67.220.80.0/24
67.220.82.0/24
67.220.87.0-67.220.89.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:c8:31:69:7e:ee:7b:b5:3e:d1:d4:a0:f9:8b:9d:e8:1f:4b:
ba:0c:99:71:43:57:e4:7e:b9:90:2b:06:4e:69:a8:42:4e:dc:
31:2f:5d:c1:3d:d2:ee:53:16:60:7b:ca:c6:b9:b5:04:8c:18:
5c:cc:42:66:03:60:4f:1e:cc:29:bc:78:4d:ed:8c:f0:0e:04:
99:3c:f4:dc:b3:60:8f:fb:f1:95:76:fd:30:ba:1a:a5:13:bc:
1c:fe:b3:61:39:25:d0:70:e2:4f:ea:d2:99:00:08:c8:2e:ca:
a4:a3:d2:d9:ab:92:a4:74:5a:d3:75:ee:b3:82:9e:d3:20:33:
5f:7b:7d:6c:bf:40:76:62:ac:88:7c:64:3c:f8:80:a2:1a:3e:
de:45:9b:a4:6f:cc:46:f5:4a:72:fc:31:81:c4:87:4e:07:5d:
9b:31:4d:62:7f:af:07:a6:45:42:a0:02:84:19:bd:a5:2d:a2:
b2:bc:1b:6f:2b:29:70:30:7c:56:5a:b5:ba:e5:c9:c3:86:fc:
cb:4a:c0:28:3f:fd:81:31:20:be:8d:f9:55:49:21:97:af:74:
ba:1e:d8:9e:86:f9:d4:44:0e:bc:b7:7d:2b:8d:a9:09:ad:30:
e6:9b:68:d4:45:10:39:cd:ec:dc:3f:ad:81:ef:44:bc:12:f4:
02:4c:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:56 2024 by rpki-client on console-fra.rpki-client.org