Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/8b6550b1-6b86-35be-bb20-42f9b4011eed.roa
File: 8b6550b1-6b86-35be-bb20-42f9b4011eed.roa (raw, json)
Hash identifier: AVCzL16bn6A9fx8A99VMgtCCdo9JyAvFCxiu3m6cRj4=
Subject key identifier: 7C:06:C1:79:17:32:2C:1A:72:96:D2:A8:4E:F0:B2:44:12:89:2C:A5
Certificate issuer: /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial: 010D0C9F43285845840DBE6443185923A0A17500
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/8b6550b1-6b86-35be-bb20-42f9b4011eed.roa
Signing time: Fri 12 Apr 2024 01:00:26 +0000
ROA not before: Fri 12 Apr 2024 01:00:26 +0000
ROA not after: Thu 11 Jul 2024 01:00:26 +0000
asID: 7018
IP address blocks: 67.220.72.0/23 maxlen: 24
67.220.74.0/24 maxlen: 24
67.220.87.0/24 maxlen: 24
67.220.88.0/23 maxlen: 24
67.220.82.0/24 maxlen: 24
67.220.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 May 2024 13:14:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:84:0d:be:64:43:18:59:23:a0:a1:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Validity
Not Before: Apr 12 01:00:26 2024 GMT
Not After : Jul 11 01:00:26 2024 GMT
Subject: CN=4e5b084d-b133-4d20-a020-19be5d12d301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c8:a1:c9:27:b2:86:3b:b3:2f:b1:b4:d4:20:
d4:ab:5c:c6:a3:8e:09:23:6b:0e:25:ee:a4:de:f1:
4a:b2:b3:83:42:5f:46:2e:08:75:bc:a0:bc:ce:22:
75:3c:fb:fa:c8:ac:91:37:58:54:c9:31:3a:dd:8a:
e6:10:f2:ae:3c:a7:9d:ed:a9:04:df:9a:28:a6:62:
00:34:ce:65:be:c8:b5:78:c4:13:0d:30:ad:7e:65:
43:9d:dd:0b:fc:7e:e1:df:21:8c:bb:a4:94:ee:e6:
f6:04:9e:68:45:e0:c5:ad:50:13:7d:65:80:13:5a:
5f:ce:3d:0c:5e:0a:ec:56:05:f2:2e:f6:ac:da:51:
c4:26:0c:60:de:98:28:ac:1d:94:ec:37:c5:74:b2:
31:59:ff:04:b0:f2:2a:09:44:d9:3f:5d:95:84:22:
d5:a3:8f:1e:d7:ac:a5:86:89:e8:e6:38:c4:be:9c:
e9:f0:cd:cd:32:8e:74:f2:e0:24:21:db:bd:5a:40:
6e:fd:be:fb:c3:93:3f:a1:83:3d:2e:81:aa:6e:c9:
00:b2:ff:41:e7:6a:8c:64:0b:97:ba:c0:c2:10:54:
52:ce:8e:6f:0b:42:2f:15:1f:e8:50:2d:0c:da:51:
24:a5:aa:86:32:9b:cb:68:1a:d6:e5:e9:81:32:fc:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:06:C1:79:17:32:2C:1A:72:96:D2:A8:4E:F0:B2:44:12:89:2C:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/8b6550b1-6b86-35be-bb20-42f9b4011eed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl
X509v3 Authority Key Identifier:
keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.72.0-67.220.74.255
67.220.80.0/24
67.220.82.0/24
67.220.87.0-67.220.89.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:4b:6a:d1:2a:9a:d3:f2:41:ef:b9:25:2a:89:0a:df:e9:8d:
8a:28:00:53:86:cc:f2:e5:5e:e3:28:35:c1:2e:69:f7:e9:ee:
81:06:f3:2a:14:b3:9a:15:56:7f:b3:97:72:a9:55:4a:36:0c:
db:11:19:e5:f1:f8:2f:17:05:4f:92:e2:db:76:19:0a:bf:ec:
5b:65:32:a8:07:08:7c:37:48:b6:8e:a6:85:21:31:17:de:8a:
73:bf:30:fe:5c:4c:8d:20:bc:c8:bf:76:50:33:ad:f0:e7:f2:
27:2e:ea:76:7d:4c:1e:d6:23:b2:68:c1:dd:5c:27:9d:e9:68:
33:43:29:b4:d8:b7:87:5c:5a:cb:71:39:c0:30:8c:69:e2:5f:
df:c0:40:4e:8a:d7:ae:ed:c4:69:bb:18:fd:8d:14:ef:cd:8a:
b4:ed:3c:62:05:65:1f:34:ad:51:df:b8:18:e2:70:1f:d0:a6:
94:c5:c6:d1:eb:11:eb:2d:54:16:3e:d5:3c:26:d0:16:e8:4b:
aa:69:6f:45:6c:17:0e:4d:0b:64:e5:8b:8a:54:7b:4a:25:8c:
52:a6:2e:be:58:93:60:e5:da:d2:7b:0b:a9:04:4f:a3:4d:2d:
14:84:9e:8f:a6:70:c9:f4:e1:23:ae:8a:97:86:c1:02:4e:26:
5b:36:4e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:56 2024 by rpki-client on console-fra.rpki-client.org