Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a3fb2337-c9d0-30b1-b1d9-ebaa33c751a9.roa
File: a3fb2337-c9d0-30b1-b1d9-ebaa33c751a9.roa (raw, json)
Hash identifier: lNX20zuWT/2fDSRiEenbCOxXcqWFgWf3xzHCaO+c1KI=
Subject key identifier: 26:25:F2:6F:5A:B0:B6:66:66:56:32:ED:4F:28:A4:92:05:35:21:94
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F4328583EC31683523E3B4A34D847B360
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a3fb2337-c9d0-30b1-b1d9-ebaa33c751a9.roa
Signing time: Mon 18 Jul 2022 16:59:05 +0000
ROA not before: Mon 18 Jul 2022 16:59:05 +0000
ROA not after: Sun 20 Oct 2024 04:00:00 +0000
asID: 137922
IP address blocks: 136.228.192.0/22 maxlen: 22
136.228.196.0/24 maxlen: 24
136.228.248.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c3:16:83:52:3e:3b:4a:34:d8:47:b3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Jul 18 16:59:05 2022 GMT
Not After : Oct 20 04:00:00 2024 GMT
Subject: CN=172fcbfb-503d-494d-88eb-d2556c9afb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:d6:fc:ca:93:d6:c2:b4:48:6d:dc:f4:d3:
57:ee:b1:80:27:10:04:e2:d2:3c:7f:6a:0f:a0:a5:
f1:6b:1e:23:68:81:71:81:fd:82:cd:e1:9f:c0:d9:
61:e0:05:f6:4b:25:66:71:b2:d3:cd:2f:99:31:49:
58:a9:04:63:1f:69:4c:e7:8e:90:b5:25:b7:f6:b4:
b8:a5:f3:f1:6e:dd:79:2a:c2:66:d0:28:de:18:a3:
cd:d6:e8:fd:9c:dd:dd:5e:7d:4a:22:93:f5:ff:83:
e6:4a:6d:be:cf:9d:a5:b1:37:23:51:fe:32:51:80:
84:89:eb:78:fb:1e:ac:d5:fa:2e:72:2c:52:6b:22:
b0:8e:bd:44:5f:b7:f4:af:7a:f3:b9:49:24:aa:21:
a9:29:e8:93:06:8e:7a:48:55:18:f3:8b:9c:af:3e:
5e:75:6b:b0:79:2f:ed:21:b5:12:00:7d:73:24:b1:
61:45:72:7b:02:61:84:65:5c:e2:0b:cc:2d:19:bb:
e2:8d:75:0c:ea:21:59:79:cc:2d:c8:2e:56:38:6a:
7e:e8:5e:1a:0c:2f:e0:eb:06:56:b6:11:dc:af:65:
94:99:a0:e0:a7:2b:c5:50:ad:c3:c6:ee:7f:48:33:
c6:06:34:a8:8c:6c:8b:11:cd:ce:b4:ac:74:2a:fc:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:25:F2:6F:5A:B0:B6:66:66:56:32:ED:4F:28:A4:92:05:35:21:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a3fb2337-c9d0-30b1-b1d9-ebaa33c751a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.192.0-136.228.196.255
136.228.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:5f:3f:50:0c:b2:4a:c4:bd:1a:5e:2c:63:e5:df:de:2a:7e:
6c:b1:a3:ca:cc:d1:a3:2a:28:55:21:f4:25:09:17:65:91:3a:
66:97:dc:36:96:34:7f:7a:25:8d:93:12:a0:5f:d7:af:bd:3e:
37:b9:7b:4c:eb:75:b0:d4:b5:a3:1f:bd:77:06:38:32:92:71:
fb:54:8b:6f:43:9c:d5:4f:f9:6f:ba:11:43:3b:07:ac:6e:1d:
aa:72:56:ba:bc:aa:50:63:71:c8:cb:85:29:b6:17:df:f5:d6:
a2:ca:c1:b4:a4:b5:d6:48:03:81:cc:9c:09:c4:2b:0d:4b:78:
71:4b:c9:46:e1:3e:f5:ac:c7:01:bb:97:84:fb:17:a3:89:39:
2c:36:3e:8f:df:8f:41:10:ec:6b:0b:5d:29:67:27:31:cc:10:
10:1b:f6:49:4f:4d:a4:82:ef:be:c2:e0:c6:eb:d5:7f:15:aa:
a0:5f:8c:bc:9a:91:18:f6:a2:e9:24:65:a3:10:f1:9b:cb:ec:
66:80:83:03:33:cd:41:6f:ef:5a:95:ea:45:43:37:c4:9c:65:
50:4c:7e:22:7d:17:56:49:c4:89:72:b3:f4:fa:23:c8:ea:46:
2b:ea:ac:c5:29:bd:f6:11:0d:9b:d2:3c:d4:ec:7f:32:82:bd:
8d:ae:b3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:18 2023 by rpki-client on console-fra.rpki-client.org