Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ea695da-d92a-47c3-a803-b435c34488af/d2495c99-6583-3414-9f56-a8cb74b2e8fb.roa
File: d2495c99-6583-3414-9f56-a8cb74b2e8fb.roa (raw, json)
Hash identifier: 8DICbEZ5svrFa3432wRGfIP7OwvyC/QG+nIWVVnvU0Y=
Subject key identifier: 40:DF:9A:8A:C6:BB:CB:90:FA:20:4A:46:72:43:2B:3C:F1:54:8D:53
Certificate issuer: /CN=3ea695da-d92a-47c3-a803-b435c34488af
Certificate serial: 010D0C9F43285842887D83EE8D6B26FEB8332780
Authority key identifier: 31:06:58:D7:CA:C1:02:33:06:C9:27:B6:88:4C:2D:B8:EB:A8:50:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ea695da-d92a-47c3-a803-b435c34488af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ea695da-d92a-47c3-a803-b435c34488af/d2495c99-6583-3414-9f56-a8cb74b2e8fb.roa
Signing time: Thu 13 Jul 2023 12:48:06 +0000
ROA not before: Thu 13 Jul 2023 12:48:06 +0000
ROA not after: Wed 11 Oct 2023 12:48:06 +0000
asID: 7018
IP address blocks: 216.9.236.0/24 maxlen: 24
216.9.237.0/24 maxlen: 24
216.9.238.0/24 maxlen: 24
216.9.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:88:7d:83:ee:8d:6b:26:fe:b8:33:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea695da-d92a-47c3-a803-b435c34488af
Validity
Not Before: Jul 13 12:48:06 2023 GMT
Not After : Oct 11 12:48:06 2023 GMT
Subject: CN=d8708c4b-ee22-418e-855c-8206718ed2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:6a:aa:47:0e:9a:7e:42:55:85:a9:7c:d0:
71:f5:e5:a7:dc:3a:72:3f:ad:02:34:88:9f:26:af:
a7:d9:ab:4e:64:b2:c5:7d:c2:26:4c:0f:35:bf:ca:
82:b1:b1:1f:38:46:59:d5:13:2a:52:7c:4d:4a:06:
b9:e2:87:e7:62:3a:a4:7e:79:ef:98:21:7c:0c:a1:
84:f3:e7:d0:7b:b6:68:9a:a5:a9:76:4b:96:17:61:
b1:f4:e3:c8:8f:57:00:be:54:2e:c9:0e:c6:bb:1b:
95:89:8b:1d:3c:08:7f:40:e3:9b:1f:5d:9e:d6:26:
87:1d:4d:7f:eb:25:f4:ef:34:f5:8c:fb:fd:2c:2a:
cd:da:9a:06:60:55:bb:2d:04:d4:1d:0e:42:6c:b3:
64:ad:35:4b:56:29:0a:8c:69:35:bc:bf:f2:0b:c1:
f8:33:29:67:77:a6:9b:11:e1:b4:77:d1:d2:57:13:
8b:f6:78:f3:de:4b:cc:d0:24:85:2f:d0:21:aa:e0:
37:d5:b7:65:67:f3:3d:b3:98:31:d4:51:f3:fc:24:
08:6e:b3:13:b1:0d:df:a3:c7:f9:bb:84:ef:b3:ea:
22:ae:5d:da:2c:fa:98:cb:09:9f:16:f8:44:c6:5c:
36:5e:93:be:fc:f2:e6:8d:5b:fd:ec:72:f5:c5:70:
11:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DF:9A:8A:C6:BB:CB:90:FA:20:4A:46:72:43:2B:3C:F1:54:8D:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ea695da-d92a-47c3-a803-b435c34488af/d2495c99-6583-3414-9f56-a8cb74b2e8fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ea695da-d92a-47c3-a803-b435c34488af/3ea695da-d92a-47c3-a803-b435c34488af.crl
X509v3 Authority Key Identifier:
keyid:31:06:58:D7:CA:C1:02:33:06:C9:27:B6:88:4C:2D:B8:EB:A8:50:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ea695da-d92a-47c3-a803-b435c34488af.cer
sbgp-ipAddrBlock: critical
IPv4:
216.9.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:0a:de:32:6c:fa:1c:9e:5d:fa:a2:c8:ba:83:ec:e9:6c:37:
78:68:38:b1:cd:80:54:ab:1c:69:24:88:0f:e3:57:f7:c5:9c:
70:56:0c:e3:da:75:6f:b8:28:65:76:52:78:48:f0:44:bf:37:
ec:6a:b9:95:65:53:97:af:ce:5b:bf:a5:90:87:97:ca:e3:81:
67:3e:e5:52:e0:49:88:59:a8:20:ca:15:88:c4:05:3e:a5:22:
38:99:04:ca:0b:9d:60:89:09:ab:0a:0d:84:00:0d:a8:b5:37:
ef:a9:1c:8b:f2:e9:fb:77:18:f8:1c:1e:86:e8:da:0f:79:bc:
d4:ee:cc:38:a8:20:21:b7:93:0d:c2:08:a6:88:e7:65:07:26:
ef:77:07:52:8e:d9:1d:29:35:70:cc:1e:7a:f2:20:2d:71:25:
06:45:f0:b4:9e:d1:52:35:a4:8f:d1:71:77:5a:5e:b7:7d:c0:
d8:c6:b3:42:e7:87:cc:1b:40:8d:8d:39:83:02:30:fe:19:df:
44:1b:be:7c:9e:88:00:d1:3b:ab:1a:15:26:48:01:0b:ee:8a:
3d:83:7a:2d:b2:22:85:ac:10:ff:18:28:61:b1:1e:49:b6:89:
b7:cb:a3:2e:fb:a0:8c:01:ed:dd:b8:56:ee:32:94:cc:8f:00:
f7:17:68:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:18 2023 by rpki-client on console-fra.rpki-client.org