Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7d55f77c-79ee-3634-8352-aa1ba60f51b2.roa
File: 7d55f77c-79ee-3634-8352-aa1ba60f51b2.roa (raw, json)
Hash identifier: plD8I8D16QXRvXhRZPzZptlD2syBy7loa962rjQu7+A=
Subject key identifier: A2:15:3D:34:1A:9B:9C:7A:7B:C6:47:32:65:D4:3E:35:E4:F5:9F:AD
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F43285846276553A6EEF53FB0F5079800
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7d55f77c-79ee-3634-8352-aa1ba60f51b2.roa
Signing time: Sun 09 Jun 2024 13:13:42 +0000
ROA not before: Sun 09 Jun 2024 13:13:42 +0000
ROA not after: Sat 07 Sep 2024 13:13:42 +0000
asID: 834
IP address blocks: 72.14.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:27:65:53:a6:ee:f5:3f:b0:f5:07:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Jun 9 13:13:42 2024 GMT
Not After : Sep 7 13:13:42 2024 GMT
Subject: CN=0edb337f-0236-4d0d-9c08-63d5662b0a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:ce:d3:a9:4c:4a:e8:2f:a2:6e:66:d2:6b:
6f:03:1c:09:36:f5:7f:b3:ab:fe:fd:4e:2c:c1:c8:
44:f8:69:d6:0d:3b:61:ac:2d:03:27:ed:0f:99:32:
be:3a:f4:a3:da:44:c4:67:6b:be:ec:5b:e6:6a:2e:
07:35:ef:b7:fb:fc:e8:8b:91:13:ac:b9:87:67:65:
55:21:fd:4a:e6:ba:90:ed:60:6f:0b:a7:c4:19:f5:
f7:a2:6d:b5:94:52:fc:05:eb:8c:dc:e1:12:fa:0e:
41:08:5e:3f:c5:9f:40:8d:96:ff:bb:18:76:45:34:
3a:0b:67:a1:21:7c:e9:61:3f:1a:eb:62:97:ad:58:
32:34:41:97:50:23:9d:8e:b9:6d:55:b6:bf:04:e6:
b5:56:7e:31:c2:df:fe:ed:a9:a4:4b:57:4f:9c:5f:
50:f5:6a:1a:c0:f9:8c:6e:66:24:03:0b:4c:f4:94:
8d:f7:e8:d6:02:13:bc:d5:26:88:ed:ac:15:4e:82:
c9:d7:43:24:53:63:ab:f8:4e:d8:7f:44:d1:ea:c9:
97:66:24:34:bc:c8:a4:b6:7f:2d:d4:14:32:e7:fa:
c9:0c:ab:0e:9d:85:41:19:91:9a:94:4d:5b:bd:e1:
4c:d0:81:1e:2d:8a:a2:32:98:78:f2:28:a0:7c:f4:
98:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:15:3D:34:1A:9B:9C:7A:7B:C6:47:32:65:D4:3E:35:E4:F5:9F:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7d55f77c-79ee-3634-8352-aa1ba60f51b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:0e:e7:1b:3b:0f:83:f8:2e:43:72:50:48:46:77:4f:12:1b:
fd:90:ed:c0:c6:31:e1:ec:73:9e:e2:55:6b:01:0c:2e:d9:c8:
dc:f2:3d:3e:f9:6b:fb:16:06:49:e7:38:c3:1c:4c:bb:a2:36:
45:56:06:ee:25:bf:2f:99:c5:1c:a1:b2:75:3f:2e:9f:fa:80:
40:46:b4:89:54:68:43:d5:e6:e7:08:e4:4c:de:8e:36:67:71:
7d:13:bb:c0:cc:73:af:ba:30:99:68:1b:4c:60:18:84:4b:41:
69:5a:0b:a3:1b:3c:1f:f1:4f:ae:1b:ae:27:fe:6c:44:a1:42:
ae:a9:da:34:e3:7b:37:b4:46:e1:2b:86:ac:0a:e7:d8:06:31:
a0:42:08:aa:55:bc:b8:24:02:fc:e4:80:f9:fa:ef:e0:3d:40:
7b:82:ad:6a:66:3f:d7:32:cb:8d:44:fd:e4:8e:a4:9d:a6:d8:
7f:41:c9:1d:5c:bc:d7:bc:cb:2d:b4:99:30:e2:e4:d8:78:f3:
9d:b7:70:97:f3:e6:dd:c2:14:af:47:bd:27:b6:70:a0:66:f0:
77:f7:cb:17:02:db:61:d1:53:ab:3c:2e:a0:df:b2:64:f3:7d:
81:62:40:06:fc:6b:9e:d9:e2:c7:de:63:4b:b0:07:fe:1b:40:
a3:f0:49:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 16:53:12 2024 by rpki-client on console-ams.rpki-client.org