Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b53b0419-87d4-3bec-b0e7-a05d40261ab5.roa
File: b53b0419-87d4-3bec-b0e7-a05d40261ab5.roa (raw, json)
Hash identifier: nSzfILVh+e5aaV28lClnELszrTvWkDoARuHXSUjGMdY=
Subject key identifier: 43:11:A5:65:34:E3:5C:34:1E:52:27:F4:05:7D:99:A4:97:88:14:8F
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F4328584029C0C48A285AD3739261EF00
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b53b0419-87d4-3bec-b0e7-a05d40261ab5.roa
Signing time: Fri 12 Aug 2022 20:12:17 +0000
ROA not before: Fri 12 Aug 2022 20:12:17 +0000
ROA not after: Thu 14 Nov 2024 05:00:00 +0000
asID: 834
IP address blocks: 72.14.130.0/24 maxlen: 24
72.14.151.0/24 maxlen: 24
72.14.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Dec 2022 15:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:29:c0:c4:8a:28:5a:d3:73:92:61:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Aug 12 20:12:17 2022 GMT
Not After : Nov 14 05:00:00 2024 GMT
Subject: CN=1f74a547-1052-46b6-ba81-6be71bfe8efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:55:38:57:e2:b9:ce:dd:47:52:eb:35:62:
f9:1a:66:f5:65:a8:22:70:cb:29:d8:84:26:eb:b1:
ae:80:e7:59:26:7e:ef:45:c0:94:79:d1:c5:d4:c9:
af:21:4c:b4:75:c7:89:11:87:2e:fa:ef:27:81:e8:
1a:32:e5:34:e2:13:06:40:1f:47:f5:ec:b8:29:ce:
fd:2d:18:e1:bf:09:52:66:b0:77:13:f8:3b:a1:1f:
58:f2:36:b7:5a:71:b6:03:78:73:25:29:db:c3:98:
02:e7:4f:d7:3e:6b:cb:86:28:be:65:79:ad:c6:6c:
5f:8d:59:ba:d8:21:b3:64:0a:53:d2:8e:ce:d9:be:
f2:0f:47:9f:de:fb:a7:ba:ab:07:d5:06:28:3d:2d:
7a:53:99:b4:a6:15:0e:77:01:c4:b2:fa:02:14:fd:
94:3a:a1:2b:c0:ec:a5:96:bf:e6:2d:0a:ff:40:d1:
77:f4:0d:91:e3:06:1b:5a:b4:8e:7c:a7:03:8b:a3:
c0:a4:24:e2:7d:71:49:3d:61:09:fe:e5:82:08:a7:
6a:fc:57:ab:15:69:60:1a:7c:47:b4:c0:9c:c5:37:
8d:e3:13:eb:aa:35:12:cc:97:67:ff:d5:f4:8e:48:
da:2c:6a:81:17:05:9e:48:24:72:51:3f:fb:a9:a0:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:11:A5:65:34:E3:5C:34:1E:52:27:F4:05:7D:99:A4:97:88:14:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b53b0419-87d4-3bec-b0e7-a05d40261ab5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.130.0/24
72.14.151.0/24
72.14.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:6a:55:d4:16:fb:6c:6c:b4:0e:0b:fe:bc:26:81:5d:6d:af:
92:aa:fd:d7:3b:5f:a6:b4:d0:97:db:09:e5:d1:77:56:c6:87:
0c:3b:e0:e7:26:b7:65:34:50:27:db:46:d3:29:15:a3:0f:72:
2f:cf:53:18:9a:f0:f9:95:1b:6d:69:93:b4:59:90:8e:fe:c2:
59:3f:66:fd:be:40:d2:97:f2:09:6f:56:91:e0:b2:e4:76:78:
13:86:74:52:37:8b:dd:79:c1:58:e0:04:95:00:ca:c5:d8:8a:
a6:06:44:54:c5:7f:5a:0b:e0:68:9b:21:f3:f5:31:65:ec:31:
f0:c3:ef:57:60:0c:09:3a:99:3d:06:89:11:99:58:16:65:cf:
ca:ba:c6:3c:bd:98:9b:04:8e:39:97:bf:c3:40:32:31:b4:e1:
09:df:84:d2:2b:f5:6a:50:8c:f5:01:1e:bc:23:81:6e:95:40:
69:78:65:03:0b:4e:12:38:86:b9:d9:1a:0a:df:5f:6c:63:ce:
ec:11:8e:40:2b:ae:16:f6:b3:ab:d5:72:7b:cd:54:eb:04:b3:
87:df:c5:75:23:af:0e:31:c8:ce:c2:f0:e5:1a:29:e4:68:53:
40:f9:14:51:91:a4:9e:ee:58:cb:b2:1f:50:d8:ca:50:e1:4e:
b6:40:3c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:05 2024 by rpki-client on console-fra.rpki-client.org