Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/bafbfcd5-1b74-3688-8b19-30567c60645e.roa
File: bafbfcd5-1b74-3688-8b19-30567c60645e.roa (raw, json)
Hash identifier: HylEKqzEbLV5zLrqqxvJFr9TBc4Zw7I6JB/kvDU24yI=
Subject key identifier: BC:D1:20:2A:FF:77:3E:7B:4B:AF:D8:5C:E1:D8:F5:63:EA:7E:74:06
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F43285846C63FC6B116D69D5FC22DDF00
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/bafbfcd5-1b74-3688-8b19-30567c60645e.roa
Signing time: Mon 05 Aug 2024 10:51:34 +0000
ROA not before: Mon 05 Aug 2024 10:51:34 +0000
ROA not after: Sun 03 Nov 2024 11:51:34 +0000
asID: 63199
IP address blocks: 148.153.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 11:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c6:3f:c6:b1:16:d6:9d:5f:c2:2d:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Aug 5 10:51:34 2024 GMT
Not After : Nov 3 11:51:34 2024 GMT
Subject: CN=b5a149b2-2227-47b1-a513-16d3e4be6fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:52:3a:bf:f8:d9:fc:df:e4:7f:23:68:41:
ce:38:1d:51:53:4f:7c:70:0f:f1:6a:02:58:7c:ec:
f7:ac:0c:4d:81:c3:2b:42:6a:fe:05:37:0b:31:5d:
b5:49:51:bf:64:5b:45:06:81:50:f7:67:61:dc:29:
37:f9:f2:41:5d:69:e7:96:63:f0:16:97:fb:27:6d:
60:cd:01:ce:82:02:c1:34:ef:ca:65:7c:26:ae:90:
6f:64:eb:65:43:2a:4f:ae:0a:91:7f:e9:cd:e8:26:
d7:7b:ff:fd:9b:70:23:d7:91:e9:22:8c:a8:74:83:
02:3e:8a:77:b6:22:ec:3e:45:c8:2e:0c:cb:64:6d:
1a:95:5b:57:45:1a:64:a6:c0:76:94:e3:bb:31:58:
ab:d3:76:54:b2:f7:11:5e:91:1b:6c:83:a9:db:e1:
b1:4e:1b:96:8e:03:3d:e2:e1:da:39:d0:f6:f8:2a:
7a:b2:78:c8:ee:a7:46:b8:98:dd:e2:46:1a:5d:08:
33:90:05:57:f2:af:f8:bb:da:37:79:ab:64:31:f0:
7e:d1:9a:3f:cf:06:d2:fd:ee:91:93:bc:86:a2:dd:
2c:8f:41:cd:2e:78:d3:b5:fb:52:47:ff:52:83:bd:
1f:c5:ba:91:dc:cb:3c:3a:e1:11:85:7c:c5:1c:96:
22:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D1:20:2A:FF:77:3E:7B:4B:AF:D8:5C:E1:D8:F5:63:EA:7E:74:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/bafbfcd5-1b74-3688-8b19-30567c60645e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:72:a6:8c:92:d7:ab:01:85:24:bb:05:86:32:0c:10:f2:03:
e8:c6:0f:bd:f6:d5:47:2e:55:3a:30:9e:89:1e:90:16:67:cb:
ad:55:80:2c:29:79:8e:17:76:44:e0:0c:34:48:28:51:f7:cd:
35:a0:4e:eb:60:00:27:35:37:2e:25:80:fc:0f:44:21:9a:43:
61:68:70:4b:54:99:ca:a9:07:d2:82:c0:57:1c:f3:44:0c:20:
25:0a:bf:29:03:19:25:04:a8:85:e3:f8:50:cd:44:e4:0c:01:
3b:87:ca:35:77:69:8b:15:ff:d2:79:69:aa:58:a3:be:19:b7:
9d:26:2c:9d:a2:d9:a4:f3:68:1e:07:7c:87:53:8a:47:5b:af:
02:38:16:be:80:eb:ff:c1:66:bd:1f:ba:b3:94:bf:60:2a:c1:
93:c9:01:94:61:2e:d9:df:6f:8e:de:19:f2:50:df:a6:15:8d:
08:20:b3:56:31:6b:ab:ee:c4:a5:dc:3a:14:4a:c4:79:b3:13:
ef:48:b5:d4:3a:70:8d:c2:37:8b:ac:dc:54:77:48:b6:57:ef:
80:87:42:6a:f4:50:3b:47:b3:0f:1d:d9:62:2d:a3:39:01:41:
26:b2:61:46:cd:77:c8:a6:fa:5a:90:51:ef:d5:5c:29:7c:22:
63:85:c3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 15:08:08 2024 by rpki-client on console-ams.rpki-client.org