Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86/961c47e8-89ac-3c2d-8336-c3f6c1a12017.roa
File: 961c47e8-89ac-3c2d-8336-c3f6c1a12017.roa (raw, json)
Hash identifier: 18P5YGWCPqZLqJphnwDj2Gvq2lk1vnEyOv0LOTMeyT0=
Subject key identifier: D9:B7:C8:18:94:0D:4E:CB:5B:79:64:C4:01:41:A9:1A:1A:78:0D:66
Certificate issuer: /CN=e7b5edc2-8809-41fc-a3b8-3d01525cdb86
Certificate serial: 010D0C9F432858442CC94C20BA19D08FC1092600
Authority key identifier: F8:8C:34:34:A0:6C:B6:46:FC:27:7B:AC:6C:E0:7C:32:53:4D:88:88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86/961c47e8-89ac-3c2d-8336-c3f6c1a12017.roa
Signing time: Mon 11 Dec 2023 02:00:15 +0000
ROA not before: Mon 11 Dec 2023 02:00:15 +0000
ROA not after: Sun 10 Mar 2024 02:00:15 +0000
asID: 53667
IP address blocks: 45.41.196.0/22 maxlen: 24
74.122.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 11:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:2c:c9:4c:20:ba:19:d0:8f:c1:09:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b5edc2-8809-41fc-a3b8-3d01525cdb86
Validity
Not Before: Dec 11 02:00:15 2023 GMT
Not After : Mar 10 02:00:15 2024 GMT
Subject: CN=40f973f9-4b2a-4291-b58f-f8daab18c423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:51:08:18:4c:37:0f:37:9f:49:c5:dd:0c:
1c:dc:73:48:7b:c8:86:94:84:29:98:87:9e:9c:8a:
0e:3e:24:69:bd:36:f2:e0:87:6a:e7:1c:b9:2c:34:
0d:dd:79:b0:3e:1a:33:32:f3:03:5e:37:1b:98:09:
6d:65:50:1e:09:fc:98:1d:ba:74:79:9d:02:d8:60:
d8:3e:d9:0d:c6:ea:1a:43:65:4f:ed:bb:f2:7f:98:
12:f6:58:56:25:0e:45:8c:4d:41:16:52:b1:04:ab:
d7:7a:4d:c4:fb:c6:fc:a2:d4:72:fc:69:2c:35:78:
c7:51:0d:0d:d4:6d:9d:c7:7c:47:b4:48:6f:f2:6b:
3b:e7:c2:31:ac:61:1e:3f:07:a9:8b:d7:60:e2:ae:
10:8c:da:a3:09:56:89:c8:87:ae:ce:58:13:b2:ec:
38:52:19:69:81:7b:fc:a3:23:be:09:97:08:19:ab:
32:5e:f1:81:12:cb:8a:10:20:e4:58:26:78:20:c2:
ff:27:9d:21:94:bb:82:ba:87:2b:d5:3e:dc:00:f9:
77:06:a6:c8:06:5c:9b:53:12:93:c0:69:14:51:69:
83:6b:3c:d7:91:a3:a5:43:b8:48:7e:7d:37:aa:81:
01:44:73:41:f1:c2:b4:fb:ac:b7:eb:65:79:d5:95:
54:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B7:C8:18:94:0D:4E:CB:5B:79:64:C4:01:41:A9:1A:1A:78:0D:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86/961c47e8-89ac-3c2d-8336-c3f6c1a12017.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86/e7b5edc2-8809-41fc-a3b8-3d01525cdb86.crl
X509v3 Authority Key Identifier:
keyid:F8:8C:34:34:A0:6C:B6:46:FC:27:7B:AC:6C:E0:7C:32:53:4D:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86.cer
sbgp-ipAddrBlock: critical
IPv4:
45.41.196.0/22
74.122.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:bf:48:5d:c2:8f:88:97:ff:37:f1:9d:0a:5a:11:4f:61:92:
05:aa:62:8c:b6:df:9c:c1:ad:a6:53:30:a1:d4:9d:8c:1e:b8:
32:b2:12:dc:96:00:fd:e0:be:22:70:ef:45:04:cd:81:e7:4b:
01:a9:1d:d4:9f:fb:68:e9:0c:22:a8:e3:cd:a1:bc:e7:61:02:
75:50:87:ae:54:40:ef:b4:3d:5b:04:12:e0:b7:d9:a7:76:45:
f8:fe:47:5c:65:14:d4:88:eb:5b:7b:b1:66:9a:75:03:df:14:
db:e2:b0:b7:15:a2:8e:f0:13:13:37:10:d4:3b:21:de:38:c7:
c1:17:14:d3:8d:bb:c6:4f:97:46:5c:44:e6:d5:87:ed:70:c9:
8d:d9:f9:9e:49:9c:c8:eb:23:47:1e:87:3c:7f:f9:ec:b8:24:
87:40:02:32:c4:ff:c6:07:e0:e4:38:01:f2:ac:51:7f:67:a3:
35:be:a1:38:56:b6:56:b1:e2:04:34:6b:17:4a:43:9e:af:cc:
ee:08:0e:b6:d6:11:64:ff:11:ec:43:e6:9d:c6:6f:c9:06:68:
d3:3c:1f:29:ea:72:11:db:50:d2:80:9a:8c:86:3a:41:74:bf:
6a:19:c8:cb:c1:9c:94:11:ac:79:6b:91:c7:f7:28:02:89:87:
76:d2:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:36:41 2024 by rpki-client on console-fra.rpki-client.org