Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/0bbd2dbe-9797-317e-aa23-2914ccd3fcab.roa
File: 0bbd2dbe-9797-317e-aa23-2914ccd3fcab.roa (raw, json)
Hash identifier: CBrlY/lKpwbNc3+j5u8T/eYcoawVuKhQhGi1yuzQreo=
Subject key identifier: C3:83:7F:FE:3E:3A:13:28:C7:0D:F2:3E:7E:BA:BF:C8:A0:ED:1F:DE
Certificate issuer: /CN=f9a80165-8f31-4fb3-9144-bcb45cfd2754
Certificate serial: 010D0C9F4328584542957450D8129F9E7327BF80
Authority key identifier: B0:02:F4:EA:50:CC:0D:5C:A2:A3:07:89:E3:7B:9B:52:A6:EF:74:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/0bbd2dbe-9797-317e-aa23-2914ccd3fcab.roa
Signing time: Tue 19 Mar 2024 14:10:33 +0000
ROA not before: Tue 19 Mar 2024 14:10:33 +0000
ROA not after: Mon 17 Jun 2024 14:10:33 +0000
asID: 399693
IP address blocks: 165.140.232.0/22 maxlen: 24
23.174.24.0/24 maxlen: 24
2602:fe87::/36 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Mar 2024 18:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:42:95:74:50:d8:12:9f:9e:73:27:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a80165-8f31-4fb3-9144-bcb45cfd2754
Validity
Not Before: Mar 19 14:10:33 2024 GMT
Not After : Jun 17 14:10:33 2024 GMT
Subject: CN=1f9cda47-ca01-4ddf-8ba1-ad3d8445303d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cf:5a:52:df:72:0c:e9:43:4d:9c:c2:91:ac:
77:74:05:e5:15:68:b7:66:bc:52:d9:0d:fd:23:61:
5d:ca:31:d7:29:47:a4:be:03:a3:64:6b:86:33:f2:
4e:b0:9d:90:9f:1f:02:93:1c:90:0d:c8:e8:dd:71:
26:26:b1:25:ea:af:a0:f8:c1:9e:ea:1f:22:4d:fe:
cd:89:78:73:78:e1:e1:dc:4f:a5:aa:2a:a3:56:5a:
b1:85:bf:13:b1:91:55:d8:0e:9f:c7:cd:db:bc:62:
af:9e:d8:1d:2e:2d:4e:b2:38:16:46:72:48:e2:fd:
b0:6b:29:67:7a:85:81:bb:46:02:54:16:88:ec:16:
24:a6:df:6b:2c:bd:07:2a:5c:97:19:19:1e:65:79:
bb:95:15:17:8a:8e:f8:6c:d7:e9:9b:58:81:fd:c9:
6a:71:d8:59:30:dc:20:0d:47:86:6d:38:2e:19:1c:
0b:45:e7:07:b6:74:39:c5:b5:46:9e:d9:8b:73:0d:
51:75:69:1d:76:b6:69:40:24:51:89:ed:93:1f:1b:
82:d7:78:99:2d:15:b5:43:ca:04:51:91:5d:5d:9a:
ce:91:cd:72:d8:22:ee:f8:15:15:08:d0:21:c2:20:
a2:21:be:ce:0c:16:15:67:31:16:09:11:7d:1c:99:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:83:7F:FE:3E:3A:13:28:C7:0D:F2:3E:7E:BA:BF:C8:A0:ED:1F:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/0bbd2dbe-9797-317e-aa23-2914ccd3fcab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754/f9a80165-8f31-4fb3-9144-bcb45cfd2754.crl
X509v3 Authority Key Identifier:
keyid:B0:02:F4:EA:50:CC:0D:5C:A2:A3:07:89:E3:7B:9B:52:A6:EF:74:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f9a80165-8f31-4fb3-9144-bcb45cfd2754.cer
sbgp-ipAddrBlock: critical
IPv4:
23.174.24.0/24
165.140.232.0/22
IPv6:
2602:fe87::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:75:63:9c:18:a7:69:4a:f8:1e:4b:81:64:c8:74:1d:78:02:
74:24:89:ca:f1:1d:8b:fe:c8:ee:0c:1e:d5:a3:7e:0a:92:eb:
e6:cb:48:58:9b:b4:7a:f5:29:4a:fd:b3:a0:24:2d:6e:03:aa:
5f:38:e8:89:17:20:11:69:55:18:be:4e:8a:db:12:56:25:d0:
12:1e:6c:d5:48:cc:e7:b2:44:98:be:71:15:29:49:08:a2:19:
ec:c8:8a:be:14:be:31:fb:6d:f0:4a:e4:bf:4c:bc:96:a9:2b:
01:f6:1b:36:86:dc:5c:c1:a8:03:f6:4f:16:cd:9a:a7:d3:5c:
be:24:ab:46:57:9d:30:de:a8:c0:a3:b8:88:05:40:9b:57:da:
61:6d:78:30:22:9b:70:a0:d3:90:25:f9:52:8a:fd:e1:ba:82:
5e:9f:5d:11:b1:47:c8:3f:33:59:b6:75:47:00:74:6c:fa:fc:
51:4a:01:90:1c:00:35:17:7a:77:7e:b7:13:ff:59:85:2a:76:
d5:ea:40:bf:f4:d5:65:07:78:b6:b4:22:c2:5c:89:b9:60:63:
f1:7f:d6:d3:11:2a:73:7f:99:51:53:da:b7:35:c1:d6:a2:19:
b1:8b:f3:22:30:49:af:31:4d:b7:68:62:a8:cf:9b:72:d1:d4:
25:2d:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 20:54:50 2024 by rpki-client on console-ams.rpki-client.org