Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/01565f89-5fae-375b-9d1f-01d2862eb8a3.roa
File: 01565f89-5fae-375b-9d1f-01d2862eb8a3.roa (raw, json)
Hash identifier: sg0fc3NuPY9y2J4kfMwi8KYg0AklzSJr9P8tNM/J6Oo=
Subject key identifier: C6:31:C6:05:0F:C3:4B:49:C8:FE:8C:63:EB:8B:76:9C:60:78:73:EB
Certificate issuer: /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial: 010D0C9F43285844A3B4B57AFC313FC652A9DE80
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/01565f89-5fae-375b-9d1f-01d2862eb8a3.roa
Signing time: Mon 22 Jan 2024 16:20:00 +0000
ROA not before: Mon 22 Jan 2024 16:20:00 +0000
ROA not after: Sun 21 Apr 2024 15:20:00 +0000
asID: 53488
IP address blocks: 24.246.128.0/18 maxlen: 24
64.127.208.0/20 maxlen: 24
173.246.192.0/19 maxlen: 24
198.185.218.0/23 maxlen: 24
205.236.71.0/24 maxlen: 24
216.116.224.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 16:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:a3:b4:b5:7a:fc:31:3f:c6:52:a9:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Validity
Not Before: Jan 22 16:20:00 2024 GMT
Not After : Apr 21 15:20:00 2024 GMT
Subject: CN=e72d4424-b4da-4890-ad41-a0cf43f65326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:65:4d:00:bb:66:10:5d:02:4f:c4:05:aa:
69:82:14:d1:e1:9a:94:94:5a:fc:89:b2:1f:d3:b7:
b6:53:fb:33:bf:21:10:91:dc:b6:16:49:74:d4:ec:
55:44:61:2a:f9:7c:a2:c2:9a:ac:03:92:a2:76:ab:
7c:50:85:25:2c:8b:a4:22:1e:06:5e:53:3c:77:70:
e8:fb:f0:89:fc:1e:9b:61:be:00:1e:1f:7f:31:7f:
14:56:ae:83:5f:71:ae:ac:27:1e:8f:33:a7:12:53:
59:99:e2:a4:36:77:24:ab:c0:90:1b:f1:2b:90:1b:
c1:81:00:dd:f1:ae:12:51:3b:aa:bb:8a:a1:3b:7f:
2f:07:16:5a:c3:77:62:65:ff:ba:21:d4:f2:91:b8:
10:2e:3b:f0:df:5d:c4:07:1b:0f:b2:dd:bf:ac:4e:
07:d5:67:33:be:f9:d1:88:7a:10:3e:ef:a4:c7:2b:
f9:e5:b5:f1:7f:d3:75:9b:45:ab:51:0b:ad:dc:60:
63:76:c6:42:79:97:c7:9d:1d:6b:5f:02:5a:a5:6e:
d8:59:ea:17:e5:f7:4b:c6:14:c6:ec:d3:9a:5c:24:
58:39:ae:e7:2d:f2:0c:6c:5d:79:ed:e3:27:1e:32:
28:05:12:48:b1:3a:d1:ce:1c:1f:8a:36:67:55:39:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:31:C6:05:0F:C3:4B:49:C8:FE:8C:63:EB:8B:76:9C:60:78:73:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/01565f89-5fae-375b-9d1f-01d2862eb8a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
X509v3 Authority Key Identifier:
keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
sbgp-ipAddrBlock: critical
IPv4:
24.246.128.0/18
64.127.208.0/20
173.246.192.0/19
198.185.218.0/23
205.236.71.0/24
216.116.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:53:ab:40:02:52:5d:b1:26:3a:f3:09:0b:f3:c4:62:fc:49:
d8:62:4d:94:aa:5e:5e:cf:ae:5e:4f:80:4f:26:ec:78:f4:27:
21:72:ca:79:7f:37:49:90:cc:fd:40:f2:9b:cd:1e:b7:4b:bf:
80:ca:6c:77:8a:6b:f9:ba:fc:bd:76:58:8e:30:80:22:0e:a6:
78:11:9b:9d:7b:e7:aa:af:ff:69:18:f8:13:1c:e9:08:f2:83:
e0:cf:af:8c:be:71:7a:a0:a8:4c:ea:05:1b:26:27:e0:9f:af:
55:5e:4f:30:60:60:69:df:6c:a0:37:de:11:67:fd:bb:85:ce:
84:e6:ef:00:25:d1:a0:8e:bf:1a:34:9f:99:ab:24:59:9b:bb:
2d:a6:66:b5:1e:c9:44:ed:23:2d:8e:67:73:97:63:86:02:ca:
39:07:c2:1a:35:8c:da:ca:32:64:2f:ca:ca:f7:44:ec:8d:29:
51:5c:54:17:c3:14:04:52:bc:be:7e:d7:18:70:49:4f:ff:bf:
1b:2a:a1:89:9a:f5:18:01:ad:40:be:51:61:fa:ab:df:72:31:
33:dc:28:3f:ae:44:e2:24:1c:ba:77:4d:a5:d9:e6:a0:87:b2:
ec:e8:5e:f4:08:f4:4b:21:15:38:21:07:6e:fd:ff:98:d3:e8:
b3:0a:5a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 19:02:00 2024 by rpki-client on console-fra.rpki-client.org