Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/bbc0fdd0-60a3-35b9-b2ca-a7aaf0b9c9cc.roa
File: bbc0fdd0-60a3-35b9-b2ca-a7aaf0b9c9cc.roa (raw, json)
Hash identifier: x1+vSooQQ6XRBHH1NKKTBrhnmVZXjgvEodHW05Y/0/Y=
Subject key identifier: 01:28:3E:6A:EB:42:53:39:D5:CE:0F:0E:50:15:3C:DE:69:88:DB:FC
Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial: 010D0C9F4328584754E0CB4AFF74B81AA140E600
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/bbc0fdd0-60a3-35b9-b2ca-a7aaf0b9c9cc.roa
Signing time: Wed 25 Sep 2024 13:00:41 +0000
ROA not before: Wed 25 Sep 2024 13:00:41 +0000
ROA not after: Tue 24 Dec 2024 14:00:41 +0000
asID: 394893
IP address blocks: 203.20.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 19:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:54:e0:cb:4a:ff:74:b8:1a:a1:40:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Validity
Not Before: Sep 25 13:00:41 2024 GMT
Not After : Dec 24 14:00:41 2024 GMT
Subject: CN=a6edea51-67ea-4d52-90d1-5f324813451c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:5e:38:35:ed:06:d6:87:34:c3:72:67:11:
d5:24:c7:bd:c8:e8:4e:d2:2d:78:fd:bf:f1:3c:30:
63:3a:8f:83:21:a3:e9:7e:0a:3a:70:da:3c:a8:d9:
1c:06:fc:57:57:c3:55:66:10:9c:54:73:8c:b1:93:
97:3c:f8:b9:27:a0:96:ab:46:7f:4d:4c:66:12:10:
77:12:29:22:c9:f8:b9:f9:ee:fa:80:93:35:0e:4a:
7a:21:6f:3f:9c:41:01:cc:c1:a3:50:77:5c:3b:26:
63:d2:8f:96:ab:1e:f7:49:28:9d:d6:12:42:14:46:
f4:0c:bb:51:1b:33:ae:fb:bc:02:97:b1:22:94:53:
b4:80:55:46:94:dc:d9:16:cb:aa:28:5e:e0:05:8b:
f0:9d:39:c3:8a:d5:a3:c8:4d:29:39:87:5d:2f:20:
8c:8c:61:63:d6:13:76:be:e2:bc:f8:ab:56:d7:b6:
13:1e:84:29:14:c5:03:51:8b:91:1f:3f:9d:02:1d:
70:7e:28:ad:be:b0:fc:0f:68:05:06:0d:b2:94:6a:
76:7b:48:ff:1a:cd:12:b5:15:85:64:d4:1a:3a:77:
46:f1:42:f6:48:a5:89:47:c2:12:33:74:62:17:86:
8e:a7:e5:c8:8e:43:2b:d9:45:3e:dc:1f:3a:57:86:
11:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:28:3E:6A:EB:42:53:39:D5:CE:0F:0E:50:15:3C:DE:69:88:DB:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/bbc0fdd0-60a3-35b9-b2ca-a7aaf0b9c9cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
X509v3 Authority Key Identifier:
keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
sbgp-ipAddrBlock: critical
IPv4:
203.20.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:9a:05:90:43:d3:92:59:15:9e:46:4d:1d:a2:b7:1e:1b:4e:
dd:31:72:2a:ad:5a:d1:63:5b:c8:08:33:77:7b:6a:b5:70:5f:
5a:72:ab:ee:37:69:7f:6f:00:98:24:f9:51:75:87:a6:e6:40:
b9:9c:a9:9e:e5:51:a0:81:fc:f3:83:3d:59:38:a2:33:7d:26:
b6:51:8d:4f:23:56:bc:df:f7:ac:e7:63:32:26:d6:b3:c3:fd:
dc:85:99:60:99:e0:ac:dd:fb:8a:8c:ab:47:38:f1:6d:a9:6c:
30:21:d2:d1:66:04:b5:1a:1b:cb:fa:d2:7b:5c:03:65:a4:7c:
23:ea:17:36:94:fc:bc:91:c8:64:d0:04:05:b2:c8:9a:96:60:
06:f8:b6:35:e7:95:94:82:9f:91:43:e1:9f:93:f9:b9:22:21:
75:2b:a4:3e:d3:52:2a:0b:cf:ca:6f:17:ed:ce:28:2d:a7:54:
cb:0b:82:02:f0:6a:3e:ce:ac:ac:c3:9d:86:b8:91:ef:21:4f:
a9:1a:6b:28:24:f9:43:13:41:a0:7b:fa:dd:d4:be:3d:dc:51:
c3:e1:43:59:52:97:5b:9f:ac:cf:48:c9:66:61:c0:81:3e:a3:
88:9b:8b:19:5b:3f:d0:a8:4f:02:c8:83:24:d7:01:4c:a9:2a:
bf:41:5e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 20:49:34 2024 by rpki-client on console-fra.rpki-client.org