Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/a531df20-c07c-37e9-91e2-0f6314d4146d.roa
File: a531df20-c07c-37e9-91e2-0f6314d4146d.roa (raw, json)
Hash identifier: LlYwII/ESWEh8PUoXb7vqPSJE0mAokflBhZHrhGKtdM=
Subject key identifier: 17:33:A0:B7:C1:A6:19:E6:0A:80:0D:DC:5C:EA:C2:AF:FB:14:DF:05
Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial: 010D0C9F432858424E60CF07840C90EC2EAB9530
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/a531df20-c07c-37e9-91e2-0f6314d4146d.roa
Signing time: Wed 21 Jun 2023 12:00:00 +0000
ROA not before: Wed 21 Jun 2023 12:00:00 +0000
ROA not after: Sat 09 Aug 2025 04:00:00 +0000
asID: 13649
IP address blocks: 159.182.144.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 15:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:4e:60:cf:07:84:0c:90:ec:2e:ab:95:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Validity
Not Before: Jun 21 12:00:00 2023 GMT
Not After : Aug 9 04:00:00 2025 GMT
Subject: CN=d5854894-c683-4f18-8a8f-45c5c71ad097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:82:af:4e:a9:71:46:37:75:28:00:dd:21:
eb:c4:de:52:4d:72:1b:5d:a0:03:a9:71:87:a8:68:
73:c7:8c:1c:4a:d8:1b:6c:2a:be:64:fe:eb:50:eb:
d0:c2:02:f9:ae:0c:b4:bf:9e:e4:62:54:f0:d7:a6:
dd:9c:43:1d:72:37:b1:25:e8:a9:9e:5a:ad:57:86:
b0:70:65:0c:70:7f:f9:c6:d9:91:c4:43:83:6e:7a:
a4:ce:b1:b7:8c:35:ce:e5:ed:82:1c:39:4b:77:f3:
58:33:59:b0:e1:a8:95:de:98:f7:17:31:39:40:e0:
ce:d6:10:de:af:8b:6a:50:bd:51:eb:bf:5e:8b:83:
a5:92:d3:04:26:4b:98:7b:46:18:1c:0d:dc:bb:b6:
da:66:8e:0b:9f:cf:b2:19:44:b5:44:5b:f5:11:76:
00:54:07:a9:05:1a:37:1c:16:d6:39:a3:ae:c8:6a:
8f:ef:bd:c7:6c:61:cf:12:4d:88:25:d8:e2:d8:6f:
ba:9f:40:ff:f1:44:b4:95:1a:4c:a5:8b:58:da:5a:
60:a9:aa:e8:e9:5c:c6:60:0b:99:e1:5b:03:15:c1:
9b:85:a5:a2:ed:f4:af:48:d5:2f:49:43:1b:3a:f8:
87:6e:10:e4:d4:cb:45:1e:8d:27:f4:8f:f3:3e:4d:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:33:A0:B7:C1:A6:19:E6:0A:80:0D:DC:5C:EA:C2:AF:FB:14:DF:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/a531df20-c07c-37e9-91e2-0f6314d4146d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
X509v3 Authority Key Identifier:
keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
sbgp-ipAddrBlock: critical
IPv4:
159.182.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:74:d4:f5:61:cd:36:33:17:13:c8:97:b9:f2:8f:83:85:64:
ab:55:ef:cb:7a:85:f0:c0:ee:e9:e2:cd:f4:a7:a4:df:c9:1a:
7b:d6:df:cb:6c:c7:b1:da:7e:8d:9a:98:ac:42:77:1f:c3:73:
36:89:ab:b8:74:27:a7:a0:a8:71:0c:18:9b:01:af:e9:bd:6a:
6d:8a:69:58:3b:ce:1c:e3:d5:2a:9d:fb:c6:50:62:71:37:1a:
e7:9f:7e:8d:ab:ec:49:5c:b8:ff:de:f1:88:7b:16:56:e3:78:
36:a8:d5:ee:d9:13:0c:f7:d7:42:99:aa:48:fd:71:90:a5:c7:
9d:7f:26:2b:01:cf:19:3e:08:00:69:e0:85:3c:ff:0b:ca:80:
76:b0:8d:7f:0b:e8:3a:08:47:2e:c1:38:e2:d7:c8:7f:dd:e7:
89:f5:27:ff:19:4a:03:9a:73:63:c7:bd:37:ec:9a:78:7a:09:
2a:ed:da:dc:b8:82:68:c4:25:63:41:6f:6c:64:83:9d:b5:96:
88:f0:b0:75:2a:24:a3:49:72:bf:cc:22:eb:06:ec:c8:8d:ca:
88:23:f3:aa:9f:7a:22:90:d3:87:ec:84:b1:d2:d6:01:03:9f:
70:f4:71:d8:b4:e3:0b:84:cf:76:88:a0:ec:a9:cc:40:d4:df:
56:6e:cc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:33:19 2024 by rpki-client on console-ams.rpki-client.org