Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/c7cc752c-260f-3617-8909-19d01d21cf3d.roa
File: c7cc752c-260f-3617-8909-19d01d21cf3d.roa (raw, json)
Hash identifier: +K0oy/P+1Tbk92Zj5UevVD33FeIzKD0C5gDHp9wdcp8=
Subject key identifier: C4:F0:42:E9:A1:85:80:FB:CD:D4:D8:30:99:3B:38:6A:76:4D:76:F0
Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial: 010D0C9F432858424E608DF29F5B4A415E6F0A80
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/c7cc752c-260f-3617-8909-19d01d21cf3d.roa
Signing time: Wed 21 Jun 2023 12:00:00 +0000
ROA not before: Wed 21 Jun 2023 12:00:00 +0000
ROA not after: Sat 09 Aug 2025 04:00:00 +0000
asID: 30682
IP address blocks: 168.146.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 15:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:4e:60:8d:f2:9f:5b:4a:41:5e:6f:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Validity
Not Before: Jun 21 12:00:00 2023 GMT
Not After : Aug 9 04:00:00 2025 GMT
Subject: CN=828c4ec5-788b-4e00-9156-f51e5d7ae5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:d7:43:a7:90:17:3b:34:5e:a2:1f:60:61:
7d:3d:a9:fd:39:2e:3a:97:11:71:c6:f3:9f:e4:ce:
1f:55:33:fd:6d:b7:a6:0f:11:d7:46:3b:f5:fd:12:
b4:9f:94:54:61:7e:41:f4:36:ca:7b:de:5c:18:03:
68:fb:85:69:1a:84:69:97:03:f9:e7:5a:9d:6e:b9:
f2:b5:63:d2:97:40:71:7b:a9:7f:d4:7b:a7:87:d7:
4e:e8:f0:bf:91:7d:77:98:df:9a:f6:c2:84:bf:8a:
52:2d:1b:9b:e4:c2:0e:d5:10:86:fd:e8:90:13:21:
7f:c7:a2:cf:98:51:a9:bd:c0:37:a6:ac:14:f7:82:
40:78:01:a4:4e:cc:f6:cf:8a:de:1c:1b:5c:47:8d:
26:4c:40:d3:ea:76:0a:46:3d:70:aa:ae:15:52:de:
46:26:72:0b:6c:72:30:a7:5e:68:be:cb:1f:33:f9:
b0:d4:45:4f:55:e3:ff:4d:9f:da:3e:7f:7b:46:81:
85:f2:ff:2a:39:f5:d1:a5:9b:2a:0b:4e:45:d4:ec:
a2:e1:49:bd:2d:b9:b7:96:96:90:91:27:ad:d3:61:
3d:2a:22:ff:b3:f0:17:ea:4a:92:a2:c4:0d:d1:fa:
70:fd:f9:97:51:06:9d:5a:04:04:d7:14:30:ca:30:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F0:42:E9:A1:85:80:FB:CD:D4:D8:30:99:3B:38:6A:76:4D:76:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/c7cc752c-260f-3617-8909-19d01d21cf3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
X509v3 Authority Key Identifier:
keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
sbgp-ipAddrBlock: critical
IPv4:
168.146.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:e4:64:52:f6:8a:27:e1:ce:c4:34:e1:7b:7e:1a:6b:a0:a9:
f9:c8:0f:58:ed:ba:f8:20:42:14:78:db:88:c3:e0:62:0c:57:
d9:25:c8:98:dc:b9:7e:51:98:b9:65:b7:d0:0d:84:73:37:5a:
b0:7d:92:40:78:1e:58:6f:11:0c:7f:e4:6a:60:8e:45:97:7d:
fa:a3:9c:51:0e:7b:d9:1d:12:34:ea:bf:b8:13:c2:58:8d:8d:
0a:86:d7:05:87:ab:c0:2c:10:01:5c:98:61:f1:1d:e6:63:c4:
5f:c1:06:b4:0f:09:20:a7:c5:a5:1f:86:8e:58:4f:49:e0:d9:
0b:a8:0d:79:3d:97:10:f7:ca:4d:41:c2:07:7a:9e:2c:6d:70:
60:23:8f:ba:f3:72:43:2f:85:8a:b2:d8:b5:c0:19:28:65:23:
e5:16:91:fe:0c:b5:60:dd:95:07:57:8d:c6:87:8b:af:cd:5b:
e1:ba:17:80:58:0f:bf:04:f9:95:1f:60:2b:62:4a:81:d8:dd:
07:53:33:69:03:19:d4:ec:91:01:e8:87:76:68:8e:35:ec:b6:
e2:e5:2e:7b:7c:43:e5:3f:58:e6:5f:26:b6:4e:68:0a:2d:77:
82:f6:03:65:29:9d:75:77:24:c1:88:a8:63:90:23:93:ff:26:
59:5b:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 20:26:25 2024 by rpki-client on console-fra.rpki-client.org