Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e1b41fa0-fa48-30df-a2e1-9f2def3d6212.roa
File: e1b41fa0-fa48-30df-a2e1-9f2def3d6212.roa (raw, json)
Hash identifier: fbDMmFT1DRgnu/JQ9qiz3vfSL5xLUB5O5ZzecO1Odpg=
Subject key identifier: 9D:47:1A:BB:FA:63:20:5E:CB:F7:94:42:EF:75:AC:33:AC:E8:56:EF
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328583B058D15A2D9A1E8784D2BFE00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e1b41fa0-fa48-30df-a2e1-9f2def3d6212.roa
Signing time: Tue 10 Apr 2018 04:00:00 +0000
ROA not before: Tue 10 Apr 2018 04:00:00 +0000
ROA not after: Wed 26 Nov 2025 05:00:00 +0000
asID: 20940
IP address blocks: 204.2.145.0/24 maxlen: 24
204.2.225.0/24 maxlen: 24
165.254.234.0/23 maxlen: 24
2001:418:1401:25::/64 maxlen: 64
2001:418:1442:100::/56 maxlen: 56
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:05:8d:15:a2:d9:a1:e8:78:4d:2b:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Apr 10 04:00:00 2018 GMT
Not After : Nov 26 05:00:00 2025 GMT
Subject: CN=9a2220cc-a75a-4a07-b100-c9285c09ccb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:35:6a:97:22:41:68:ac:d9:0f:6a:af:85:2f:
09:29:53:d3:14:42:41:07:24:b9:f0:ca:4b:07:35:
ef:82:94:8e:65:e7:90:fc:69:d9:34:9c:ef:79:eb:
4e:e7:c9:ef:dd:fb:53:31:c0:dd:e0:5e:80:b5:33:
8b:07:9d:f9:6d:7c:46:11:44:44:2c:fe:32:1c:4f:
a6:25:17:81:cd:41:13:c9:e4:dc:71:07:9b:ba:cb:
8c:d7:0d:ec:0b:2d:d8:8c:41:01:d2:d1:b5:95:61:
48:0f:5e:f5:5e:b8:16:e4:3f:ce:3f:ca:a2:9b:3b:
0a:33:b4:ae:ce:8e:62:1b:2c:db:1c:e6:d4:22:c3:
47:76:15:b7:3d:fc:d9:78:1f:ca:a7:d5:e4:a4:e2:
53:2e:31:a5:8f:95:cc:ce:e4:5f:0c:bd:f0:bf:fa:
fb:ae:69:cb:16:cf:e3:2d:f2:80:88:a3:c3:ce:7c:
2b:cc:4a:cc:cc:d0:69:18:0c:1b:50:23:10:5d:c5:
32:13:ad:12:e5:65:ae:1f:cf:ae:23:b3:d5:fc:30:
69:a3:b5:58:c8:16:34:4d:fb:32:e3:8f:36:ad:8a:
16:36:fb:1f:fa:bb:4d:c7:56:db:d8:40:68:74:25:
44:2c:7d:82:82:e4:de:58:c6:d2:44:a1:a2:48:36:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:47:1A:BB:FA:63:20:5E:CB:F7:94:42:EF:75:AC:33:AC:E8:56:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e1b41fa0-fa48-30df-a2e1-9f2def3d6212.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.234.0/23
204.2.145.0/24
204.2.225.0/24
IPv6:
2001:418:1401:25::/64
2001:418:1442:100::/56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:e5:66:3d:7e:c6:9a:04:82:9b:44:6e:a7:94:ad:8a:15:3b:
3f:51:c4:e6:e4:65:ed:b2:c5:86:fc:3f:80:0b:d7:4f:c1:b4:
eb:a0:2a:be:5c:5b:86:13:05:b7:b3:4b:41:71:4d:73:34:ab:
2f:8e:3b:eb:6c:60:d1:92:14:f7:68:74:4a:31:ee:c6:51:55:
a1:26:64:91:ad:9a:91:09:ae:16:27:77:34:f0:cb:4b:2b:76:
27:ab:b0:b8:ee:7a:58:ac:d8:2d:30:8d:fe:00:13:b2:8a:04:
ce:3c:6b:f8:d1:7a:13:bf:5a:43:2a:4e:a8:8d:b4:fe:e5:14:
6c:aa:88:e3:de:d6:c3:86:97:8b:bd:bf:d0:53:8b:0b:0a:8d:
40:68:47:e4:10:0b:c3:56:a0:30:2a:24:e7:75:b3:ae:55:4f:
b1:f0:ec:67:2f:0f:b6:59:94:75:10:1a:de:8b:63:8d:38:5e:
c8:a1:ff:31:44:ac:94:10:60:03:3f:f6:31:98:ad:cb:16:4e:
00:e2:99:3e:c4:09:3a:f6:a9:53:14:89:bd:b8:56:e3:be:42:
64:98:0a:e9:6d:9a:ea:c9:de:f6:56:47:02:14:52:3f:4a:12:
87:d1:ab:ae:6c:17:1d:4e:b4:8b:69:91:f5:8d:b9:ca:db:50:
1d:b3:f5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 18:15:03 2023 by rpki-client on console-fra.rpki-client.org