Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/f0e3b474-310e-3248-8bd4-20e77a35816b.roa
File: f0e3b474-310e-3248-8bd4-20e77a35816b.roa (raw, json)
Hash identifier: OFoIjYLGN+oojkU/AUtCQi2JuyEH5YLyXZrFLO7n3x4=
Subject key identifier: A5:65:5B:23:ED:20:54:8E:C6:82:27:11:52:9C:75:D1:4E:C7:74:12
Certificate issuer: /CN=bb49c202-f644-4fa6-8a36-084312761f72
Certificate serial: 010D0C9F43285844C6550D637E03D07C81CF7180
Authority key identifier: CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/f0e3b474-310e-3248-8bd4-20e77a35816b.roa
Signing time: Sun 04 Feb 2024 02:00:25 +0000
ROA not before: Sun 04 Feb 2024 02:00:25 +0000
ROA not after: Sat 04 May 2024 01:00:25 +0000
asID: 46261
IP address blocks: 104.245.232.0/21 maxlen: 24
172.98.208.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 08:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:c6:55:0d:63:7e:03:d0:7c:81:cf:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb49c202-f644-4fa6-8a36-084312761f72
Validity
Not Before: Feb 4 02:00:25 2024 GMT
Not After : May 4 01:00:25 2024 GMT
Subject: CN=43e6a978-5cb1-4b73-b328-212317517c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:14:a1:7c:cd:d3:7d:40:dd:c2:e3:f7:94:
ff:35:b4:be:67:8d:b8:df:61:73:3c:b4:cd:a0:e6:
4b:3e:db:14:7d:31:41:ef:c7:45:4b:d8:2c:2a:3a:
ec:de:05:3a:9f:c7:41:d9:5d:12:ea:bc:9d:57:80:
51:02:4c:ee:8a:64:e5:ea:bc:c5:5f:11:05:c9:66:
c1:49:d8:3a:8b:ef:5f:80:a5:40:4b:7d:52:e6:71:
2c:26:5e:1a:77:84:7c:a5:e0:81:dd:ce:21:2c:2a:
d9:b8:75:03:05:27:48:40:a3:1f:66:7d:49:44:bf:
41:df:d1:c6:f9:f2:12:08:6f:5c:7e:0c:85:4c:3e:
36:ec:41:76:f0:33:cb:71:b6:8c:55:12:b7:80:70:
66:e5:45:52:96:ae:9f:fc:f6:ff:b3:31:b3:f2:b2:
4a:39:f4:29:ca:ae:61:a1:a5:a2:5f:6a:45:9f:f5:
e8:aa:2f:13:78:b0:0b:94:e8:fa:76:73:19:95:07:
30:e1:90:1f:40:f3:9e:c3:02:27:0a:e5:2e:9c:46:
e2:75:9a:77:b1:88:dc:0b:8f:de:d0:8b:23:05:db:
30:de:1f:ed:86:64:f0:58:d0:48:7d:0f:d8:7b:cc:
35:14:ec:df:a0:89:f6:23:28:60:da:5c:be:67:75:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:65:5B:23:ED:20:54:8E:C6:82:27:11:52:9C:75:D1:4E:C7:74:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/f0e3b474-310e-3248-8bd4-20e77a35816b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl
X509v3 Authority Key Identifier:
keyid:CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.232.0/21
172.98.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:e1:d3:49:a9:b3:2a:b5:48:36:c7:a0:90:6a:19:2a:b7:80:
10:13:d7:a3:11:aa:32:8d:11:be:27:29:58:34:82:80:c7:07:
b2:5f:c8:63:0d:db:1b:1b:e6:85:78:6a:57:9d:7b:3c:70:99:
9e:81:86:ca:bc:a1:e3:fd:16:4d:2d:c2:4e:ef:0b:7d:89:1d:
44:c8:e4:b9:8e:8a:9c:51:57:21:c9:3c:df:ea:1b:10:45:cb:
b0:7a:85:b8:5a:a7:ad:08:9a:5b:24:7d:0a:17:39:21:ef:69:
48:5d:fd:cb:4c:12:84:c6:92:7f:f6:14:e6:ad:61:87:06:ae:
cd:52:e0:06:cf:26:b1:dc:33:3b:ec:d7:ea:32:74:13:b1:70:
86:fa:5e:da:35:8b:aa:27:32:69:c7:27:73:bd:8c:5f:8a:07:
fb:47:e1:a0:01:da:af:ae:cc:07:1c:b0:e1:f1:82:ae:26:31:
20:cd:64:9d:eb:bf:06:f4:34:0b:04:26:a5:1b:d8:a1:87:51:
9f:b3:b9:4e:41:a3:fc:aa:62:13:f3:b3:1c:9f:a9:4c:18:50:
11:47:24:dc:d0:1b:f0:d5:22:07:10:d0:9c:3a:0b:09:93:97:
a5:e8:9f:e1:2d:99:b5:a5:4e:fa:83:49:1e:97:23:6c:14:39:
74:69:af:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 10:08:20 2024 by rpki-client on console-ams.rpki-client.org