Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/275ffebc-4936-3972-8798-3b6aca9dde32.roa
File: 275ffebc-4936-3972-8798-3b6aca9dde32.roa (raw, json)
Hash identifier: sHQoTTrp3alAcsaej80QB+DPtzXlmP5a1Pp0bmM1PrM=
Subject key identifier: 89:D2:34:02:71:56:7A:1D:85:55:94:13:90:C9:A3:7C:B4:FD:0E:5D
Certificate issuer: /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial: 010D0C9F432858449042DBCBBCE9E9D97E229BC0
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/275ffebc-4936-3972-8798-3b6aca9dde32.roa
Signing time: Mon 15 Jan 2024 17:10:15 +0000
ROA not before: Mon 15 Jan 2024 17:10:15 +0000
ROA not after: Sun 14 Apr 2024 16:10:15 +0000
asID: 64267
IP address blocks: 199.255.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:90:42:db:cb:bc:e9:e9:d9:7e:22:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Validity
Not Before: Jan 15 17:10:15 2024 GMT
Not After : Apr 14 16:10:15 2024 GMT
Subject: CN=2d383c9d-26d3-4109-ac93-6e9dee11d466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:aa:e7:e4:29:a9:83:bf:c3:71:11:cc:39:
f8:8d:15:f5:75:8d:db:59:f0:32:e1:91:70:21:0f:
45:69:d0:72:b4:58:ce:98:f6:38:e4:f9:af:a5:67:
33:a7:49:c6:9d:ad:87:1b:39:c2:ed:44:bf:7d:e9:
ee:6b:7d:6c:7c:ea:6a:34:06:db:cc:88:da:05:57:
36:db:03:30:52:c3:72:9a:53:7d:07:d8:51:65:b1:
04:26:cb:fc:47:b3:a9:d7:84:e7:c8:9e:e6:ae:38:
a0:c8:25:69:fe:77:b9:5d:c2:b7:45:c9:ba:f5:96:
d9:3a:09:d8:e0:de:c0:42:7e:64:72:22:04:8a:94:
73:af:3e:26:14:65:96:44:c9:37:93:c8:1a:66:d8:
91:57:bb:d3:8d:75:0c:03:07:c0:37:b2:55:7e:de:
21:28:30:df:01:7c:01:1a:6b:18:f5:fd:46:ac:ae:
68:18:11:81:4f:9c:a0:68:99:8b:4f:3b:41:f5:f0:
17:e5:29:3b:99:d2:b2:bb:c2:ea:62:d1:10:cf:50:
21:9b:c6:aa:d1:85:5f:8d:f9:a9:9d:d5:35:96:be:
b0:a2:58:63:62:f9:38:52:81:be:7e:d8:0d:15:73:
aa:b0:79:81:27:62:10:21:f2:2f:8c:21:21:b5:50:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D2:34:02:71:56:7A:1D:85:55:94:13:90:C9:A3:7C:B4:FD:0E:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/275ffebc-4936-3972-8798-3b6aca9dde32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl
X509v3 Authority Key Identifier:
keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:6d:7a:c0:43:6e:49:8d:11:1b:29:3d:95:63:2f:a4:4c:f0:
d1:2d:19:50:c5:ef:7c:09:a5:2b:f9:ff:8c:23:6d:5b:b9:a2:
54:bd:21:6c:7e:69:88:7d:9f:0e:d8:15:d7:a0:34:41:38:3d:
1d:d3:56:78:f3:d2:ad:07:ca:37:e6:5b:2f:21:0e:f9:9a:ad:
a8:12:4e:ef:99:8a:b2:1f:8c:7e:42:78:66:1a:9b:63:8b:0b:
91:3d:11:1a:5a:c9:31:f1:2e:07:1b:2a:92:39:20:56:0f:8b:
c2:b6:62:8a:9b:d9:23:94:f6:af:84:97:e5:cf:7d:19:e1:ce:
4b:62:c4:2b:a2:06:19:e5:34:99:a7:89:32:94:88:24:44:6c:
3c:54:b7:94:51:ab:c3:e4:3c:dd:4f:6f:e6:b9:45:19:08:a9:
53:50:55:e5:f6:37:bf:f4:c2:fa:09:de:94:23:fa:16:73:55:
3f:f0:3a:c1:ea:c2:68:8a:df:b0:12:a7:c1:dd:a0:a7:ee:d9:
46:14:0b:ff:44:df:9b:14:c4:d8:eb:6a:95:80:b6:a5:28:a5:
6b:8e:fd:21:d1:4c:7a:ce:91:5e:13:cb:a4:ce:9a:55:d4:a1:
17:40:8d:87:98:2e:18:4f:6b:0a:b4:e0:d7:d3:cd:43:c0:71:
ca:b1:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 04:27:10 2024 by rpki-client on console-fra.rpki-client.org