Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/27fb095c-b781-3847-bfe7-2c372f5a12e5.roa
File: 27fb095c-b781-3847-bfe7-2c372f5a12e5.roa (raw, json)
Hash identifier: sotWRKUHH4OcTx5oXdlnvZV+lZovVzQEEV0TRqaoALM=
Subject key identifier: AA:BB:A4:8C:09:B9:F8:F1:FF:E0:22:AE:56:40:BC:2E:78:B9:88:5A
Certificate issuer: /CN=14f19494-e6ec-42e7-bce4-8903df1f6f9d
Certificate serial: 010D0C9F43285844C282637962F5C884D5946280
Authority key identifier: D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/27fb095c-b781-3847-bfe7-2c372f5a12e5.roa
Signing time: Fri 02 Feb 2024 17:08:40 +0000
ROA not before: Fri 02 Feb 2024 17:08:40 +0000
ROA not after: Thu 02 May 2024 16:08:40 +0000
asID: 7381
IP address blocks: 199.124.28.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 29 Feb 2024 14:52:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:c2:82:63:79:62:f5:c8:84:d5:94:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14f19494-e6ec-42e7-bce4-8903df1f6f9d
Validity
Not Before: Feb 2 17:08:40 2024 GMT
Not After : May 2 16:08:40 2024 GMT
Subject: CN=511cecd3-a24e-45eb-94a4-d28a48af1202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:98:bd:e9:eb:28:f6:8d:82:40:2c:d4:4d:
7e:cc:e8:60:7b:ca:60:68:5d:27:b0:93:c6:8d:37:
f8:d5:13:1d:3f:fc:92:99:26:f0:59:18:b6:c0:05:
a9:38:ac:0b:88:b6:e8:6b:0c:41:a3:1c:71:e5:03:
af:ad:5c:4e:70:ad:6f:94:ac:9c:33:99:11:5c:df:
64:39:37:05:5c:cb:cf:50:f2:3a:24:d5:a1:2a:a8:
14:70:96:07:0f:ca:86:d9:b6:e7:1b:48:9e:9f:2a:
dc:ab:21:ac:80:ad:3b:7a:a5:4b:6d:73:54:2d:a1:
2a:4e:c9:fe:5c:b6:99:b9:ee:06:c3:70:c0:5e:c8:
65:b6:78:c8:65:02:49:01:35:82:4c:54:79:c3:3e:
2c:fa:c1:39:f1:ef:0a:b3:9b:45:50:9b:10:18:80:
55:6f:3d:3e:9b:cd:d9:a0:d4:d5:21:3f:13:70:fd:
69:ca:06:8c:81:75:f7:6e:14:10:3b:28:fc:2a:a4:
46:0a:e7:c5:e6:99:1d:40:35:77:b5:7d:f8:fc:c3:
09:c0:a2:08:b6:73:9d:31:63:ad:d2:4c:f9:be:78:
79:c2:3f:0b:80:f4:61:c5:7d:7f:12:52:5b:9e:35:
e3:05:c0:78:ef:20:52:c8:7a:11:c2:6a:72:a8:52:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BB:A4:8C:09:B9:F8:F1:FF:E0:22:AE:56:40:BC:2E:78:B9:88:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/27fb095c-b781-3847-bfe7-2c372f5a12e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.crl
X509v3 Authority Key Identifier:
keyid:D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.124.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:59:4b:7c:9e:ec:39:a2:ba:df:90:aa:27:40:c7:1e:ea:5d:
65:bf:7a:8e:8d:04:b4:20:1a:3a:eb:2e:d4:88:e9:4d:90:2b:
03:31:4f:e7:20:4d:d1:ff:5a:87:57:84:c4:54:d1:37:de:c5:
e5:50:25:28:8c:0a:43:e8:de:fa:49:82:34:e5:dc:81:fb:d4:
d9:64:97:60:9c:f6:6d:63:d2:d6:66:31:e9:93:ce:58:0e:dc:
d3:79:3a:68:fd:b3:c9:2f:65:18:ef:5a:f1:91:17:7b:00:f3:
26:19:69:a6:4b:4f:ed:7e:2e:c6:c9:64:f5:b0:09:b0:7b:4e:
d5:02:0c:48:4d:e1:1a:5d:bf:02:d9:77:30:14:41:bc:f5:e4:
98:8c:7f:e7:f5:9f:b6:09:2f:0e:d3:8a:7b:9f:81:f3:e3:6a:
9f:f8:ac:b9:b4:24:07:46:fd:e3:4f:dd:75:a2:1b:90:21:58:
e9:7f:54:b5:e5:8f:1a:d8:38:cf:e6:bf:7b:a2:25:5c:80:af:
97:7b:68:13:b5:1a:5f:7f:92:72:c2:4f:fd:54:73:4b:d0:a7:
56:2f:ce:3f:23:f6:7d:a5:59:11:1b:9a:91:f6:ba:34:d2:6a:
46:26:ff:7e:90:c9:d3:e8:3e:35:b7:af:91:f5:87:d4:be:26:
5e:03:42:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 19:07:30 2024 by rpki-client on console-ams.rpki-client.org