Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/2991c41e-5631-35ab-9111-5d90b8e9b684.roa
File: 2991c41e-5631-35ab-9111-5d90b8e9b684.roa (raw, json)
Hash identifier: oOBmZxqIpDlJGEF9o6iJuTkSegpC2nBcdDOtG/z5uKE=
Subject key identifier: A6:CA:F8:C3:DE:6A:02:9D:A6:A5:9A:49:27:D5:F3:E3:D1:01:81:26
Certificate issuer: /CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6
Certificate serial: 010D0C9F432858453BB059FA3F2DE58C69A06760
Authority key identifier: 8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/2991c41e-5631-35ab-9111-5d90b8e9b684.roa
Signing time: Sun 17 Mar 2024 02:54:06 +0000
ROA not before: Sun 17 Mar 2024 02:54:06 +0000
ROA not after: Sat 15 Jun 2024 02:54:06 +0000
asID: 13520
IP address blocks: 199.74.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 13:20:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:3b:b0:59:fa:3f:2d:e5:8c:69:a0:67:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6
Validity
Not Before: Mar 17 02:54:06 2024 GMT
Not After : Jun 15 02:54:06 2024 GMT
Subject: CN=c5bbb17a-c47f-4c03-8f3a-544cfe4e89c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:3c:fc:50:a3:97:5b:87:59:ce:92:7e:d1:
7a:7a:16:31:8c:e0:0b:23:da:94:9e:ba:62:ac:49:
5e:a8:a1:a9:b4:2b:39:b6:4c:e4:e7:40:e1:12:62:
91:34:7c:d4:6d:18:da:bf:72:cb:e3:2f:fd:d6:52:
0b:c3:fc:89:79:6a:66:c5:12:ce:38:00:fe:7e:c7:
91:53:4e:bd:af:70:ea:ba:e6:ef:c5:27:35:69:ae:
e2:e6:35:e8:e5:91:74:50:f7:78:0c:c1:0e:9e:1e:
b2:ce:0b:91:00:e2:ed:ba:4f:10:d8:14:69:1b:6e:
be:30:e4:a0:78:4d:30:0f:8e:a1:9c:85:47:2c:82:
68:2d:86:46:05:72:4c:96:7c:02:81:97:9b:e2:0b:
cb:fc:73:64:93:1f:ad:ac:2d:51:61:93:31:96:bf:
f6:a2:b7:43:2d:eb:6e:8b:2d:32:f2:3f:a6:81:1f:
67:1e:e2:4f:ee:78:03:2a:13:b0:62:21:1d:4b:5f:
ba:13:a2:85:f3:85:4d:ed:15:9c:1f:0c:fc:ff:c5:
51:2b:ef:0a:93:85:43:be:cf:df:f2:ca:15:94:3a:
8f:04:e5:53:bb:fc:5d:8f:a9:fe:95:57:33:d4:5d:
ed:71:be:47:76:58:95:5c:68:66:a1:ed:66:7a:d3:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CA:F8:C3:DE:6A:02:9D:A6:A5:9A:49:27:D5:F3:E3:D1:01:81:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/2991c41e-5631-35ab-9111-5d90b8e9b684.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl
X509v3 Authority Key Identifier:
keyid:8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer
sbgp-ipAddrBlock: critical
IPv4:
199.74.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:e4:20:5e:a5:c3:51:a0:9a:0a:3a:a7:3f:98:ea:b9:78:0c:
d7:4b:cb:01:1c:ba:0b:e5:3e:da:96:cd:42:1d:26:fd:0a:67:
bb:19:7f:7f:d8:01:2f:d9:f8:de:5c:29:95:90:62:71:01:54:
d9:b4:27:56:d0:b0:71:62:fc:33:e0:82:a6:7e:58:9b:cd:77:
fa:69:0e:92:89:d7:70:a1:35:29:80:63:57:37:0d:70:f0:4d:
66:b9:d2:e5:c1:62:de:7f:04:c5:80:02:65:ab:91:d3:47:95:
d5:1e:b9:52:13:09:17:12:fc:d8:e4:22:c8:ab:f0:8e:0c:bb:
9b:09:e2:2a:35:28:ae:31:9c:be:a1:88:46:b3:94:da:24:f9:
4b:be:aa:f3:71:38:f1:ea:99:39:29:4a:9e:f6:d9:25:f0:ba:
73:e9:c7:1a:d1:b7:06:60:8e:7d:2b:46:0b:02:ec:d2:cd:a4:
95:5b:57:95:c7:e3:53:ce:11:9d:0d:41:ac:d9:6d:41:7c:b6:
bf:58:dc:79:60:a3:53:a5:3e:c2:87:3c:43:2c:55:35:47:94:
0f:38:03:23:3c:98:13:ce:3e:31:6e:18:bc:cf:76:95:42:d2:
04:af:55:57:47:b6:0d:fd:cd:73:76:54:21:30:a6:9d:bf:41:
e9:86:fb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:05 2024 by rpki-client on console-ams.rpki-client.org