Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/e3f1ae1f-b2e3-363a-a03b-89d3f744006f.roa
File: e3f1ae1f-b2e3-363a-a03b-89d3f744006f.roa (raw, json)
Hash identifier: +WIbnIINZvLpnzdu9OkVcBfOdq6LKu+poLxaf7r4KcA=
Subject key identifier: 89:C5:D4:5D:1F:3B:D3:B8:F2:48:FB:98:11:28:C1:D2:71:83:24:28
Certificate issuer: /CN=6ca4d9b1-5397-4654-94da-7840371f5226
Certificate serial: 010D0C9F432858457FE0A5F35F2EB0EF765FF340
Authority key identifier: 9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/e3f1ae1f-b2e3-363a-a03b-89d3f744006f.roa
Signing time: Wed 10 Apr 2024 13:06:22 +0000
ROA not before: Wed 10 Apr 2024 13:06:22 +0000
ROA not after: Tue 09 Jul 2024 13:06:22 +0000
asID: 25914
IP address blocks: 65.49.152.0/21 maxlen: 21
132.147.240.0/20 maxlen: 20
2607:2900::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Apr 2024 14:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:7f:e0:a5:f3:5f:2e:b0:ef:76:5f:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca4d9b1-5397-4654-94da-7840371f5226
Validity
Not Before: Apr 10 13:06:22 2024 GMT
Not After : Jul 9 13:06:22 2024 GMT
Subject: CN=dafcfce4-48da-4bc5-936e-425937000a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:42:d0:fa:b2:f1:a8:13:8d:4f:9d:ba:f7:
a8:c2:9e:60:17:86:d0:a5:3a:dc:38:79:b0:f6:fa:
25:83:d3:65:d8:8d:f2:ac:fb:13:12:a2:d5:4e:1e:
33:96:f8:df:2c:ca:53:6c:59:4b:6a:24:48:c9:93:
75:07:0e:68:55:ae:83:28:fb:f5:6a:a7:bd:6d:0d:
00:4a:6b:c1:f3:fb:d5:2e:20:b4:ff:08:a5:a5:2b:
46:d1:af:fc:6e:ed:f5:ae:bc:87:fd:4d:a9:4b:f1:
10:39:46:b1:7c:be:8f:6d:29:c7:87:ac:54:98:f8:
a4:2f:cc:8b:dc:75:27:de:64:fd:2c:be:cb:0c:b7:
69:d2:16:a0:a7:87:1c:6a:8d:e8:59:61:89:a1:32:
31:fc:e1:bc:ea:a2:2a:9b:17:2d:1e:7d:e1:e2:50:
96:ec:11:db:d1:37:98:44:b0:55:29:ff:c1:eb:59:
6d:2c:75:04:84:d5:75:1e:a4:7b:3e:f3:05:97:00:
0a:6f:a6:52:b9:ee:b7:3f:cc:31:97:80:c4:7f:e0:
9d:3b:91:93:09:21:7a:9f:2c:c5:0d:09:8b:40:6b:
03:71:22:21:f6:31:b7:46:5a:ad:91:09:46:f2:e8:
65:bc:bb:ac:20:62:56:b3:5d:96:65:a0:be:e6:0e:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C5:D4:5D:1F:3B:D3:B8:F2:48:FB:98:11:28:C1:D2:71:83:24:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/e3f1ae1f-b2e3-363a-a03b-89d3f744006f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl
X509v3 Authority Key Identifier:
keyid:9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.152.0/21
132.147.240.0/20
IPv6:
2607:2900::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:fd:20:7b:9d:b1:4a:60:bc:68:7c:a6:e0:7d:1f:ac:c8:3d:
85:f0:86:80:fe:3b:e9:4f:70:dd:b6:2f:8f:54:42:92:32:a2:
9e:89:01:19:ee:c0:c0:24:f2:94:c2:fb:16:16:e0:20:cd:74:
85:f1:ac:28:c1:a2:19:c4:b2:ed:52:02:49:ba:ab:48:d1:60:
17:07:ec:95:d2:4f:f1:0f:19:48:db:53:76:9c:59:60:fe:43:
67:8b:93:9b:9e:04:2d:e7:cd:42:00:5a:81:90:20:56:de:4a:
93:55:ad:98:d4:56:30:47:bd:54:b2:76:a7:2b:09:37:f3:de:
18:ae:3c:f8:7e:0d:6b:04:19:ff:f2:d4:98:04:e0:c8:97:a7:
43:19:71:f6:c1:a1:75:0b:a3:49:21:f3:07:4f:21:49:91:b5:
f3:48:dc:6c:c6:3a:92:a1:96:8b:70:7e:07:88:76:73:50:c5:
13:09:ac:74:b2:cb:a3:e2:b7:21:22:48:d6:d4:8b:22:b5:b1:
76:d8:89:fd:cd:cc:59:4f:b9:91:ab:d7:fd:57:e4:88:8f:c3:
4f:ca:68:ed:89:4f:3a:1f:a2:8a:35:40:ef:c9:30:28:8c:37:
0d:01:29:32:28:4c:02:87:b9:f2:65:79:40:07:e4:76:6e:3e:
f4:e5:2c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:09 2024 by rpki-client on console-fra.rpki-client.org