Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/f1cc83b6-91ae-3e3e-93f3-34229d40e032.roa
File: f1cc83b6-91ae-3e3e-93f3-34229d40e032.roa (raw, json)
Hash identifier: MHpd8FGrXgtm2+/584iowZ+WnknicVBiapI0+r3TFps=
Subject key identifier: D5:FF:FF:AC:D6:3C:ED:CA:A4:21:F3:49:9D:C2:FD:B7:25:37:05:31
Certificate issuer: /CN=6ca4d9b1-5397-4654-94da-7840371f5226
Certificate serial: 010D0C9F43285845A21DC18DB9D89806D8C68280
Authority key identifier: 9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/f1cc83b6-91ae-3e3e-93f3-34229d40e032.roa
Signing time: Mon 22 Apr 2024 19:26:59 +0000
ROA not before: Mon 22 Apr 2024 19:26:59 +0000
ROA not after: Sun 21 Jul 2024 19:26:59 +0000
asID: 25914
IP address blocks: 108.160.80.0/24 maxlen: 24
108.160.84.0/22 maxlen: 22
65.49.152.0/22 maxlen: 22
65.49.152.1/32 maxlen: 32
65.49.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 30 Apr 2024 03:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:a2:1d:c1:8d:b9:d8:98:06:d8:c6:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca4d9b1-5397-4654-94da-7840371f5226
Validity
Not Before: Apr 22 19:26:59 2024 GMT
Not After : Jul 21 19:26:59 2024 GMT
Subject: CN=2fd1d75f-7a29-4848-950a-ca152cbc3588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:40:bb:af:f7:1d:76:b5:7c:36:6b:c4:a7:
d0:26:36:e1:03:1b:1d:2c:78:83:17:32:40:90:a9:
81:9b:89:5e:88:b6:e4:86:ef:4c:66:3e:14:cd:5a:
2a:a5:f9:52:38:c5:e5:3b:d4:0d:eb:f7:6b:6e:90:
4e:4d:88:f9:b1:aa:5a:8a:66:82:da:da:e0:16:50:
77:97:e2:e2:78:eb:71:55:7d:f5:fa:d1:b9:9a:e6:
18:5a:9c:8c:27:4f:10:bc:d4:28:55:28:98:4d:e0:
11:db:c6:3a:4d:5f:6d:61:18:c1:ed:6e:cd:dd:a2:
f0:4d:46:d2:53:56:b8:b0:ff:16:59:36:80:67:34:
61:bf:7d:2e:4b:d2:98:44:6d:c8:a5:66:cb:6c:a5:
63:8c:01:89:f5:49:8f:c1:a3:90:4f:ae:b0:74:9f:
7a:b7:4f:49:40:e2:aa:41:ff:09:35:30:e3:c7:b4:
b7:1f:64:f6:43:92:0e:36:14:c1:c1:af:a1:b5:11:
ad:a5:1a:ab:e4:23:cb:ce:f0:9b:b7:7b:de:e6:a0:
90:9f:75:89:57:21:1f:50:ce:8d:f4:fb:3a:d7:fc:
ba:99:a7:81:9f:df:68:3c:f1:a0:25:61:fc:50:85:
07:dc:e6:a4:38:ba:fa:2a:47:67:c5:f2:47:4c:c9:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FF:FF:AC:D6:3C:ED:CA:A4:21:F3:49:9D:C2:FD:B7:25:37:05:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/f1cc83b6-91ae-3e3e-93f3-34229d40e032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl
X509v3 Authority Key Identifier:
keyid:9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.152.0/21
108.160.80.0/24
108.160.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:8d:7d:64:1f:80:34:eb:91:ca:4a:9b:54:a8:a9:04:b1:ae:
e3:4c:b3:14:30:ff:a4:a3:5e:d2:86:41:c4:20:b1:65:b6:4c:
2d:9a:fb:01:02:d7:6a:db:3f:b3:81:32:ff:90:3c:d1:9d:5f:
d1:94:cc:bf:6e:7c:25:ac:be:9d:bd:d4:e3:7b:5b:a4:70:e9:
ea:2d:ca:8c:2c:6a:8d:6d:b7:39:6a:06:d1:62:84:ff:1c:99:
06:f0:d7:35:31:e7:40:f6:76:5e:12:41:de:9b:48:f5:c0:d9:
6c:7a:95:8a:65:0a:1d:67:96:e5:ac:02:db:51:a1:b1:8b:75:
66:70:4b:ea:83:ac:7d:07:b3:45:c1:69:cc:d0:a5:d5:32:17:
e1:78:70:d0:fc:e7:d4:53:ea:09:3e:6b:f9:aa:17:58:73:4e:
b3:5f:e6:8b:7c:65:27:5f:b5:ac:19:e9:77:ea:27:2f:43:b1:
68:9b:c7:f2:d3:d7:01:77:27:b7:71:8c:57:b1:ad:e1:d7:08:
52:6c:e8:ec:a8:5a:70:38:c3:dd:57:4e:c2:8b:3e:e4:7d:da:
cd:05:d6:6a:40:22:06:a5:53:e1:97:4f:2d:21:ad:e5:98:e3:
73:a3:3c:3a:8b:3e:3b:78:36:9e:27:70:69:65:34:ae:34:47:
e5:1c:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:09 2024 by rpki-client on console-fra.rpki-client.org