Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/8242faed-39de-3ac0-a9b4-143f7e76541d.roa
File: 8242faed-39de-3ac0-a9b4-143f7e76541d.roa (raw, json)
Hash identifier: obsbG0p8uAO4VJ4VVdeZ6fCqH8HuVfMBBFf24u+XQ30=
Subject key identifier: 71:AC:F9:64:06:85:7A:7D:13:70:E5:26:9C:1B:26:26:27:29:68:3B
Certificate issuer: /CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
Certificate serial: 010D0C9F43285845D1B3815640116738131DAAC0
Authority key identifier: 28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/8242faed-39de-3ac0-a9b4-143f7e76541d.roa
Signing time: Thu 09 May 2024 20:31:42 +0000
ROA not before: Thu 09 May 2024 20:31:42 +0000
ROA not after: Wed 07 Aug 2024 20:31:42 +0000
asID: 399970
IP address blocks: 149.112.154.0/26 maxlen: 26
Validation: Failed, certificate revoked on Fri 10 May 2024 13:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:d1:b3:81:56:40:11:67:38:13:1d:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
Validity
Not Before: May 9 20:31:42 2024 GMT
Not After : Aug 7 20:31:42 2024 GMT
Subject: CN=62002d14-efea-4db4-8973-d69475beb6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:8f:c0:8a:cb:99:d2:59:71:66:eb:b1:6a:
b0:61:6c:73:54:4a:0b:87:06:c0:f2:9a:e9:45:b1:
19:1a:33:e9:65:39:84:60:c8:26:af:6d:bf:26:77:
41:41:71:0b:ed:5c:10:09:67:1f:1e:2f:5a:f4:02:
ae:78:5e:dd:83:94:74:0c:bf:2f:c6:65:0a:86:57:
4f:c1:02:80:db:8a:f7:80:b9:d1:c5:92:10:f6:39:
74:b4:eb:7c:dd:f2:fd:35:7a:25:32:c0:65:ca:15:
57:7c:ed:29:f9:5a:60:a3:70:54:f9:b4:73:51:81:
83:02:be:ab:8b:f1:85:20:80:65:88:12:f7:98:8f:
75:c8:ca:d5:29:64:0f:c1:1c:67:fd:30:43:24:73:
b7:75:9f:0b:68:e3:e9:88:23:a7:e0:6e:fe:30:27:
58:2c:b2:2e:ec:8c:f2:00:b2:a2:03:7d:8a:40:71:
17:ab:a7:48:60:48:cd:bf:93:57:dd:78:6a:9d:b9:
d0:65:e5:cd:f2:e9:44:d2:00:d7:48:bc:ad:d4:8c:
ec:1f:9e:33:6a:c7:4d:e1:6e:f8:c5:d8:71:e7:7a:
c7:69:e2:1e:13:1e:52:e7:af:10:9c:88:52:21:f3:
28:cb:f8:fb:68:7f:f7:04:a3:39:89:7d:1c:3f:3a:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AC:F9:64:06:85:7A:7D:13:70:E5:26:9C:1B:26:26:27:29:68:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/8242faed-39de-3ac0-a9b4-143f7e76541d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/bb1f3de8-615a-4e8b-b393-bae42ab3e509.crl
X509v3 Authority Key Identifier:
keyid:28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:35:4d:45:7a:26:dc:94:e9:f8:43:af:20:e6:b3:58:fd:a2:
7d:3e:11:23:dd:27:10:24:5a:39:72:3e:6c:ec:e6:49:58:f1:
fa:b4:16:ca:3d:70:73:57:ac:3a:44:2e:27:3f:53:dd:d6:88:
0d:69:41:57:27:e4:a0:67:cd:d3:e1:06:c5:c4:30:96:e2:aa:
5c:10:71:7d:3c:b5:fd:79:65:22:73:a5:bf:0e:25:6b:d6:ff:
f7:96:62:b3:a9:f8:95:83:3f:06:fe:09:92:c9:0c:ea:47:f8:
63:7f:f0:5f:5b:40:e9:dc:de:33:12:c8:31:ca:cb:4b:41:23:
13:e3:cb:43:69:0e:ed:f3:6e:6b:64:0e:0b:74:5a:cb:56:b7:
ab:6c:b8:9f:16:05:07:fb:9f:a7:ab:07:7b:d8:ce:7d:9f:61:
53:dc:27:b2:91:b1:12:e9:8b:44:0b:06:0d:bc:3d:a8:90:f8:
01:a4:66:b5:e4:f4:55:f4:70:e8:96:f2:45:29:2f:1e:86:a7:
50:f4:ae:55:b4:05:42:2a:0b:b3:9d:f5:e1:f8:06:90:79:26:
ba:f3:c6:e0:e9:dc:7d:50:99:1e:f4:24:a2:47:a9:a6:a1:57:
32:43:24:10:88:18:1b:69:c8:d5:61:50:f9:d5:f9:07:aa:30:
26:db:e4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:12 2024 by rpki-client on console-fra.rpki-client.org