Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/5a9314fb-3a1f-3ecd-9d80-bc72e3124202.roa
File: 5a9314fb-3a1f-3ecd-9d80-bc72e3124202.roa (raw, json)
Hash identifier: 1TPCjAYQVhkrIDnfum1XS8NTCeopRUvP6PMPxSASm7U=
Subject key identifier: BC:04:04:9D:6F:DF:11:4A:CA:DB:1D:20:76:8B:9C:74:D1:F7:09:E0
Certificate issuer: /CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
Certificate serial: 010D0C9F43285846AAC5539F145A5B05FA94D100
Authority key identifier: 9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/5a9314fb-3a1f-3ecd-9d80-bc72e3124202.roa
Signing time: Fri 26 Jul 2024 14:38:01 +0000
ROA not before: Fri 26 Jul 2024 14:38:01 +0000
ROA not after: Thu 24 Oct 2024 14:38:01 +0000
asID: 14866
IP address blocks: 192.253.216.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 17:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:aa:c5:53:9f:14:5a:5b:05:fa:94:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
Validity
Not Before: Jul 26 14:38:01 2024 GMT
Not After : Oct 24 14:38:01 2024 GMT
Subject: CN=06729dd5-8a81-4a2b-9a4e-ee00a6eddc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ca:f6:1c:f8:e3:83:24:ad:32:b8:85:56:f1:
81:9a:25:f1:55:7a:d6:a9:bc:d3:a0:0f:07:f8:3a:
82:d5:86:d1:22:6f:96:51:ab:de:76:bb:f9:95:2d:
da:c4:94:e2:b9:e8:1d:7e:c7:96:b0:89:3a:27:70:
79:bf:2d:94:e8:41:12:22:5a:23:2d:c0:5c:22:e1:
c6:fb:27:8f:fc:5c:7c:32:8a:49:a5:26:b2:06:12:
80:fa:54:06:32:80:31:83:c8:49:c2:53:b8:e3:00:
b6:41:c5:de:7c:95:56:a5:50:0d:c2:c1:43:04:de:
c1:a2:8d:a7:cb:7a:26:53:5f:b0:12:6b:d5:8a:15:
4a:f6:4e:4e:b8:ef:5e:d2:9c:95:85:45:11:26:a1:
95:1b:f2:cf:49:a9:6a:d8:51:79:18:21:eb:98:f4:
ef:d8:fc:83:1f:1f:c8:b8:62:42:0a:30:75:09:b3:
c3:ce:91:a9:30:da:f1:77:9c:39:a6:ed:d2:c8:55:
db:b7:1c:c0:a7:4a:c7:d9:55:0a:53:e1:09:6e:97:
1c:df:66:86:74:0e:cc:8a:40:3e:a7:8a:95:5f:b2:
b2:95:cf:b2:b1:ee:56:26:34:a1:90:5f:f6:91:89:
2e:10:d0:51:a7:c9:18:7e:d6:7f:3b:76:a6:20:1b:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:04:04:9D:6F:DF:11:4A:CA:DB:1D:20:76:8B:9C:74:D1:F7:09:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/5a9314fb-3a1f-3ecd-9d80-bc72e3124202.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl
X509v3 Authority Key Identifier:
keyid:9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
sbgp-ipAddrBlock: critical
IPv4:
192.253.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:9a:16:87:9d:12:d9:b4:c1:78:f6:b0:0f:6e:07:f6:88:ad:
20:e7:dc:81:e7:57:ba:96:d0:1d:17:f4:f2:94:bf:5f:ce:af:
55:36:c5:2d:b8:3c:94:34:e5:b8:40:2d:7d:87:46:f1:73:38:
f0:59:8b:79:e7:90:3f:88:64:ea:7a:d5:6f:2f:da:9d:7f:ce:
6e:55:3e:c5:9e:fc:53:9a:ad:bb:9b:b9:7a:53:31:bf:61:14:
f7:d1:35:d8:9a:9b:e2:ed:16:12:fb:28:0f:c1:ed:b5:0a:1f:
49:4b:54:fa:dd:69:56:22:c5:03:cc:a1:ab:ef:e2:65:02:d6:
b0:74:4c:23:b1:29:1e:f0:a5:6a:18:c0:26:1e:92:1b:93:20:
6f:95:d1:62:d7:3e:22:67:a1:b8:d5:f5:96:d8:d3:53:49:c6:
17:a7:3d:68:fc:b0:3f:e7:b8:ff:56:7f:4e:95:73:75:89:62:
ae:73:d3:5c:a7:18:62:31:28:01:c6:02:ef:05:2d:db:29:02:
e1:b9:a7:45:04:ef:5e:63:0b:6a:9e:3c:15:6f:d3:99:3e:db:
27:95:b1:e3:da:3c:d2:cf:a5:89:41:7c:09:d8:05:00:2e:d5:
fd:eb:b7:7b:f4:01:32:38:3a:4b:4c:af:f6:20:c8:c1:2d:e3:
6c:50:c3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 22:30:40 2024 by rpki-client on console-fra.rpki-client.org