Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3a608c73-f53b-3894-9986-24db210ce7ac.roa
File: 3a608c73-f53b-3894-9986-24db210ce7ac.roa (raw, json)
Hash identifier: O7j/VJePD6P6GyFVUxL2Qtse0DWY4Bt6BB70zLxHz+o=
Subject key identifier: AD:79:20:E8:EA:C5:39:C3:AA:3B:D1:8C:83:67:F0:F5:A4:AD:9B:04
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F43285846B45A5EF3846C882C3B91F3A0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3a608c73-f53b-3894-9986-24db210ce7ac.roa
Signing time: Tue 30 Jul 2024 01:00:28 +0000
ROA not before: Tue 30 Jul 2024 01:00:28 +0000
ROA not after: Mon 28 Oct 2024 01:00:28 +0000
asID: 54203
IP address blocks: 173.255.170.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 10 Sep 2024 18:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b4:5a:5e:f3:84:6c:88:2c:3b:91:f3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jul 30 01:00:28 2024 GMT
Not After : Oct 28 01:00:28 2024 GMT
Subject: CN=442369ec-c68f-4e32-8d9c-e12d9ae42129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:ab:f4:a3:b1:b7:37:d5:c5:20:1d:ce:66:
c0:31:a5:f3:7c:06:03:9a:1b:b5:01:61:71:68:58:
e4:52:f0:52:9f:aa:44:e6:23:f1:51:00:e0:ac:46:
97:2c:8a:ee:00:71:db:82:a2:10:c4:1b:bc:28:28:
af:63:ce:e5:d7:3d:b3:49:54:c9:5c:eb:fd:07:cb:
9d:92:8e:0b:e8:17:13:0f:46:27:32:f9:1b:68:c9:
ce:b8:b7:04:b3:29:fc:b9:89:f0:8c:8a:9c:3b:0f:
b3:a3:53:fb:a6:04:82:70:52:ac:ce:fe:5b:b3:d9:
3a:84:98:24:48:51:87:9c:14:b2:cd:89:b0:4c:5a:
4a:47:d7:23:00:07:72:1f:17:aa:5f:d5:3c:67:94:
02:d3:74:5b:84:07:52:b7:bd:af:f0:aa:0a:2d:0a:
4f:14:78:ed:1e:a7:3c:a8:31:ac:45:f3:58:72:90:
6d:69:29:67:be:ed:52:08:8a:31:05:46:5f:70:7e:
88:31:0f:e5:1c:70:b6:4a:20:50:3d:6a:13:dd:0b:
2e:af:37:48:4a:b6:23:a5:c1:fe:1c:64:4c:16:d1:
1a:4c:6a:c8:eb:52:32:5d:84:ef:58:9f:96:f5:77:
19:3e:68:59:db:88:af:6f:b2:85:01:ea:85:7b:f7:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:79:20:E8:EA:C5:39:C3:AA:3B:D1:8C:83:67:F0:F5:A4:AD:9B:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3a608c73-f53b-3894-9986-24db210ce7ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
173.255.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:9a:8e:11:03:d3:36:eb:35:71:a4:f3:3c:7e:b1:3d:88:76:
10:9d:67:49:59:06:98:4a:19:20:5d:26:f7:41:54:e9:af:82:
39:23:f9:31:f5:da:d4:6b:16:b9:84:2d:8b:c9:dc:78:14:6c:
03:67:3d:b9:1d:8a:81:f2:49:72:89:f8:f4:5d:11:08:76:ba:
f6:e4:ed:80:99:10:53:2e:91:27:85:6a:ed:72:1f:16:0b:a6:
9b:5c:1e:90:43:ae:db:6a:36:66:11:0d:1d:29:0d:9d:7b:24:
c1:49:47:a1:49:0a:87:db:44:2c:2f:72:71:90:6a:5f:80:c5:
6c:3b:a8:a3:c4:38:96:ac:6d:21:f8:f5:29:ab:b0:7c:d5:9b:
7d:17:16:e5:cf:7a:a4:57:81:e9:f2:4b:83:92:9a:44:b0:6e:
7e:b4:57:d2:06:24:3c:d3:e3:38:37:d4:b7:b7:d1:ac:22:bb:
cf:24:34:0b:f4:84:b3:a0:93:8a:e4:7f:4c:90:2b:eb:c7:77:
82:35:db:30:d4:8a:65:e0:1d:ff:dd:ce:6d:66:d2:70:bd:3e:
a3:09:7b:18:11:ad:1f:21:59:c8:e3:eb:1d:52:8c:ca:67:38:
7e:74:e0:02:bf:a5:75:f1:67:9a:8f:1c:24:cc:92:e6:c9:82:
07:60:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 19:38:24 2024 by rpki-client on console-fra.rpki-client.org