Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d0f01e86-7032-324d-9cac-2c6551cd934e.roa
File: d0f01e86-7032-324d-9cac-2c6551cd934e.roa (raw, json)
Hash identifier: xsHaCkBVH4yAC4wt2nUwTpRTwEU+sGm32FGkl+TmvCk=
Subject key identifier: 22:5D:BE:C2:26:EE:E7:AD:97:80:6E:8D:97:6F:7D:46:40:3A:37:FD
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F43285846B2F516408BFF89DBB820C880
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d0f01e86-7032-324d-9cac-2c6551cd934e.roa
Signing time: Mon 29 Jul 2024 13:00:38 +0000
ROA not before: Mon 29 Jul 2024 13:00:38 +0000
ROA not after: Sun 27 Oct 2024 13:00:38 +0000
asID: 54203
IP address blocks: 104.36.176.0/23 maxlen: 23
216.169.133.0/24 maxlen: 24
216.169.135.0/24 maxlen: 24
216.169.136.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 10 Sep 2024 20:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b2:f5:16:40:8b:ff:89:db:b8:20:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jul 29 13:00:38 2024 GMT
Not After : Oct 27 13:00:38 2024 GMT
Subject: CN=177f0deb-00a1-46ab-9729-2a1d8e273574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:0a:90:95:f7:0c:ee:89:42:cb:3b:5a:92:
98:e8:9f:72:ae:41:b1:d1:0d:f2:0a:25:36:6d:79:
1e:35:fe:de:75:26:9c:db:46:5d:d8:96:b9:26:5c:
67:a7:f1:54:ca:e0:ec:37:71:4f:bd:1b:55:2f:54:
8f:a0:10:17:52:fc:66:b1:6d:a0:1f:9e:f5:52:41:
0f:20:a6:e7:77:fe:e0:dc:c5:71:9d:6e:c5:3c:dc:
04:12:5a:11:b5:eb:bc:7d:ef:18:85:45:4b:41:40:
d1:01:7c:92:db:ef:54:44:eb:fe:1f:6b:65:d2:69:
9d:38:be:ed:6a:ee:ca:b9:85:bd:d3:41:94:2b:58:
7f:08:3c:14:9b:6d:ba:9e:0c:57:a0:49:c9:7e:12:
44:e6:a3:1d:b8:57:7c:1d:cb:61:b8:76:04:14:bb:
49:d2:de:b8:d0:93:5c:16:32:f0:ee:25:3b:e5:7d:
d3:92:5a:e6:fe:ad:83:6c:7a:75:a2:6b:99:b8:0b:
87:5b:31:51:25:b7:f6:e4:74:f8:1e:5e:4d:7e:b5:
7b:ad:a0:d6:9d:9e:49:50:9c:0e:aa:65:30:52:9a:
d8:ed:b1:58:ba:83:ed:4b:c2:b6:0a:a8:ae:20:ee:
31:f9:3f:02:f7:b9:96:ad:10:14:cd:f6:29:31:be:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5D:BE:C2:26:EE:E7:AD:97:80:6E:8D:97:6F:7D:46:40:3A:37:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d0f01e86-7032-324d-9cac-2c6551cd934e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
104.36.176.0/23
216.169.133.0/24
216.169.135.0-216.169.143.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:de:73:39:27:72:93:83:d7:d3:9b:df:ea:6f:25:00:ff:43:
3b:d6:08:2a:dc:4f:cb:df:76:bf:d2:49:f8:c2:7a:1a:52:4c:
e2:de:ec:fb:49:07:a5:50:5b:2f:d3:51:b0:e8:46:43:37:b0:
46:97:12:d3:20:8a:8d:f1:7f:71:b0:35:88:b4:79:28:c4:3f:
fc:3f:27:3d:a1:85:02:ba:3d:39:a2:05:d6:35:bb:40:62:a2:
3e:83:58:a5:61:ab:c1:62:e0:0a:4c:0e:42:39:36:97:47:d6:
38:1b:c7:8c:b9:2b:ce:64:b8:74:60:62:8f:f9:d1:e3:51:64:
7c:6c:af:9d:1a:05:bc:af:4d:9c:e8:41:9a:8f:1a:ef:06:11:
61:59:d3:98:1e:6b:08:e5:1e:b6:bb:1e:38:b0:22:d0:dd:74:
ef:92:ee:68:1f:03:2d:1d:fb:2b:96:91:7e:ed:fa:30:f2:b4:
a2:d8:08:1c:8f:a8:f1:68:61:df:4f:13:c1:3e:38:15:c9:ab:
7c:e0:98:63:ac:39:56:13:a0:57:c6:e6:fd:f0:bf:5b:d0:14:
bf:aa:9c:6a:3b:9a:c6:34:33:d3:fc:59:a4:a3:90:48:fa:7d:
91:fe:1a:4d:3c:ac:b2:eb:b1:7f:ef:af:7c:a5:a5:0d:8d:fd:
5e:63:24:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 23:11:31 2024 by rpki-client on console-ams.rpki-client.org