Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/9bc9d225-0444-33b4-9914-d2c2f6d00018.roa
File: 9bc9d225-0444-33b4-9914-d2c2f6d00018.roa (raw, json)
Hash identifier: 6RukyZqQ0Yiff2Rt/2i+l5mTtDhVBvePousV/f8gTFQ=
Subject key identifier: 87:F8:86:A0:3F:16:C3:29:F6:D5:D6:4F:65:6C:FF:67:0E:F1:36:2A
Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial: 010D0C9F4328584221384E56AEBC589D27A0F4C0
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/9bc9d225-0444-33b4-9914-d2c2f6d00018.roa
Signing time: Tue 06 Jun 2023 13:00:19 +0000
ROA not before: Tue 06 Jun 2023 13:00:19 +0000
ROA not after: Mon 04 Sep 2023 13:00:19 +0000
asID: 13638
IP address blocks: 72.11.24.0/21 maxlen: 21
72.11.0.0/19 maxlen: 19
72.11.18.0/24 maxlen: 24
72.11.16.0/21 maxlen: 21
72.11.3.0/24 maxlen: 24
72.11.4.0/22 maxlen: 22
72.11.8.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:21:38:4e:56:ae:bc:58:9d:27:a0:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
Validity
Not Before: Jun 6 13:00:19 2023 GMT
Not After : Sep 4 13:00:19 2023 GMT
Subject: CN=6dd3b1bc-f98a-411b-8aa4-7a7b64a81d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:fc:84:af:e3:60:37:8c:80:06:80:38:16:
98:7b:72:c2:b3:c9:a4:01:78:9d:38:48:60:37:95:
39:ff:36:c7:c5:44:e4:2b:84:56:1c:94:8a:f4:74:
57:f5:5a:1c:e4:7c:79:a9:ed:3c:93:eb:c5:d0:77:
d5:36:4c:21:d1:af:d0:6e:23:df:38:ad:01:dc:6d:
33:43:6b:ee:10:82:e2:34:cc:65:ec:49:8c:f9:85:
d4:47:b3:c3:0e:ca:ea:07:99:d1:eb:72:49:64:ee:
58:cc:db:1e:8a:db:35:7e:21:e5:cd:2f:50:c9:51:
0c:21:b9:e2:5c:a0:f3:a7:f0:56:4f:0c:7c:88:05:
d7:31:1d:c4:2e:f3:97:06:bc:25:8e:d9:ce:ac:91:
e0:a4:7f:2b:d6:af:1a:70:91:5f:e7:40:f5:c8:e4:
c5:17:02:76:2a:0e:3b:d0:14:fc:c2:54:e0:c6:ee:
47:a4:86:3c:63:3d:71:38:4b:26:38:09:80:58:c5:
9b:d3:01:3e:b0:5a:c3:69:83:ad:01:78:74:9b:76:
dd:6a:2c:f5:59:3c:f9:e9:d7:2f:23:79:20:9e:33:
6c:ed:5f:e5:ab:6a:16:a9:fa:63:d1:83:07:ed:3a:
70:dc:e7:fe:11:bf:eb:55:14:11:6d:8a:b7:a2:c8:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F8:86:A0:3F:16:C3:29:F6:D5:D6:4F:65:6C:FF:67:0E:F1:36:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/9bc9d225-0444-33b4-9914-d2c2f6d00018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
X509v3 Authority Key Identifier:
keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.11.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:48:19:8c:e6:08:3b:a5:a2:d6:f8:2f:3f:5e:a7:6e:f9:c9:
e9:a7:0b:92:e0:da:fa:6a:06:cd:34:f7:2b:5f:59:1c:9f:b5:
93:b4:72:d0:a9:3c:e0:49:bf:db:c7:67:14:a7:87:cf:29:89:
8e:d0:79:f1:44:17:27:46:45:c3:5e:7d:0f:fc:ff:a4:cc:7c:
5f:97:39:b5:80:3f:d4:1c:19:a0:84:41:67:44:38:62:4a:c3:
76:4e:ea:85:df:b9:00:03:be:20:55:87:c2:9f:36:97:c4:b9:
5a:00:c9:30:d6:21:39:d6:e7:e0:ba:3f:eb:42:85:30:72:24:
a0:1c:bc:4a:13:05:25:a5:15:dd:9d:f0:36:24:fb:f8:2f:9b:
b0:5e:83:fe:07:a1:8b:f7:c7:db:7e:e2:be:4c:b0:2f:0f:e7:
42:5c:b8:e7:f4:c1:1a:68:79:20:e6:99:76:9f:0a:24:03:fc:
f4:84:d3:f4:2f:69:b4:56:14:0c:1b:13:1d:9b:2d:92:bd:a5:
7e:17:52:26:9a:6a:db:96:59:13:cb:80:b3:4c:bf:0f:4c:a6:
b6:4d:05:e7:07:f3:b3:10:ae:61:da:aa:d4:18:6a:3f:79:ce:
0f:5e:a3:99:87:d6:6b:14:b2:1b:ef:63:d3:fa:1d:20:39:60:
ab:f8:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 17:52:42 2023 by rpki-client on console-fra.rpki-client.org