Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/726ebd17-1bca-3932-986f-4135e9711d98.roa
File: 726ebd17-1bca-3932-986f-4135e9711d98.roa (raw, json)
Hash identifier: 37giRt1+5IencFfjI1s7uOC4ne9lcoYJjOYc2uNAuSo=
Subject key identifier: 2D:DB:4C:08:CD:00:27:08:6F:85:D0:64:6E:83:1E:7E:A0:43:71:28
Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8
Certificate serial: 010D0C9F4328584711874C4CF9239255414DF480
Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/726ebd17-1bca-3932-986f-4135e9711d98.roa
Signing time: Sun 01 Sep 2024 10:01:18 +0000
ROA not before: Sun 01 Sep 2024 10:01:18 +0000
ROA not after: Sat 30 Nov 2024 11:01:18 +0000
asID: 33724
IP address blocks: 64.136.98.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 10:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:87:4c:4c:f9:23:92:55:41:4d:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8
Validity
Not Before: Sep 1 10:01:18 2024 GMT
Not After : Nov 30 11:01:18 2024 GMT
Subject: CN=8005fcba-c9e1-4789-8557-3abcc2e126bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:5d:0b:6a:8e:e5:a3:19:4e:7a:bc:cd:26:
c8:f8:a1:14:bf:e2:9f:1a:da:27:de:e8:1a:68:8c:
61:c5:40:80:c6:c2:d5:5d:1d:91:91:32:24:45:b9:
67:e8:99:3f:c0:94:c4:c5:7b:6d:0f:e3:7c:eb:77:
96:a1:f3:bf:cc:f8:fd:ef:fd:ef:f1:ea:b5:a3:47:
29:df:a7:d5:8a:4e:34:89:10:a9:96:96:9e:a6:45:
f8:10:56:28:03:9c:63:21:7d:73:e7:58:94:17:bb:
30:88:37:5e:89:02:9e:df:d2:cf:3c:8e:d5:76:da:
37:39:bc:dd:81:e0:d1:76:dc:55:c4:f8:31:f2:08:
50:f8:56:33:fa:fa:34:78:2f:b2:05:ad:6f:aa:a5:
ac:f2:24:17:98:15:db:da:01:df:1a:1e:7c:71:dd:
93:03:c8:29:9c:3d:f4:1b:c1:63:86:9d:b4:9c:3c:
cc:b8:bd:2b:a7:17:e8:ba:19:f3:46:bb:5b:99:b2:
55:ec:10:0b:e3:46:1e:c4:cb:5b:aa:7c:2c:d1:e2:
10:33:9e:50:d6:ca:00:af:a7:0c:0a:90:9f:a4:e7:
bb:83:38:15:bb:e6:c0:a3:0f:42:c1:65:4b:d9:76:
cb:4c:e4:de:ae:e0:73:64:c5:09:54:3a:04:93:2c:
bb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DB:4C:08:CD:00:27:08:6F:85:D0:64:6E:83:1E:7E:A0:43:71:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/726ebd17-1bca-3932-986f-4135e9711d98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl
X509v3 Authority Key Identifier:
keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.136.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:f9:1b:d0:12:af:0c:8c:d1:7e:59:2c:4d:67:67:f7:42:de:
da:74:cf:5a:5f:12:f5:3d:07:b1:b5:57:a8:8f:29:0f:a6:00:
bb:0e:96:0f:11:da:65:f4:63:77:c3:b7:9c:79:8a:5f:09:b6:
b7:e2:cb:87:38:66:fa:8b:93:49:aa:d0:fa:62:b9:82:19:ca:
ec:90:64:bf:8f:3d:6c:23:7b:e4:c5:f6:76:f3:b0:99:fa:11:
ea:29:af:53:5d:30:c4:9c:37:cf:fe:d5:ee:54:ed:db:b0:ad:
42:ce:bf:3f:4d:a0:93:d1:4c:02:bd:a7:dc:48:08:80:2b:2e:
a3:86:b0:de:3e:26:28:41:e2:df:d5:34:5b:e6:dc:3c:8d:64:
cb:05:49:f8:95:50:d4:2c:f1:ff:f5:3f:6d:1a:03:d8:79:f8:
84:2f:1a:cf:26:79:1f:44:f8:13:c2:ad:c3:5f:27:f7:a0:7d:
41:15:26:5e:3f:a1:72:7d:f3:aa:2c:11:3f:e3:97:a2:99:4b:
e7:75:d1:db:67:9d:2d:7b:3d:de:3f:fc:3e:6e:4a:0e:48:10:
8a:bd:b0:70:94:04:a6:86:81:8a:8c:c0:34:22:cb:6a:0f:7d:
2e:fb:96:ce:5d:4f:43:8f:38:98:ee:51:db:74:14:16:c5:9c:
3d:3f:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 12:45:46 2024 by rpki-client on console-fra.rpki-client.org