Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/8561d442-7684-32cc-8e34-62624fff24cd.roa
File: 8561d442-7684-32cc-8e34-62624fff24cd.roa (raw, json)
Hash identifier: oiUesavwbrIx2VMJC4+cR6qTxYMRKAgbD9xDV1SH3M8=
Subject key identifier: 2C:01:E8:AC:B0:4F:9C:53:FF:65:4A:C4:28:4D:08:7B:30:2C:F5:8E
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F432858459C2CA44E4E32D2E4CAD64780
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/8561d442-7684-32cc-8e34-62624fff24cd.roa
Signing time: Sat 20 Apr 2024 16:22:07 +0000
ROA not before: Sat 20 Apr 2024 16:22:07 +0000
ROA not after: Fri 19 Jul 2024 16:22:07 +0000
asID: 834
IP address blocks: 147.124.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Apr 2024 01:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:9c:2c:a4:4e:4e:32:d2:e4:ca:d6:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Apr 20 16:22:07 2024 GMT
Not After : Jul 19 16:22:07 2024 GMT
Subject: CN=42afb0d2-cf31-4c3b-9179-55ab1b1e8af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c0:38:83:77:0c:9d:db:51:3e:75:5d:13:56:
82:d4:c8:3d:0e:5f:da:45:6d:79:1e:95:a8:66:26:
a6:f0:0f:ec:25:fd:42:a0:bf:f0:be:8b:d7:90:a2:
0f:15:39:41:6c:d2:4a:a2:74:dd:10:f4:c4:bb:b8:
81:4a:7b:69:25:14:e3:cc:06:6b:18:a4:7d:e2:4b:
4f:68:dc:e4:6e:ba:d2:3d:aa:1d:e2:58:b2:fb:45:
69:a9:3f:5b:64:04:4c:2e:c3:a4:42:c3:6e:87:ee:
90:fa:8c:55:42:98:91:34:56:06:37:9e:14:01:e2:
f8:d7:c4:3b:a8:82:18:68:55:c6:a3:55:ff:a5:3d:
b2:72:dc:9c:a2:f4:36:25:7c:73:c5:11:a6:fb:31:
3c:05:70:23:49:ac:6e:c1:6d:dd:82:f3:6c:a2:1b:
ec:51:69:14:b9:f7:36:f6:5b:f9:32:81:9f:6a:d2:
cb:57:3a:28:a8:f3:2a:6a:d1:72:ab:08:1a:58:ca:
32:65:01:7f:05:78:94:7c:c8:5e:23:8f:a7:de:84:
64:05:c0:b7:df:6c:8b:f6:ee:bc:4e:7f:11:44:d5:
11:d0:e5:2a:58:a3:e6:5e:e4:35:7d:7d:0e:eb:d3:
22:34:a5:36:b1:9e:fa:74:7e:69:ba:a3:70:0b:4b:
96:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:01:E8:AC:B0:4F:9C:53:FF:65:4A:C4:28:4D:08:7B:30:2C:F5:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/8561d442-7684-32cc-8e34-62624fff24cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:27:b2:a3:66:c6:b0:1d:8c:62:ef:72:51:c4:75:f1:bc:1e:
b5:d2:02:12:73:38:7d:04:b4:cb:ec:4f:d9:85:6c:07:a3:7a:
f1:da:4c:3a:6f:27:9e:cc:68:cf:99:e9:5e:f3:32:a3:7c:89:
9a:cf:6e:73:d6:06:99:4e:61:e4:fb:42:64:e7:93:d3:60:52:
aa:bf:9b:10:53:f1:7f:1f:de:27:fc:47:b2:38:1f:4e:a5:9a:
ed:fe:b7:2b:34:7b:59:2e:10:75:ca:30:07:7c:76:f2:0d:36:
7d:ff:74:80:ee:8d:05:d8:59:dd:8e:28:29:ff:28:0b:42:5d:
f4:16:7c:69:95:89:71:62:21:97:6d:42:c6:a5:4b:b3:6a:c0:
38:cc:56:3f:78:6f:09:12:e1:b5:82:ce:6e:ef:df:a1:28:48:
90:95:02:de:e3:b4:b5:3c:1b:29:59:51:82:5d:80:bb:1f:2d:
7f:9f:b6:2d:8b:be:66:d2:01:9c:ea:06:fd:d4:5b:86:16:b0:
07:72:b2:7e:68:71:78:b7:59:af:55:44:d3:ed:4b:d0:b9:40:
d9:4b:51:88:9a:5c:da:9d:6d:a2:5b:9e:32:9d:b1:96:3f:51:
f1:b7:69:3a:72:90:27:a4:59:27:aa:11:28:b8:42:08:5f:71:
6a:4b:4b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:09 2024 by rpki-client on console-ams.rpki-client.org