Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a69ce0a-7e19-3501-9016-9d0c219d4543.roa
File: 8a69ce0a-7e19-3501-9016-9d0c219d4543.roa (raw, json)
Hash identifier: 8mOgatEn6FEZG8pDEhCY3wHmEKm7MRp2MU2bOC0iB94=
Subject key identifier: 67:8E:80:52:FE:D7:C4:4F:43:34:CC:7B:A0:86:FA:F1:B6:3A:12:5B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858455332F1BCE4707210DE4EE900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a69ce0a-7e19-3501-9016-9d0c219d4543.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 71.30.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 07 May 2024 18:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:32:f1:bc:e4:70:72:10:de:4e:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=e1bcaa11-0592-4ae1-8650-8ca08e1e44ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:1b:79:97:52:b0:1b:45:ba:8b:8f:72:50:
a7:b6:33:ca:d0:a3:ed:02:77:66:23:e0:1b:56:d9:
80:de:15:a9:45:ef:b7:05:b8:71:0f:26:43:31:25:
49:30:9f:9d:e8:c8:e1:e8:6f:b3:31:cc:4b:e7:f4:
1f:f7:77:41:9f:6a:41:91:51:49:5d:bd:64:83:c4:
95:50:12:89:ad:28:29:6c:6c:76:d7:e1:01:36:76:
da:62:4e:2d:08:1c:2d:24:0c:59:8a:35:37:4d:45:
f0:58:43:b6:db:e7:7d:bb:b5:4f:ed:4d:59:ef:5a:
df:a6:12:1a:47:35:6a:d7:ff:87:f0:f1:fc:2c:02:
c5:e4:49:c1:29:f4:21:26:7a:d1:3a:d7:8a:c0:ef:
df:40:39:10:7c:b1:b2:b7:bc:d4:b5:43:b4:e9:a9:
a5:a5:16:04:52:29:d8:ca:1a:9f:92:10:b6:84:d5:
1d:d4:21:5a:e1:f2:bc:fc:b2:57:4e:c4:8a:9b:20:
36:df:f7:63:a8:4c:21:34:42:38:7d:28:fd:08:1e:
dc:fe:c7:83:b6:af:9f:bf:3b:47:1e:d2:16:0c:f4:
7d:3f:a4:c0:9c:fd:a4:e1:50:d0:6f:03:2b:30:1b:
5e:ab:a5:74:fc:83:1e:bc:f3:ed:5d:69:f1:21:55:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8E:80:52:FE:D7:C4:4F:43:34:CC:7B:A0:86:FA:F1:B6:3A:12:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a69ce0a-7e19-3501-9016-9d0c219d4543.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:b6:90:c7:a7:64:47:7c:ee:e1:37:ab:b4:dc:9f:9f:65:0d:
f1:16:d9:13:5c:5a:1b:b1:f1:58:16:32:54:8d:c4:55:e6:48:
5d:84:37:4e:9b:24:79:a7:74:a9:82:14:34:03:38:9e:b0:8b:
99:7a:3d:1d:3e:4d:d3:35:8a:ab:c1:11:5e:e1:69:9f:3c:52:
8c:6f:0f:9d:c5:69:60:41:4f:69:10:d3:be:68:c6:98:d6:ff:
45:a0:7c:4f:d0:37:fe:bd:9d:c3:1c:58:cc:f3:3b:5a:27:66:
ca:50:38:a5:97:d6:5b:05:83:bf:4f:3a:78:f1:c9:5a:fb:de:
32:f3:a9:7d:dc:ff:ed:5d:9f:20:96:3b:ea:2c:51:85:a9:b7:
4c:9d:b6:83:0b:f1:eb:f1:b1:0c:a9:27:c3:8a:f7:08:8d:29:
59:0f:3e:3a:0f:5b:d1:28:1b:49:d9:4d:8b:62:52:5e:14:7f:
38:c9:09:8d:b5:01:57:33:09:38:57:0c:c6:9f:c8:c7:7e:21:
ea:1b:a2:8a:58:b5:94:60:8d:d4:05:09:9b:6a:ff:e2:70:75:
bf:74:63:54:4d:87:52:51:de:4e:74:a4:b3:a4:e8:9f:69:81:
a7:b2:63:cf:f5:02:db:c2:21:96:68:f0:35:30:08:e3:b2:2c:
91:ba:a2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:50:39 2024 by rpki-client on console-ams.rpki-client.org