Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/b41dab0d-4227-3bd3-8c9d-4410adb31246.roa
File: b41dab0d-4227-3bd3-8c9d-4410adb31246.roa (raw, json)
Hash identifier: NbwyJdXw9SS750p9fDpF/nV2orDm+aP5LJrWigIgXDg=
Subject key identifier: F7:BE:AF:43:96:9E:F5:36:31:E4:C3:EF:E0:61:5E:4A:62:BA:BD:9A
Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial: 010D0C9F432858460314196ADF4A24C9F00FD1C0
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/b41dab0d-4227-3bd3-8c9d-4410adb31246.roa
Signing time: Mon 27 May 2024 13:00:34 +0000
ROA not before: Mon 27 May 2024 13:00:34 +0000
ROA not after: Sun 25 Aug 2024 13:00:34 +0000
asID: 16509
IP address blocks: 202.130.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 22:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:03:14:19:6a:df:4a:24:c9:f0:0f:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
Validity
Not Before: May 27 13:00:34 2024 GMT
Not After : Aug 25 13:00:34 2024 GMT
Subject: CN=39c42f50-0c12-45a4-80cd-a9cf055353e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:35:ed:03:03:30:42:5b:a5:7c:2d:e3:9a:
a5:06:c2:51:b4:0e:fc:73:85:a3:6f:b9:7b:08:d2:
ad:2c:b6:5f:ef:ac:48:53:10:b3:4e:6d:0f:79:e6:
a0:59:b5:77:ff:f1:22:ee:37:32:72:a0:77:2d:40:
3b:bf:19:c1:d0:26:c6:b3:76:a8:87:2c:3f:c3:70:
93:c3:12:f0:33:79:bb:d6:64:7e:04:40:99:04:32:
da:e1:08:99:4b:7d:fe:53:13:55:dc:2a:6a:00:6f:
45:4c:9e:73:6e:e4:9f:ae:77:28:ff:16:20:b1:12:
10:a1:08:3d:aa:f2:2c:b1:dc:85:dd:c8:71:32:ef:
0d:d7:d8:3e:5b:21:c6:ba:4a:67:15:8f:34:7c:20:
89:1c:37:b4:bc:71:10:63:14:a3:11:b0:47:5b:9f:
ef:a3:02:58:e1:63:87:b0:75:41:1a:80:6a:68:7f:
e2:36:35:a3:da:7a:6e:0a:63:8b:24:40:04:fe:6f:
b1:ff:87:c9:23:53:49:65:1f:cf:51:1f:c3:a2:dc:
f6:96:cf:ee:8a:a4:89:3a:c2:67:bb:77:99:32:b3:
6f:f2:a0:e0:ea:af:3d:6f:4f:5d:e3:36:b4:51:16:
8e:00:c9:50:07:56:36:4a:cf:8e:a6:29:a1:2b:ed:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BE:AF:43:96:9E:F5:36:31:E4:C3:EF:E0:61:5E:4A:62:BA:BD:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/b41dab0d-4227-3bd3-8c9d-4410adb31246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
X509v3 Authority Key Identifier:
keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
sbgp-ipAddrBlock: critical
IPv4:
202.130.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:7b:f0:25:3c:b0:42:21:54:9d:e8:ee:19:86:fb:6a:2c:79:
8c:f8:de:92:4b:58:d1:12:ac:a5:e5:1b:24:d3:e3:94:97:7f:
9d:60:9e:83:97:d3:d4:28:48:11:4f:6a:c5:a8:fd:90:fb:b6:
82:9e:6d:1b:81:36:1b:1b:8c:45:8d:6d:8e:a9:22:a4:72:7f:
17:1d:c2:9e:83:1f:91:b5:52:12:e4:48:86:34:bd:28:09:4a:
3e:cb:5d:ad:81:01:c3:06:34:d3:34:ab:cd:64:f7:e3:a1:f8:
b5:23:b9:dc:ba:ee:28:ef:62:00:d1:de:71:55:5f:42:f9:7d:
18:d9:11:b9:9f:8f:4a:f1:ab:07:5f:34:fb:9a:7c:6d:ad:26:
87:98:6d:5a:1e:9c:71:3f:c2:0b:1c:06:fc:c3:fd:46:a5:1f:
cd:a6:b2:f8:d3:d6:8b:c6:32:88:4a:9c:41:d8:a6:39:6a:94:
63:f8:43:a1:08:a8:bf:d1:16:97:e7:a0:54:62:45:25:fc:cc:
56:79:7e:6f:bf:22:ee:a6:cb:0f:f0:af:64:f1:71:66:56:06:
fa:03:9d:f2:f2:03:26:9f:fc:dd:e6:d0:d7:f0:a0:cd:91:d5:
f0:2c:4c:4c:d5:20:8c:fb:7d:b5:56:bc:e0:54:36:d2:70:e0:
c9:42:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 23:34:53 2024 by rpki-client on console-fra.rpki-client.org