Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/619d3fca-c188-363f-9371-1d606dd72c3e.roa
File: 619d3fca-c188-363f-9371-1d606dd72c3e.roa (raw, json)
Hash identifier: kJJxZXIp80fyvmGNC+7bAEbSpGcIf/PxUz07b/xhZ9k=
Subject key identifier: E4:AD:05:C4:8D:E3:FB:74:0C:7B:2A:A1:ED:16:71:B2:C6:3F:0D:F9
Certificate issuer: /CN=530ba529-ac94-44aa-8a24-334da5fccb1e
Certificate serial: 010D0C9F4328583D692B5C452CBA8358AA545E80
Authority key identifier: E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/619d3fca-c188-363f-9371-1d606dd72c3e.roa
Signing time: Fri 18 Mar 2022 04:00:00 +0000
ROA not before: Fri 18 Mar 2022 04:00:00 +0000
ROA not after: Tue 02 Jul 2024 04:00:00 +0000
asID: 16509
IP address blocks: 204.10.136.0/24 maxlen: 24
216.239.128.0/24 maxlen: 24
2607:fe90:8000::/48 maxlen: 48
2607:fe90:8001::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 20 May 2022 18:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:69:2b:5c:45:2c:ba:83:58:aa:54:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530ba529-ac94-44aa-8a24-334da5fccb1e
Validity
Not Before: Mar 18 04:00:00 2022 GMT
Not After : Jul 2 04:00:00 2024 GMT
Subject: CN=bce74149-f12d-4d4c-a371-87faad67a7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:b5:62:2c:02:e4:d8:f4:a1:f2:87:51:d4:
a3:64:f9:de:d3:a2:d5:55:43:31:6b:e7:26:b3:9c:
8c:ab:8d:71:7d:6a:52:89:5f:e9:77:7a:48:a3:26:
63:f6:58:81:5b:9e:fe:a8:7a:82:10:89:86:1d:e0:
62:7b:62:cb:72:cf:62:55:50:10:64:6b:3f:6f:74:
d8:84:90:97:b1:19:d5:5a:6b:46:7c:8f:fa:2a:22:
f6:10:1a:30:af:10:d4:25:d6:6b:7e:47:4f:d1:b0:
f7:bd:3a:ba:a1:24:43:e3:bb:4d:69:f6:b1:c5:2d:
71:e9:51:fd:ae:4a:8c:cb:7c:13:42:a5:23:aa:c4:
71:83:da:f5:f8:a4:43:18:9f:bb:ee:fa:b1:51:4e:
9f:7b:69:d8:6d:b7:22:1f:5c:4a:b6:6d:49:22:8f:
1a:13:a6:98:3b:8c:a3:8c:3f:2c:38:50:c9:90:e3:
ed:31:e5:0d:e6:70:13:25:1b:0f:9a:47:7a:d3:ec:
d0:26:be:0f:18:f9:df:2a:b9:68:cc:be:0e:b8:d4:
6c:be:9a:b4:68:e3:91:79:80:ad:e0:93:07:45:c6:
a3:d1:ad:7b:8e:e9:95:09:41:7e:44:5d:cf:c3:30:
70:d1:66:4c:6e:b2:eb:9e:e4:92:38:7e:74:07:11:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AD:05:C4:8D:E3:FB:74:0C:7B:2A:A1:ED:16:71:B2:C6:3F:0D:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/619d3fca-c188-363f-9371-1d606dd72c3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl
X509v3 Authority Key Identifier:
keyid:E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.10.136.0/24
216.239.128.0/24
IPv6:
2607:fe90:8000::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:34:e5:87:51:22:69:3f:82:0c:aa:69:cc:eb:1d:39:04:3b:
e8:0a:61:68:45:54:d3:8f:5b:9b:ea:7f:13:1f:3c:e8:e7:8f:
75:57:a9:dc:81:7d:e5:a0:d0:93:f7:7e:e5:17:21:f5:04:41:
79:91:5a:7f:ad:b0:2c:f2:34:de:21:ee:95:8c:5b:a6:0d:af:
37:0c:23:08:1d:1e:4c:b5:4e:e1:14:a0:37:90:37:b2:03:3d:
e7:39:8f:55:42:8b:8e:f0:cb:2d:38:93:ce:a8:5d:66:4a:c7:
c3:52:ae:6a:ee:57:da:df:15:b4:c0:7c:f4:eb:df:d4:a4:fe:
27:2c:24:f6:cb:ef:c1:05:bb:26:42:cc:1d:2f:83:77:b4:06:
28:45:41:0f:9e:b4:7a:00:f5:fa:c8:7d:4d:bd:5c:cf:d5:6b:
10:b0:b3:12:ba:5e:10:ba:f8:e7:9e:c6:4d:cd:96:a4:83:de:
7c:70:32:da:54:59:8f:92:51:ec:12:08:59:25:4c:78:db:b0:
c8:57:98:f9:9d:7a:57:57:4e:45:97:ec:b5:e5:f7:d7:bf:35:
be:b7:12:14:c7:08:d3:3a:e0:ca:41:3e:c3:66:3b:f8:48:fa:
aa:e1:38:18:61:5c:04:23:01:5b:a8:75:1c:2e:dd:2d:e8:35:
82:a5:78:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:44 2024 by rpki-client on console-ams.rpki-client.org