Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/c500c44d-697e-32df-9819-0df2718929c3.roa
File: c500c44d-697e-32df-9819-0df2718929c3.roa (raw, json)
Hash identifier: y6QYlSvf7dpeYVhg7kSAFcExLPoBJSzbBaCkVvFv9sk=
Subject key identifier: 7E:E8:95:91:E2:AE:23:CC:04:3F:C9:AA:2D:90:6D:A1:14:95:9E:5F
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584667E60C1C106AAA9D6511B790
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/c500c44d-697e-32df-9819-0df2718929c3.roa
Signing time: Tue 02 Jul 2024 15:44:47 +0000
ROA not before: Tue 02 Jul 2024 15:44:47 +0000
ROA not after: Mon 30 Sep 2024 15:44:47 +0000
asID: 16509
IP address blocks: 192.67.136.0/21 maxlen: 24
192.67.144.0/21 maxlen: 24
192.67.152.0/22 maxlen: 24
198.55.32.0/21 maxlen: 24
198.55.40.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 21:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:67:e6:0c:1c:10:6a:aa:9d:65:11:b7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Jul 2 15:44:47 2024 GMT
Not After : Sep 30 15:44:47 2024 GMT
Subject: CN=a4c23811-38ca-4757-bdb3-fe6bbfde3630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:ac:6d:4a:37:69:a7:32:35:0a:db:53:bc:
37:78:2d:b4:7a:45:ac:9c:7b:df:83:de:78:c0:12:
8c:54:a3:b3:b5:f8:87:67:78:3f:77:1e:6e:cf:71:
d0:e1:06:96:4f:c3:b3:47:5a:83:f9:2e:bd:e4:95:
ae:c6:c8:5b:51:1d:05:59:21:fe:63:ba:7e:89:0f:
a1:0b:0b:15:1b:6e:61:ae:26:99:5c:43:84:5b:e4:
cf:13:c6:9a:14:be:08:50:c0:99:93:16:b7:56:8c:
28:25:93:ff:82:01:76:3e:55:e9:fe:00:d6:9c:7f:
ff:52:64:db:20:81:43:8d:f7:cf:25:e4:e7:b8:8c:
82:da:3d:3c:38:24:a4:ba:d1:51:a9:0c:c5:4a:90:
fd:b7:40:35:ed:1f:5f:56:07:db:f8:ce:3c:11:35:
35:1b:83:e9:6d:c6:eb:96:ac:46:91:d8:d1:e1:ec:
b5:3e:a6:e8:40:69:57:a9:21:f2:fe:59:ad:4e:2c:
b8:19:bc:00:86:e2:7d:e0:5d:04:39:24:d1:8c:1d:
7a:ce:9f:66:e8:c1:e6:ec:3c:6b:e7:9b:a0:ab:a2:
48:82:36:6b:b9:32:63:6a:27:b0:86:a3:1f:ad:61:
85:96:3c:12:d1:dc:12:ab:9c:a6:97:c0:04:b7:b5:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E8:95:91:E2:AE:23:CC:04:3F:C9:AA:2D:90:6D:A1:14:95:9E:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/c500c44d-697e-32df-9819-0df2718929c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
192.67.136.0-192.67.155.255
198.55.32.0-198.55.41.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:a2:4b:ca:44:93:9b:d8:9d:92:cf:cb:ba:ef:d7:0e:35:3f:
81:1b:bf:1c:60:64:67:38:d2:7d:90:da:74:28:ce:79:07:91:
f9:a9:d4:45:53:0f:dd:02:73:1d:fe:dc:5f:00:e2:51:e8:f4:
0d:cd:d3:8f:b6:19:50:78:2b:0d:fa:3c:83:b2:fd:f9:3d:42:
d2:fc:48:63:b1:4d:c3:b7:a6:dc:e2:e0:2a:38:a5:22:c5:cf:
8f:52:f3:0c:78:3d:c0:c7:19:1a:f7:5e:70:e6:4a:85:75:ac:
40:cd:dc:ce:35:5d:2b:5d:94:d7:72:c2:35:c5:9e:2b:2c:fa:
43:b7:b2:ac:f2:e3:3d:83:0a:bb:7f:aa:ee:98:2c:55:aa:19:
2c:21:2a:ff:f8:3a:85:85:03:22:e8:d8:cb:6f:cb:67:fc:de:
7d:82:a9:c5:09:34:b1:5c:1f:b5:74:cc:51:55:33:69:de:bc:
98:94:53:0f:30:11:35:82:ac:8a:1b:3b:9a:56:4d:ac:0a:cd:
cf:c5:8a:eb:0f:8c:86:9e:ff:22:bc:8c:e3:c2:61:a9:05:f3:
64:3f:7e:1c:72:5d:f2:e8:9d:12:24:25:98:e6:e0:76:ed:f5:
16:70:30:63:6c:60:52:5b:d0:9a:de:bb:84:49:5a:6c:74:de:
df:1e:1c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 00:20:33 2024 by rpki-client on console-ams.rpki-client.org