Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/af993ed5-c5f8-3d7b-adb1-86758ba47472.roa
File: af993ed5-c5f8-3d7b-adb1-86758ba47472.roa (raw, json)
Hash identifier: EkTIdt8bju8u5WdwG3wRlT9nQtHeRGBSEXcK7mQ2Uu8=
Subject key identifier: 68:F3:2A:FA:F8:63:13:64:81:0F:41:34:E1:C7:31:3F:37:A2:5E:04
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858468B49CFC04181B0DCAD75CE80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/af993ed5-c5f8-3d7b-adb1-86758ba47472.roa
Signing time: Mon 15 Jul 2024 07:59:06 +0000
ROA not before: Mon 15 Jul 2024 07:59:06 +0000
ROA not after: Sun 13 Oct 2024 07:59:06 +0000
asID: 212238
IP address blocks: 172.94.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 06:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:8b:49:cf:c0:41:81:b0:dc:ad:75:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 15 07:59:06 2024 GMT
Not After : Oct 13 07:59:06 2024 GMT
Subject: CN=8f63d12f-f803-45cc-a505-56aa88d2b014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:13:a3:af:92:49:e2:2f:96:cf:98:16:bb:89:
22:b0:f6:cd:d8:66:cf:5c:8b:e4:d7:93:c4:64:b4:
e4:f7:0b:c3:5f:66:52:23:2e:da:d5:c5:18:85:36:
4e:6f:55:a0:c0:4b:b6:6b:ab:5e:b3:0e:8e:fd:17:
90:4c:b6:06:52:ff:a9:be:c9:82:74:1e:a5:35:71:
b6:0c:5f:97:b0:51:88:f7:25:4b:d9:cd:d4:3d:c0:
bb:21:fd:c7:a9:ce:a4:83:fd:f6:28:b4:1c:1f:e8:
19:44:86:06:61:34:ed:c0:0b:4d:d0:ac:15:2a:ed:
d3:18:39:c7:53:65:45:e0:03:eb:8c:09:e1:36:59:
cd:e3:87:cc:37:cd:c7:c2:c8:e1:b5:35:87:a5:8f:
e6:04:2d:62:17:85:d5:04:6b:7b:30:04:ed:24:95:
42:db:4d:03:68:70:15:ea:10:24:57:f2:22:37:f2:
eb:b3:ad:bf:d6:69:b2:62:17:0c:07:fd:05:6a:cc:
1e:a4:0a:76:93:8c:95:60:06:0f:c4:45:37:fd:61:
a7:20:2f:6d:c3:9f:b8:d6:1f:40:3a:4c:c4:fc:2d:
5e:c2:8c:31:52:de:64:0b:fc:b5:34:eb:54:02:1a:
ed:0d:9f:fb:17:b9:eb:b5:64:1f:2a:ba:ec:0d:80:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F3:2A:FA:F8:63:13:64:81:0F:41:34:E1:C7:31:3F:37:A2:5E:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/af993ed5-c5f8-3d7b-adb1-86758ba47472.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:e4:a2:29:ff:25:1e:d1:23:40:84:a1:f2:8f:55:03:2c:d1:
3b:54:60:5b:93:7c:cc:e8:59:f0:44:49:d5:1f:75:f8:e6:44:
7c:cc:88:bc:fe:76:bf:af:92:ee:5d:84:e6:80:ae:cf:7e:dd:
91:85:ec:15:da:0b:00:4a:6b:4c:89:ba:5f:aa:68:41:c5:84:
d1:6a:06:7e:4d:b1:b6:4a:ee:6c:21:8b:29:eb:de:19:fa:8a:
d6:b4:af:90:90:40:4e:40:13:dc:a1:7f:70:c8:9a:11:2c:be:
c1:c1:ec:e5:e1:d1:49:f6:bc:ba:ef:80:64:00:94:3c:cf:16:
5d:af:8e:c6:51:c9:73:f4:09:b0:af:49:11:a5:82:af:fe:e6:
c3:c5:0f:18:d4:de:43:78:f9:95:0c:d2:90:64:b0:f3:2b:8e:
69:21:8c:69:d1:46:1f:04:b8:36:91:c8:53:c7:95:98:ae:ee:
f3:10:ba:04:47:85:c4:36:81:e0:ec:93:d4:62:a6:cf:4d:30:
00:cc:77:4b:e4:ad:60:8d:20:0b:10:f8:fe:f7:b1:78:9b:47:
a0:cb:27:e0:0d:38:c6:89:03:55:1f:90:0d:d5:8e:2d:c2:fb:
84:74:cd:10:8b:f5:f1:9a:62:1e:d0:13:a8:b9:11:61:ae:72:
a1:ab:85:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 07:42:31 2024 by rpki-client on console-ams.rpki-client.org