Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ab3045b8-5a20-36f1-b94e-5cca8e41cb6b.roa
File: ab3045b8-5a20-36f1-b94e-5cca8e41cb6b.roa (raw, json)
Hash identifier: PWA1IJWjAOz14TiaRRwGZTGcqBmEnA62R76CVBIdmhE=
Subject key identifier: 38:5D:18:35:1A:FD:24:98:E2:3D:9E:A9:48:4A:23:AC:F8:C4:54:5F
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584484BA0A56DBC9353279B00D00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ab3045b8-5a20-36f1-b94e-5cca8e41cb6b.roa
Signing time: Thu 11 Jan 2024 14:00:29 +0000
ROA not before: Thu 11 Jan 2024 14:00:29 +0000
ROA not after: Wed 10 Apr 2024 13:00:29 +0000
asID: 11232
IP address blocks: 24.111.0.0/16 maxlen: 16
165.23.0.0/16 maxlen: 16
140.186.0.0/16 maxlen: 16
208.107.0.0/16 maxlen: 16
184.83.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Thu 22 Feb 2024 16:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:84:ba:0a:56:db:c9:35:32:79:b0:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 11 14:00:29 2024 GMT
Not After : Apr 10 13:00:29 2024 GMT
Subject: CN=c4734ef7-f81b-4bd9-9419-4c87f99963e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:b8:81:69:8b:e2:c2:39:5c:ae:34:09:fd:
ef:82:2b:66:40:ed:10:21:24:f3:f0:20:4a:45:1f:
81:30:92:3c:4c:89:0c:76:d5:c9:92:60:bf:11:0d:
aa:13:27:fe:c1:21:e6:bb:ce:d7:c7:2d:dc:20:66:
d4:5f:37:b0:12:c9:45:c7:25:1e:cd:d8:c1:c9:76:
60:58:36:dd:1b:58:0d:dd:97:2c:47:5d:8e:70:67:
f7:cd:b3:ca:02:8c:bb:36:bb:c8:e5:a9:24:9a:c9:
7c:8e:23:c9:fd:0c:b2:ab:63:2f:84:1d:51:5f:17:
2e:e2:5a:b1:50:bf:76:29:b2:60:ff:04:34:dc:bf:
da:5a:83:02:8b:fc:41:55:17:0c:7a:6f:89:fd:66:
06:4e:df:1d:90:e0:a2:ef:0c:77:e9:4b:27:3f:08:
ef:fb:2d:e2:81:99:20:aa:b7:7f:3c:e4:7e:44:b4:
62:04:1a:59:9f:84:56:a6:6c:00:f0:b7:29:d3:c8:
c5:81:f1:b3:91:9b:20:80:35:49:52:24:23:49:d8:
63:0d:f4:91:a0:2d:4e:cb:e6:ad:02:27:5e:93:d6:
96:c1:c8:86:a4:0e:90:1e:63:98:1a:55:5d:a2:98:
01:b2:30:4d:34:41:ab:4d:30:e7:b1:bb:8d:71:be:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5D:18:35:1A:FD:24:98:E2:3D:9E:A9:48:4A:23:AC:F8:C4:54:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ab3045b8-5a20-36f1-b94e-5cca8e41cb6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.111.0.0/16
140.186.0.0/16
165.23.0.0/16
184.83.0.0/16
208.107.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:d9:72:50:11:e7:54:cc:cf:b4:8e:1c:43:9a:02:ae:43:21:
25:6b:fb:57:a5:12:09:95:7c:c5:4f:75:e0:7c:2a:0a:0c:79:
d8:8e:2b:ce:70:3c:5b:82:9d:92:43:64:e7:87:a2:c5:51:79:
0b:c7:1f:47:95:1f:c8:17:f1:23:2f:4f:90:d2:63:96:16:38:
b9:4d:4d:72:12:d6:0e:ba:01:04:24:3d:f0:eb:72:d9:5c:29:
e4:15:bf:80:6d:e5:f8:0d:19:bf:06:10:1f:be:aa:bf:a7:45:
de:08:80:71:9b:54:52:23:79:75:0d:bd:b3:47:24:34:e1:33:
f6:3a:9e:e7:ba:79:4e:ab:39:f3:ff:34:29:d6:6c:f2:6b:9c:
76:c3:83:5c:38:8a:ac:44:5d:9c:25:f3:07:2b:0f:7c:7c:de:
91:d9:58:f6:68:67:cd:44:32:28:52:b9:e9:f1:f0:91:b2:ba:
47:67:a8:0d:17:54:ef:aa:b9:db:a2:ed:c7:53:5d:e2:4a:1a:
7a:34:f3:ae:34:79:a3:ca:4a:ac:96:14:69:42:7b:ff:77:df:
b3:df:0b:0b:a4:3b:dd:4f:94:e7:71:ff:c5:33:74:5e:4e:1e:
89:8b:90:a1:df:46:17:39:db:1e:69:c3:93:94:d6:6b:7a:e9:
92:c9:0c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 20:52:02 2024 by rpki-client on console-fra.rpki-client.org