Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/c461439b-63bd-3b3a-9dbd-c67a19cc4efc.roa
File: c461439b-63bd-3b3a-9dbd-c67a19cc4efc.roa (raw, json)
Hash identifier: FmB8U2h+YdSRRrNl2BdrrOVFgrhOisZxwsQGEUBICxI=
Subject key identifier: 0B:59:49:61:51:0F:BC:E0:0C:EF:58:6A:29:D0:E5:73:E3:24:62:40
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858469F6A61F57C671EF05D080F00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/c461439b-63bd-3b3a-9dbd-c67a19cc4efc.roa
Signing time: Mon 22 Jul 2024 13:00:36 +0000
ROA not before: Mon 22 Jul 2024 13:00:36 +0000
ROA not after: Sun 20 Oct 2024 13:00:36 +0000
asID: 16739
IP address blocks: 67.217.4.0/22 maxlen: 22
162.253.108.0/22 maxlen: 22
162.254.156.0/22 maxlen: 22
192.208.29.0/24 maxlen: 24
208.72.144.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 05 Sep 2024 17:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:9f:6a:61:f5:7c:67:1e:f0:5d:08:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jul 22 13:00:36 2024 GMT
Not After : Oct 20 13:00:36 2024 GMT
Subject: CN=025d5704-fb79-46f7-9737-31123add4f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:88:68:cd:76:0f:6a:db:c1:82:6c:dd:23:27:
78:82:50:70:28:b5:89:a6:14:ad:0e:72:5d:79:34:
31:34:85:ac:ee:e7:b9:1f:9a:0b:3d:ce:08:af:ca:
26:58:52:2f:3b:58:77:ce:a2:e0:a0:32:67:13:f7:
6b:da:01:20:8d:d1:5b:2c:08:c0:98:23:38:48:98:
95:95:f1:5b:85:11:04:ca:a2:bb:d8:9e:3f:df:79:
b6:8f:19:ec:2d:6f:d3:50:ca:8e:22:dc:3a:bf:9f:
bb:90:96:6b:90:a9:0e:8b:03:43:d1:6d:98:18:6b:
65:93:34:a7:d0:84:14:64:bc:b5:60:f2:71:2b:e0:
ce:4d:37:8b:cd:80:93:60:d9:49:9a:8e:82:d9:71:
79:6c:2f:b8:13:cc:07:b0:f9:96:aa:e8:3c:08:0c:
2f:b4:84:93:51:3a:11:a5:c4:bc:46:62:7d:4b:bc:
56:c3:a8:74:89:3b:58:9b:5e:ec:01:0f:29:9a:1d:
58:27:4d:7f:62:51:f9:0b:b2:60:4d:5c:80:3a:90:
1a:3c:78:db:a8:36:be:a5:37:1c:f9:40:d0:69:e7:
bf:6d:e3:d5:6a:28:d3:a9:a6:7e:12:47:78:8c:f9:
41:91:47:92:64:32:a1:cb:07:b3:ff:00:88:7c:ef:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:59:49:61:51:0F:BC:E0:0C:EF:58:6A:29:D0:E5:73:E3:24:62:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/c461439b-63bd-3b3a-9dbd-c67a19cc4efc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.4.0/22
162.253.108.0/22
162.254.156.0/22
192.208.29.0/24
208.72.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b4:76:a8:c5:8a:3b:cc:98:bb:45:1e:59:83:cf:e8:b1:f1:
36:fb:02:5f:09:63:36:b1:5f:44:2b:c5:69:45:ae:20:95:05:
ee:84:1b:35:6a:41:0d:28:bd:e8:e2:dc:75:a9:c3:45:e1:6f:
ab:c5:7d:18:a5:0d:90:c0:04:11:4b:1d:db:1e:e9:7e:1a:15:
fc:0c:7c:80:fa:d4:39:b9:2c:11:e8:bc:d6:7d:26:95:ee:36:
99:89:7e:0b:0c:2e:6e:43:61:ba:0c:3e:1b:f4:ad:c8:66:1f:
00:9b:ba:bc:4c:47:6b:5b:d4:db:cf:0a:a5:b3:94:4a:94:cc:
0f:5d:fd:6f:98:c4:ec:f9:c0:f7:5f:a1:b2:34:e9:94:6a:53:
4b:48:0c:a6:fb:a2:7e:4a:a7:5c:ca:c9:f0:5b:12:20:a3:fd:
0f:39:2b:9c:e2:ad:99:de:6c:30:d7:2e:76:35:2c:98:28:0f:
ab:eb:6c:96:2d:99:f7:bc:ab:10:9f:99:b4:3c:da:be:83:14:
5d:48:eb:f3:63:a1:05:63:eb:41:56:45:c7:dc:4f:0b:a4:4f:
8c:e4:c3:84:97:b6:f1:6e:bf:32:af:23:6c:ad:2f:e3:fb:b1:
0f:12:f8:2b:3e:9f:a6:07:97:1c:22:40:09:f2:69:8a:89:46:
5f:fe:a7:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 5 19:51:53 2024 by rpki-client on console-fra.rpki-client.org