Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/a3018032-3c46-3822-84d0-c55a4e9d1b03.roa
File: a3018032-3c46-3822-84d0-c55a4e9d1b03.roa (raw, json)
Hash identifier: OdBfGschVh8YkD4Fy1EzVxet3VAb3KKeDjAeZmppC5c=
Subject key identifier: 77:36:B2:E5:8C:86:7C:D0:0E:B1:13:A4:16:F7:1D:A2:89:63:EB:9B
Certificate issuer: /CN=80697166-ff16-4bb4-87a8-1050eb90593c
Certificate serial: 010D0C9F43285845025AD391BBAC9E1B823E8380
Authority key identifier: 8A:5C:C2:0D:95:89:8B:CE:16:B6:4C:78:9D:B8:00:AE:AB:27:E0:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/a3018032-3c46-3822-84d0-c55a4e9d1b03.roa
Signing time: Sun 25 Feb 2024 14:00:34 +0000
ROA not before: Sun 25 Feb 2024 14:00:34 +0000
ROA not after: Sat 25 May 2024 13:00:34 +0000
asID: 22773
IP address blocks: 128.254.166.0/24 maxlen: 24
128.254.164.0/24 maxlen: 24
128.254.165.0/24 maxlen: 24
128.254.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 15:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:02:5a:d3:91:bb:ac:9e:1b:82:3e:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80697166-ff16-4bb4-87a8-1050eb90593c
Validity
Not Before: Feb 25 14:00:34 2024 GMT
Not After : May 25 13:00:34 2024 GMT
Subject: CN=cf277b52-fa43-4fa5-9b78-247337c1741c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:7f:b5:f5:ee:bf:ac:a0:fb:8d:12:c9:d6:
98:c5:47:d3:1c:9e:01:a1:d7:70:fa:25:56:cc:33:
d9:15:b9:37:7a:72:25:51:fe:0e:ff:c8:5e:96:f6:
5a:f2:27:41:f4:e2:42:57:c7:86:26:7a:57:13:c1:
40:e1:60:2b:bf:ac:2e:67:03:8d:5e:6d:74:78:e7:
b9:34:d9:e4:8f:92:46:17:14:b9:1f:fe:ae:7c:48:
f5:d9:47:93:8f:b3:c0:f3:5c:1d:8d:59:9e:56:e3:
1a:35:ae:c4:c6:f1:0c:39:f8:bc:f0:26:a0:50:ed:
82:c3:d1:26:ad:c9:34:04:5d:36:67:65:e8:f5:19:
9b:7f:8e:d1:86:25:b4:e2:9b:23:fb:ec:97:4a:0f:
76:08:ff:77:93:60:bd:32:7f:6c:e5:87:c8:31:c5:
86:1d:bc:b2:c2:80:5f:bb:87:c4:a1:66:62:a2:34:
38:14:06:b0:f0:df:63:b4:a5:c9:86:57:e7:ec:19:
d5:4c:d3:c8:27:4d:7d:c3:6f:58:fb:1b:ce:78:a0:
96:b1:62:b9:11:2f:2a:47:6c:58:68:2b:88:0b:59:
3f:b8:23:0c:b9:4a:91:6a:63:9c:6e:fd:37:03:50:
8c:13:f9:a7:fe:14:ef:35:1a:a9:77:be:35:e0:f4:
f1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:36:B2:E5:8C:86:7C:D0:0E:B1:13:A4:16:F7:1D:A2:89:63:EB:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/a3018032-3c46-3822-84d0-c55a4e9d1b03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c/80697166-ff16-4bb4-87a8-1050eb90593c.crl
X509v3 Authority Key Identifier:
keyid:8A:5C:C2:0D:95:89:8B:CE:16:B6:4C:78:9D:B8:00:AE:AB:27:E0:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80697166-ff16-4bb4-87a8-1050eb90593c.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:e8:76:06:04:3a:ed:65:df:f5:0f:c0:1b:df:64:bc:c1:21:
4a:f7:4b:ac:0b:f6:2a:26:79:fa:db:df:78:71:98:9d:42:82:
e9:d3:08:56:b8:6d:b7:62:07:c8:d4:53:f6:fe:94:cb:3b:1c:
2a:a2:47:b6:30:4f:2f:4f:72:be:cc:f2:6a:b0:15:5a:90:a1:
6b:45:10:d0:9d:50:c7:36:88:84:3d:4c:91:10:82:82:18:fd:
e7:27:21:8b:e3:38:27:81:bc:30:d3:e8:9c:65:b4:4c:1e:30:
be:e4:6c:59:86:86:6e:9b:b1:b6:ce:99:cd:8f:6b:ba:2b:2b:
50:18:c5:42:c6:f4:fb:7b:ab:dc:39:3a:39:f3:04:86:c5:54:
ac:38:2b:fa:2a:0d:8f:46:8f:af:cf:34:5a:41:06:e9:81:0f:
07:17:e2:7f:98:62:30:a3:e6:f3:6a:7d:7c:2a:19:c7:6a:2e:
dd:6c:1f:f7:3e:50:6e:a1:1f:41:ac:7c:ea:8c:83:f9:8e:8a:
d8:0b:5a:38:88:eb:af:4f:56:e0:5c:da:e2:aa:b6:e0:4a:44:
e7:ac:08:c5:91:aa:96:6b:6d:f3:f1:c7:ea:c5:a8:81:7c:d5:
4b:d9:b8:26:72:7e:4f:88:10:27:c9:2c:dc:af:91:1a:85:ac:
da:43:90:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:00:53 2024 by rpki-client on console-fra.rpki-client.org