Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d87763e8-0960-3b1b-a42e-e4f5643bc122.roa
File: d87763e8-0960-3b1b-a42e-e4f5643bc122.roa (raw, json)
Hash identifier: Fc18O/fNzkS5rPYtqHyEFNzlrd/mAWp3HdPl+i/N6oA=
Subject key identifier: FE:90:A3:00:9C:D4:D3:04:03:1D:E4:9E:D5:D4:65:E1:9F:0E:2A:47
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F43285846970A4FAAACCBC4E95EFA1B80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d87763e8-0960-3b1b-a42e-e4f5643bc122.roa
Signing time: Fri 19 Jul 2024 13:00:35 +0000
ROA not before: Fri 19 Jul 2024 13:00:35 +0000
ROA not after: Thu 17 Oct 2024 13:00:35 +0000
asID: 19905
IP address blocks: 149.96.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 09:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:97:0a:4f:aa:ac:cb:c4:e9:5e:fa:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Jul 19 13:00:35 2024 GMT
Not After : Oct 17 13:00:35 2024 GMT
Subject: CN=7033ebfc-a547-4d62-baaf-4c285eee8856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:57:11:ac:3d:d0:63:94:02:9d:e6:2f:8f:
5c:ab:92:fa:83:75:1e:33:81:32:70:ee:9e:21:b4:
86:4a:1f:c0:49:1d:a1:22:8b:7f:35:76:69:f4:1b:
9c:47:35:e2:39:15:eb:e8:bf:ef:bd:b6:57:03:be:
c2:e5:da:07:06:31:fa:6a:fb:4d:9d:64:38:25:53:
a1:63:37:99:bb:54:b2:cc:6d:2b:7f:6a:cb:e0:79:
63:ad:71:b0:d8:ac:25:0c:df:16:08:7d:2c:5d:0f:
fb:9a:ae:cc:f4:60:54:73:15:a1:32:fc:5a:3e:2d:
b8:a5:dd:60:5f:77:a3:07:c2:3a:18:d7:e3:40:56:
77:bb:ab:e6:dd:98:1a:83:5f:48:25:f9:10:27:82:
22:fe:3b:82:81:39:b1:84:3f:17:19:d5:6d:74:87:
c4:31:d5:8a:b3:52:a7:65:a1:7b:74:bf:d2:3d:ac:
10:ae:3f:36:78:ee:05:68:c2:ee:d4:80:03:a1:32:
30:a3:8a:58:b0:16:ca:a7:64:32:e5:bd:ad:d2:94:
90:2d:66:93:4b:ff:71:04:38:73:09:e0:45:ad:59:
60:97:13:33:71:5e:13:fb:ce:50:28:d9:16:5d:27:
19:cd:0a:77:33:19:67:2d:62:56:c8:f7:7f:11:3a:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:90:A3:00:9C:D4:D3:04:03:1D:E4:9E:D5:D4:65:E1:9F:0E:2A:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d87763e8-0960-3b1b-a42e-e4f5643bc122.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:85:c6:03:89:47:0c:a0:93:0e:4d:d0:cb:a4:42:74:20:8c:
35:f0:36:87:62:76:e6:6f:6a:75:8f:11:8d:e8:7d:d5:3e:61:
b5:f8:e0:db:13:26:35:50:8a:ae:9b:05:4d:e1:cd:72:7c:2c:
45:4d:4c:22:f4:f6:a3:f5:40:9e:f4:21:78:fa:f7:1d:c7:66:
88:d4:a0:f9:e8:9b:0f:00:96:2b:c3:7d:7f:1f:2a:e4:6f:29:
64:c4:13:a3:17:51:a2:e7:c0:6a:75:2a:d8:78:d8:44:b3:84:
8d:7d:c3:f3:ce:56:98:62:73:ec:2c:e3:33:d8:7d:83:5e:0c:
a0:59:88:a8:8b:47:ff:a6:67:7a:62:d0:4e:f4:0d:9b:b6:84:
78:61:19:55:db:85:7a:19:72:4d:78:dd:61:a0:65:1c:49:fd:
a9:b2:d9:a0:4e:f2:af:32:a9:4f:cd:be:8c:19:d4:17:c9:f5:
94:80:08:d2:2a:3a:26:71:fc:7e:7e:8d:08:75:8f:fd:38:a5:
bb:32:aa:d8:38:32:1a:59:41:06:9d:1e:2b:b4:a3:4e:89:95:
f5:2d:7b:03:da:2d:37:2e:60:92:74:74:a8:5a:45:fd:db:9e:
f6:13:50:87:35:91:7d:a7:e5:de:7f:b2:0b:ec:b2:8f:f7:35:
ec:ee:9e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 12:46:09 2024 by rpki-client on console-fra.rpki-client.org