Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/972fbaa1-2e11-3f49-8522-fa4324302b15.roa
File: 972fbaa1-2e11-3f49-8522-fa4324302b15.roa (raw, json)
Hash identifier: kPvQZPMaOpLoyFyvxB7CI5YfzVdy7XvvIX6J6piKyYQ=
Subject key identifier: 2E:CA:4E:98:24:0D:C3:39:FB:02:0E:5D:97:ED:F6:D1:A0:B5:C6:66
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F8EE1B5A033B7E8E90820
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/972fbaa1-2e11-3f49-8522-fa4324302b15.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 27382
IP address blocks: 206.128.96.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:8e:e1:b5:a0:33:b7:e8:e9:08:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=3cd271e0-73d8-41d6-affd-ff90397bb8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c1:32:77:03:41:35:e0:fc:57:b8:bf:56:99:
cf:9f:fc:5f:80:4d:83:45:bc:7a:a4:3e:70:97:00:
dc:29:f3:fb:4c:aa:1f:a5:fb:73:fb:a0:87:e4:b6:
85:43:a1:eb:e2:06:89:85:36:ba:1d:90:79:2d:d1:
23:70:14:23:75:e9:7e:21:65:7c:09:7b:f9:bd:8c:
ae:7c:5d:ec:89:ea:fe:fc:45:56:9b:ce:25:a5:e8:
39:db:d0:cd:11:25:d2:e5:91:26:0e:52:b3:75:b4:
19:e9:a4:0a:59:7e:08:b2:0a:4c:86:eb:30:a8:89:
38:e7:5d:80:73:0e:31:69:74:31:03:e1:58:0e:ab:
ab:6d:6d:8c:34:ee:90:eb:16:47:a4:93:5d:f9:22:
05:78:cb:34:f2:f9:fd:ef:88:c6:b3:40:5f:cc:cd:
d8:ab:f7:5b:c6:10:45:bf:c2:43:2c:77:16:ba:53:
74:91:0f:58:b6:e3:02:d8:6f:6f:50:15:81:be:0d:
b0:8d:fa:18:19:4a:f5:16:10:55:5a:9f:4b:0d:32:
80:e7:d1:95:fd:7e:36:5a:6d:bd:9f:92:ff:08:0f:
9a:b9:48:04:b8:97:f1:90:72:94:a8:54:6e:6c:20:
84:0e:1f:24:01:cb:c7:35:93:66:ab:ff:be:90:98:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CA:4E:98:24:0D:C3:39:FB:02:0E:5D:97:ED:F6:D1:A0:B5:C6:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/972fbaa1-2e11-3f49-8522-fa4324302b15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
206.128.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:16:1d:3c:28:7f:ed:91:0b:63:08:3f:2a:30:30:b7:71:40:
8d:84:bd:07:8c:7f:d5:83:01:ae:fd:e1:8f:ff:db:51:5a:07:
13:a3:d8:5a:f3:9b:c8:82:a4:c8:d2:16:58:98:50:69:40:bb:
09:f0:71:f9:a7:98:b2:5a:c4:e1:f0:76:1f:bc:42:2f:9c:5b:
ba:07:e6:e4:86:7b:d0:8b:32:16:10:6e:9b:bf:f5:e9:ff:c3:
ef:4e:f2:be:d1:49:2d:9c:b5:78:24:b1:25:22:ff:eb:fd:a6:
97:52:4b:55:a6:19:e6:dd:a8:96:48:82:43:c9:38:17:b9:40:
67:ba:db:50:2f:33:08:52:c3:1c:06:4c:9e:ec:88:06:18:d4:
76:8d:ba:70:c4:7b:4d:8e:a0:9b:d9:ca:4b:e9:55:34:24:09:
2d:e0:a0:43:0d:d5:b6:e3:dc:b0:59:fb:80:4c:ff:11:b7:01:
7d:3d:63:9f:68:e7:7c:4a:6c:b4:a4:e6:f5:bf:b6:23:a1:f8:
32:b2:69:ed:af:e6:41:85:05:59:c7:24:68:96:2f:6b:74:fc:
34:8e:6a:72:29:53:10:e8:ce:54:af:1b:7b:47:e4:39:73:2c:
3e:e4:9f:bc:40:6f:c2:f2:12:3c:78:72:d6:af:57:ca:88:d2:
81:e0:33:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:39 2023 by rpki-client on console-ams.rpki-client.org