Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7101c9f8-dd5c-3483-aa11-8715eea0bec4.roa
File: 7101c9f8-dd5c-3483-aa11-8715eea0bec4.roa (raw, json)
Hash identifier: RQj099xDCuKr3ocYMlQKJJwoxatk0eREzqJEem5QbAg=
Subject key identifier: 00:B0:A9:7E:BE:F6:68:81:50:B6:4E:3E:B5:D7:80:A9:32:AA:3E:2C
Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial: 010D0C9F4328584624941EDCAC9099E331B9EBC0
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7101c9f8-dd5c-3483-aa11-8715eea0bec4.roa
Signing time: Sat 08 Jun 2024 13:00:32 +0000
ROA not before: Sat 08 Jun 2024 13:00:32 +0000
ROA not after: Fri 06 Sep 2024 13:00:32 +0000
asID: 54702
IP address blocks: 172.99.136.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 11:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:24:94:1e:dc:ac:90:99:e3:31:b9:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Validity
Not Before: Jun 8 13:00:32 2024 GMT
Not After : Sep 6 13:00:32 2024 GMT
Subject: CN=9cc25f7a-f9cd-41ed-a995-6a5ad5a013c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:6c:22:99:e4:76:79:b1:65:84:aa:e2:0d:
b7:4c:8b:3f:ea:00:cc:fb:ec:e9:91:c2:3f:0a:4e:
44:86:dc:00:e8:22:41:e1:83:02:57:3c:58:bf:e4:
41:10:b5:e5:6a:43:72:46:16:94:53:60:6f:80:b3:
5f:2c:e0:ed:8e:2d:72:60:ab:21:e0:15:ca:6d:80:
6b:5d:6f:1d:17:3f:b6:f0:a2:83:52:63:6a:74:58:
1f:36:a2:6a:9e:6c:bd:9c:fd:53:bb:26:6a:3a:1b:
ef:fe:ae:be:f0:73:de:98:a6:31:79:a6:34:42:a3:
39:75:75:1b:a3:fe:fe:c6:d0:7f:8a:27:a4:dc:6f:
a0:b0:c7:58:c7:94:de:51:ea:41:f2:25:84:f9:8c:
51:88:9a:e2:61:0d:b8:23:8e:c4:ba:80:26:92:9d:
31:64:74:19:35:32:f5:b9:46:91:0d:0a:d4:c9:1b:
70:ab:0d:fa:f5:31:39:b3:ad:7c:f1:fc:80:a4:3d:
ed:28:e4:79:8c:a7:b7:2a:16:88:ae:af:1c:e6:5b:
84:d8:57:e4:a7:23:d1:c8:a5:4b:5c:08:d3:eb:d5:
6c:56:32:50:70:db:b3:76:70:73:63:7a:18:56:4f:
99:a4:d6:5f:ed:34:ed:38:80:a0:41:76:ac:22:7c:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B0:A9:7E:BE:F6:68:81:50:B6:4E:3E:B5:D7:80:A9:32:AA:3E:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7101c9f8-dd5c-3483-aa11-8715eea0bec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
X509v3 Authority Key Identifier:
keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.99.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:79:03:c6:9f:06:50:f3:08:48:4f:f3:49:ef:82:62:b4:20:
87:78:95:98:d9:42:bd:e3:ab:de:4f:21:e9:30:0d:0e:d8:bf:
e9:18:77:32:c9:14:78:19:77:7f:5f:12:fa:25:25:92:49:9f:
94:e2:75:8a:63:cf:e2:bb:be:4b:e4:0a:06:6d:c3:b0:5a:9e:
50:5b:e0:9c:17:0c:62:9e:6f:fe:b9:23:4c:8f:94:e0:f0:9e:
dd:c0:42:d9:7e:ab:bd:74:0b:f1:5f:09:74:5f:da:20:b8:42:
ac:f8:10:0d:b8:7e:39:e5:7e:b0:f8:2c:e9:33:49:32:af:13:
77:ad:fc:bd:a9:52:2b:da:54:f5:0b:00:04:d6:5c:e4:9f:d3:
33:9b:42:c5:38:85:ca:bd:a9:cc:27:bd:33:84:b5:e7:41:d1:
0e:bb:85:fd:6f:3d:8f:d4:2e:96:75:e4:eb:35:9a:ff:2d:3f:
dd:ab:93:b2:ce:f8:21:87:81:03:6f:c0:51:37:28:4f:1e:18:
70:5a:48:55:35:2e:b4:cb:ea:e3:54:bb:0e:50:b5:c0:f9:80:
ac:8f:ea:1e:0c:f8:b7:13:c6:e8:d9:ea:59:84:d5:db:a4:6a:
70:48:f4:08:0a:30:d5:69:f6:b6:c5:0e:b9:b6:91:08:1a:f7:
6f:a6:79:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 18:19:04 2024 by rpki-client on console-fra.rpki-client.org