Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/6dfe3473-f4d5-3051-afad-efd38eac1fcb.roa
File: 6dfe3473-f4d5-3051-afad-efd38eac1fcb.roa (raw, json)
Hash identifier: xNq1VQD9sB3T1gRaaNPAeTOvbFASviWK5QxcxVCbO0Y=
Subject key identifier: 8F:42:F0:53:F8:FC:6B:64:95:9F:82:07:E5:04:45:62:56:A6:5C:A5
Certificate issuer: /CN=c067ebcd-d586-4479-97f2-23ae813be2d8
Certificate serial: 010D0C9F432858460E9555B1D731015881449A60
Authority key identifier: 06:7C:1D:5F:E4:88:A6:4E:A5:97:22:D4:A1:74:18:6C:C6:DC:AE:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/6dfe3473-f4d5-3051-afad-efd38eac1fcb.roa
Signing time: Fri 31 May 2024 15:55:13 +0000
ROA not before: Fri 31 May 2024 15:55:13 +0000
ROA not after: Thu 29 Aug 2024 15:55:13 +0000
asID: 19224
IP address blocks: 130.51.84.0/22 maxlen: 22
172.98.0.0/22 maxlen: 22
192.210.0.0/24 maxlen: 24
204.10.32.0/22 maxlen: 22
2606:bb40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 30 Jul 2024 17:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:0e:95:55:b1:d7:31:01:58:81:44:9a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c067ebcd-d586-4479-97f2-23ae813be2d8
Validity
Not Before: May 31 15:55:13 2024 GMT
Not After : Aug 29 15:55:13 2024 GMT
Subject: CN=f0711f1f-d4de-41ba-8667-9cc1e24bdc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:cc:10:0e:09:38:73:52:33:04:0c:46:ac:
ce:0a:c5:2e:87:3f:0d:0a:cf:91:49:8e:e0:43:dd:
9a:ba:3a:01:cc:c1:c9:d3:8d:c2:46:f2:fb:a6:a3:
e3:b4:5d:a6:00:a0:df:38:b5:07:18:6a:46:79:73:
db:e0:d7:e6:dc:8f:09:7a:b5:68:56:40:41:e5:7c:
19:46:e3:af:a0:75:a5:49:24:c8:75:89:99:47:d9:
2c:6d:f9:af:40:a8:75:be:17:6a:2a:be:76:17:27:
e1:f9:6b:cc:69:cd:85:0d:72:20:44:bf:be:d1:43:
94:8a:3c:56:1e:52:67:45:15:88:f5:5d:6e:a8:54:
93:52:12:b9:ec:8a:65:97:1c:31:ea:a4:54:4a:21:
81:1d:ef:f4:97:92:5b:20:61:dd:d3:41:ce:14:5a:
f9:0e:02:70:28:19:d3:e8:fc:04:65:89:96:c1:89:
2d:8b:10:a3:a7:ee:0f:d9:30:ec:06:db:50:c1:36:
df:52:42:16:aa:09:a8:4d:3b:73:47:23:67:e1:16:
93:6e:79:d1:4f:8f:47:ce:28:bb:b0:ff:72:b6:38:
70:a8:1a:b3:42:dc:fd:44:73:13:35:65:16:46:af:
db:1e:d1:b5:97:9c:4d:0b:7f:12:58:15:10:de:dd:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:42:F0:53:F8:FC:6B:64:95:9F:82:07:E5:04:45:62:56:A6:5C:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/6dfe3473-f4d5-3051-afad-efd38eac1fcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/c067ebcd-d586-4479-97f2-23ae813be2d8.crl
X509v3 Authority Key Identifier:
keyid:06:7C:1D:5F:E4:88:A6:4E:A5:97:22:D4:A1:74:18:6C:C6:DC:AE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8.cer
sbgp-ipAddrBlock: critical
IPv4:
130.51.84.0/22
172.98.0.0/22
192.210.0.0/24
204.10.32.0/22
IPv6:
2606:bb40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:6a:1a:f1:16:ff:ba:49:f1:c5:4a:f6:c9:f9:3b:af:99:75:
05:6b:88:bd:fc:01:6d:17:96:3e:60:57:fc:b2:e9:80:0e:df:
95:36:07:b8:94:dd:9d:43:36:42:31:a4:b4:34:8b:c2:60:a9:
e0:7f:2b:25:5e:f4:1f:44:5a:50:0c:f8:a5:36:39:53:cc:1e:
a4:85:7b:a3:91:93:48:bd:ae:2e:5e:6e:0d:89:42:30:96:c1:
58:cf:84:8a:89:b0:d8:85:7c:8b:52:ae:24:9b:b6:42:85:a8:
0e:82:5e:93:ea:ac:ca:c9:1a:5b:95:f0:3f:f2:c4:0c:4b:25:
ce:8c:e8:12:63:54:81:4f:3c:60:c0:dc:36:9a:44:94:10:f0:
ba:2e:78:f2:73:90:3b:76:4d:2e:db:ef:38:3e:81:62:2e:25:
a6:d8:ab:32:2b:30:cd:a3:d7:39:46:1e:e9:bb:47:dc:f3:99:
69:14:f1:26:61:ed:61:d6:38:44:62:f5:65:c8:81:b8:f1:fd:
75:d9:bb:80:b0:47:15:d1:08:b1:56:ed:e0:28:54:4c:6b:e3:
ed:93:89:89:d8:93:61:3b:8c:91:4d:04:9a:63:73:27:2a:c1:
8d:54:b3:55:69:f3:fd:f7:8e:2d:9a:b3:f1:85:39:8e:96:d1:
b2:f5:77:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 19:59:39 2024 by rpki-client on console-ams.rpki-client.org