Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f854f6fa-ca87-34d9-91ec-6a0888ad198a.roa
File: f854f6fa-ca87-34d9-91ec-6a0888ad198a.roa (raw, json)
Hash identifier: 9m5POeHQzr6YCGfDTTMxYLTXXRE01VCA8Ii/jilRw98=
Subject key identifier: 9B:67:9B:10:27:B9:1D:A4:CE:F5:53:C9:52:89:4A:23:8F:88:D0:FC
Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial: 010D0C9F432858472405D0AB2AF6871B9EAD64C0
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f854f6fa-ca87-34d9-91ec-6a0888ad198a.roa
Signing time: Sun 08 Sep 2024 01:00:31 +0000
ROA not before: Sun 08 Sep 2024 01:00:31 +0000
ROA not after: Sat 07 Dec 2024 02:00:31 +0000
asID: 398210
IP address blocks: 207.211.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 14:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:24:05:d0:ab:2a:f6:87:1b:9e:ad:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Validity
Not Before: Sep 8 01:00:31 2024 GMT
Not After : Dec 7 02:00:31 2024 GMT
Subject: CN=f65af25f-1abd-4c34-af4e-528b87c55540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:81:f0:ca:5f:bc:23:21:8f:24:53:3d:5b:
a6:d9:1b:3f:ff:d9:7d:43:f7:32:59:d3:33:25:b2:
6b:23:dc:73:de:58:6c:0e:1e:9c:86:e9:5c:3e:3d:
07:8b:a9:ec:73:fb:92:0d:3e:77:57:99:b7:e8:42:
7c:fd:54:35:53:1b:52:11:76:8b:a0:14:e6:54:b9:
36:95:ac:94:b1:35:6e:60:5f:95:50:c0:7c:03:a7:
1d:3c:b9:5c:f5:8e:23:85:8b:cd:71:6b:b4:ad:cb:
15:3e:04:6d:0b:3c:34:06:dc:f7:f6:fb:1e:18:4f:
1d:d9:53:29:e1:b9:53:19:f1:c4:dd:c7:ba:5a:22:
21:a3:6e:d1:98:94:42:46:97:d7:0d:80:87:a6:7b:
2f:53:5b:64:3f:f0:57:f9:1f:2d:69:fe:7f:93:8d:
ea:a0:42:ca:62:e5:21:3e:94:35:79:6f:7a:22:d8:
63:d2:8c:58:13:c0:bf:74:47:42:ef:8c:f4:49:b3:
a5:68:b1:c7:7a:77:fc:18:0f:9d:68:c7:88:e7:ee:
5d:12:14:25:07:63:2d:bd:47:7c:94:d5:eb:16:99:
e9:b6:c5:ae:3c:97:ea:9a:24:bb:a1:ad:31:c4:81:
df:88:fc:32:6b:49:fd:47:88:33:36:b0:72:d3:e3:
0e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:67:9B:10:27:B9:1D:A4:CE:F5:53:C9:52:89:4A:23:8F:88:D0:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f854f6fa-ca87-34d9-91ec-6a0888ad198a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
X509v3 Authority Key Identifier:
keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
sbgp-ipAddrBlock: critical
IPv4:
207.211.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:fa:fc:e8:5a:43:db:41:90:71:64:02:d8:cd:06:36:09:b4:
d0:4f:1d:f1:3b:b6:f3:23:8b:6c:4b:17:69:86:cb:8a:a0:25:
03:81:18:4f:4e:35:3f:2d:ad:69:a1:c8:ea:c8:20:1b:e8:58:
0d:75:bf:ef:94:96:1a:a7:e3:d2:64:2a:c1:ab:ce:63:4d:5b:
22:93:b0:a3:7d:a0:99:95:d1:82:d8:66:3e:9b:e2:fc:6b:79:
82:9a:24:df:6c:3d:63:de:6e:a5:da:f2:2c:ff:52:57:34:37:
a1:4a:db:97:6a:a9:44:08:88:f5:0b:d4:ee:10:41:77:29:d2:
b5:0f:a0:13:21:03:e5:44:49:9e:b5:0a:47:79:24:72:61:b5:
9d:b8:64:b7:f8:5d:0e:e1:46:74:2e:04:f2:34:7e:5b:aa:b6:
aa:d4:87:88:7d:09:e2:d6:f0:0d:13:ce:30:9f:9b:7a:3e:23:
b5:63:06:7c:46:d3:30:6d:66:09:f9:90:70:ae:df:c5:10:68:
b3:b3:1a:5a:19:19:75:96:76:7a:1f:a6:5f:fd:e8:20:c7:e9:
a4:6f:d1:26:4e:61:fb:a0:19:e8:9d:d1:f9:3a:33:9f:ec:f4:
33:97:9b:de:03:08:27:33:cb:86:f6:78:a3:4b:65:57:33:a2:
22:38:22:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 20:37:56 2024 by rpki-client on console-fra.rpki-client.org