Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7fbf3fed-8714-30b8-8dbb-0258acd514b7.roa
File: 7fbf3fed-8714-30b8-8dbb-0258acd514b7.roa (raw, json)
Hash identifier: O1ZaXphJshePhwcKVz1o29rRPLPa86hdj6UYRGg3j+M=
Subject key identifier: 38:01:77:25:DE:BD:95:0A:6D:97:E3:B4:7A:87:EC:F0:91:7D:9B:C9
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858461CBEE5484A830A623D6513E0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7fbf3fed-8714-30b8-8dbb-0258acd514b7.roa
Signing time: Wed 05 Jun 2024 17:40:17 +0000
ROA not before: Wed 05 Jun 2024 17:40:17 +0000
ROA not after: Tue 03 Sep 2024 17:40:17 +0000
asID: 62468
IP address blocks: 198.44.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 09:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:1c:be:e5:48:4a:83:0a:62:3d:65:13:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Jun 5 17:40:17 2024 GMT
Not After : Sep 3 17:40:17 2024 GMT
Subject: CN=f5960a8a-0a1a-4a56-aa34-249a7b3bbffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:89:a0:8e:f0:a5:6f:f3:72:ee:5a:b6:d2:f8:
b7:e9:ba:77:1a:a1:fe:53:ae:98:7b:77:e8:9d:b2:
a2:97:07:ec:e9:65:7a:44:1f:17:b3:79:cb:63:71:
40:54:cb:2c:88:b9:ec:00:a0:b3:d6:4c:82:3a:68:
82:94:24:36:c1:30:4d:aa:12:7f:e8:0b:f0:54:74:
41:3c:41:5e:21:6b:3c:3f:59:4e:88:f9:b1:a8:c7:
d8:e2:23:29:07:87:34:71:f5:cf:ce:ab:d2:97:88:
43:de:f8:bd:3a:2c:35:02:d1:56:60:7d:b3:e2:f7:
4a:d7:6c:e6:00:4d:c2:3e:3c:ce:55:f8:be:26:44:
b8:e0:1a:c3:8b:9c:84:0d:a6:20:4a:0c:33:50:c5:
8f:72:09:e9:e0:09:47:5b:a9:ea:60:4d:0b:17:be:
9f:32:16:28:d3:c8:9d:e3:04:fc:b2:ab:e0:a0:2b:
a9:88:0b:74:1a:f9:e6:22:22:23:1c:f0:fe:76:c2:
a3:41:5a:8b:5d:f4:e7:da:41:90:b6:e6:70:72:28:
47:ff:35:37:19:8d:02:48:d4:db:14:79:21:b8:7d:
0f:85:28:30:b5:2a:0b:1e:5a:64:46:ec:30:73:c0:
70:56:05:c0:a3:79:75:64:2c:00:79:c9:3f:d1:99:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:01:77:25:DE:BD:95:0A:6D:97:E3:B4:7A:87:EC:F0:91:7D:9B:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7fbf3fed-8714-30b8-8dbb-0258acd514b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
198.44.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:29:c9:16:02:70:cd:86:a5:69:c3:2c:a7:f2:6f:9d:7a:06:
e0:b3:e6:da:15:8a:40:cb:8e:5c:37:d4:30:2a:0f:c9:33:b7:
fe:84:c9:20:c9:98:03:e0:3d:da:80:04:f0:30:1f:51:2b:eb:
31:13:17:a6:ec:28:56:32:57:35:8f:d0:ab:87:29:bf:53:df:
9b:20:3c:f2:7c:5e:fa:6e:7e:f8:ad:cc:57:e1:f9:c4:14:50:
81:c1:2d:7b:94:60:8e:d2:bb:b6:f0:00:3d:6c:da:48:5a:33:
8b:0e:93:bf:dc:48:0f:c4:67:1c:1e:df:9f:85:23:03:00:1b:
38:89:47:1c:c8:74:b9:23:f5:52:99:37:88:65:d8:fe:04:e6:
ea:b1:ab:2c:57:fd:01:0e:6b:6e:af:65:d6:38:75:d0:19:2f:
bf:21:c8:1e:40:97:38:cd:6c:cf:3f:09:cf:e8:de:ba:38:eb:
a5:e1:d3:8c:ba:80:c1:5a:cc:5f:19:bb:2a:55:90:c4:4d:0a:
5e:c9:f4:ef:10:b4:7e:48:1a:33:55:12:ba:e4:ad:15:0c:e0:
77:21:f6:2f:e2:21:a3:ae:78:6d:8c:19:69:c3:fb:fb:8c:b8:
99:8c:72:d6:05:9d:b2:ab:29:e6:d4:fa:fb:04:d9:a9:1b:a5:
b4:c9:47:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:06:48 2024 by rpki-client on console-fra.rpki-client.org