Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8d4c9e91-7a89-3e19-a493-446e9d07c436.roa
File: 8d4c9e91-7a89-3e19-a493-446e9d07c436.roa (raw, json)
Hash identifier: 6+XStI2thRJOijliwGTmYF1bywOt1c7JzJOKrvNgZbs=
Subject key identifier: 6A:71:E5:07:9E:CA:D7:1D:37:B3:45:7C:50:8B:AA:0D:9B:B9:D7:D3
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285845CB3E5820723A64F2CEB04D80
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8d4c9e91-7a89-3e19-a493-446e9d07c436.roa
Signing time: Tue 07 May 2024 13:00:35 +0000
ROA not before: Tue 07 May 2024 13:00:35 +0000
ROA not after: Mon 05 Aug 2024 13:00:35 +0000
asID: 21859
IP address blocks: 198.44.189.0/24 maxlen: 24
198.44.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 01:51:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:cb:3e:58:20:72:3a:64:f2:ce:b0:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: May 7 13:00:35 2024 GMT
Not After : Aug 5 13:00:35 2024 GMT
Subject: CN=26b9be64-c7f6-405c-a12a-b23145cca0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:a6:16:08:c3:fd:3c:4d:2e:b3:67:5a:7b:
42:81:f8:75:f3:ca:df:ec:75:f2:fc:7a:a3:65:c7:
40:d7:60:1b:20:0c:07:ba:06:d8:0f:e3:0e:b5:04:
2b:51:68:e7:5e:7c:4e:64:ad:bd:47:72:ea:17:fb:
cc:a0:82:85:bf:2f:2d:15:f7:0f:2c:69:5c:ea:24:
40:88:98:46:cf:54:10:5c:29:ca:08:76:6e:22:cd:
be:f8:f6:df:cc:b2:3e:8b:94:a1:c5:29:21:9f:6a:
4a:ef:9d:1f:ed:88:19:4f:2e:10:23:6c:93:66:3a:
67:0d:41:f3:fc:61:f0:ad:c4:91:b8:11:a4:4c:fe:
1b:6a:d0:c1:d4:b4:6a:d5:37:75:9d:e1:42:e8:71:
fc:1c:cf:da:35:9e:b5:c1:19:88:ab:23:a9:ae:b8:
42:18:2b:a2:29:b1:0c:5a:06:e1:73:b5:76:1f:41:
5c:b7:7c:dc:4c:ed:31:2b:08:5a:61:18:b6:a1:ac:
ea:fa:ad:29:f4:a0:50:6c:8b:ad:ab:61:48:84:38:
cf:cc:39:96:9f:8b:c2:71:13:64:35:be:6f:2e:34:
fe:4b:9e:67:62:6a:bf:8a:15:85:8d:ef:32:02:3a:
fc:b5:77:e9:78:7e:69:8f:27:a0:51:cf:c4:98:87:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:71:E5:07:9E:CA:D7:1D:37:B3:45:7C:50:8B:AA:0D:9B:B9:D7:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8d4c9e91-7a89-3e19-a493-446e9d07c436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
198.44.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:71:ba:f0:b5:3b:51:52:c2:7d:0e:0a:b2:f0:e5:b9:e1:c8:
04:7b:50:62:eb:e0:3b:09:ff:38:b2:24:63:a1:f6:6b:af:de:
e4:12:79:b7:eb:e6:e8:65:2a:61:ec:13:f4:a3:f0:1e:70:83:
dc:e2:90:e2:d0:94:a9:84:c7:81:a4:1c:ee:90:a8:51:be:3d:
5f:9a:53:0d:78:3c:c7:2b:04:c3:f5:11:97:0e:ba:dd:d2:a9:
5b:f3:a0:a2:4a:77:d8:96:e2:dc:7e:75:c5:54:c6:4f:54:4a:
8c:2e:a5:c1:cf:d8:c7:ae:71:fe:64:04:7b:57:f2:07:83:ff:
4c:5e:a6:eb:6d:1b:65:ec:74:c4:77:0f:1d:ae:20:1a:a3:35:
68:1c:f8:0c:28:9e:f9:f0:d2:66:0c:c8:77:73:3c:d8:62:57:
d1:86:1b:9c:41:e0:14:46:d0:9b:50:cf:f5:6e:0c:26:27:57:
d1:b1:df:86:be:42:e5:a3:6c:de:cc:91:42:64:71:7e:bd:25:
1d:2a:6d:f9:4a:50:dd:31:1c:e8:da:a1:63:26:dc:af:a5:01:
67:49:0f:49:c3:40:de:15:ca:44:dd:6d:c9:19:1a:22:87:af:
a5:83:86:8d:68:ee:6b:f3:7b:28:13:bb:43:e5:93:4b:14:2a:
43:c4:10:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:05 2024 by rpki-client on console-fra.rpki-client.org