Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ac8efd79-4ddf-3ac7-9ad4-bdbf68cff83b.roa
File: ac8efd79-4ddf-3ac7-9ad4-bdbf68cff83b.roa (raw, json)
Hash identifier: 6ZLlili7LyCedRaYb3sX5o4lJv7l3z7d8BgagU7rsTU=
Subject key identifier: 3F:5B:53:F0:11:CB:80:92:CA:B6:C6:6B:0D:86:6A:98:B8:C0:46:BA
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285844DCAA7BD3A18AB4D43F55F340
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ac8efd79-4ddf-3ac7-9ad4-bdbf68cff83b.roa
Signing time: Mon 12 Feb 2024 02:00:25 +0000
ROA not before: Mon 12 Feb 2024 02:00:25 +0000
ROA not after: Sun 12 May 2024 01:00:25 +0000
asID: 62610
IP address blocks: 23.251.40.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 19 Apr 2024 07:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:dc:aa:7b:d3:a1:8a:b4:d4:3f:55:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Feb 12 02:00:25 2024 GMT
Not After : May 12 01:00:25 2024 GMT
Subject: CN=80e0e503-f7f7-4941-bb06-8c4d16f8af2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:72:c2:f0:74:33:53:82:60:90:4f:fc:39:
53:9b:50:51:df:1d:d4:bc:e4:b3:9a:46:69:61:84:
78:28:41:2c:39:f8:0b:90:bc:8b:87:ab:85:79:02:
de:7d:b1:ab:18:63:9a:5c:dc:a4:1d:70:17:fd:ff:
77:79:10:df:26:d5:16:20:98:1b:c3:a3:f2:82:83:
e4:fd:c3:b2:65:e6:7e:d4:ca:ad:2e:5c:cd:18:e7:
e1:e1:f2:25:ae:26:10:2c:7e:02:4d:5b:02:43:f5:
86:79:63:e8:55:94:1f:be:bd:c0:12:3c:be:23:ae:
a1:38:6c:6a:cc:51:b1:d0:f9:fe:95:ad:82:34:5e:
68:db:d6:ae:25:43:25:47:e9:88:b3:a0:3f:ed:de:
4a:59:e8:86:ad:ad:87:12:ca:2d:40:03:4e:ae:cd:
0f:55:eb:9d:fb:04:0d:ac:1f:cd:80:08:11:32:0b:
81:7a:af:81:ea:0c:ce:5c:0c:48:d2:ec:15:42:c5:
1e:e6:25:e7:7a:73:87:9c:89:5a:b6:bd:12:bb:60:
06:50:67:33:f1:76:db:c6:bc:fd:93:42:1f:f8:78:
c6:8b:04:f8:cb:c5:e2:e7:b2:03:a2:d9:0d:8d:a7:
cf:da:b1:70:4d:b4:a3:88:bf:ab:17:ca:cf:f8:69:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5B:53:F0:11:CB:80:92:CA:B6:C6:6B:0D:86:6A:98:B8:C0:46:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ac8efd79-4ddf-3ac7-9ad4-bdbf68cff83b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:b5:68:0e:74:1a:a6:61:7d:bd:ea:cf:52:97:f3:12:09:41:
9c:8c:fe:cc:74:d9:fe:4a:83:14:f3:b0:ac:4f:c7:2f:94:68:
30:72:0b:77:d9:eb:9b:76:cf:3e:13:ef:df:93:40:d2:c9:d5:
39:5c:14:a9:27:28:97:6b:92:5f:84:8d:1b:7d:c7:e4:5c:43:
63:4d:59:22:24:18:56:d5:da:2b:ff:c5:1d:d8:ac:1f:7e:e7:
f3:d6:a3:6a:c2:30:a5:00:4d:05:de:c6:0c:d3:b4:cf:81:d0:
83:9d:64:17:ff:32:76:58:90:dd:79:99:a5:03:04:29:3e:e3:
f6:bd:de:9e:3b:de:43:80:6f:52:be:a9:12:fe:36:b0:a6:61:
50:09:74:a1:79:b4:c1:4a:e1:40:cd:d2:eb:35:8d:93:b2:7f:
59:49:29:8e:23:44:09:c2:01:57:76:df:90:68:26:b6:7e:45:
9e:13:b0:e6:a8:5f:45:36:1d:c9:3e:f2:2d:e0:a9:1f:ae:f9:
cc:6d:d1:b6:52:fb:fb:78:22:f9:cb:c3:f6:42:a8:aa:60:e5:
86:9a:e1:7d:66:39:21:b2:bb:8c:96:f5:90:b6:95:dd:f4:e1:
78:86:fe:9a:56:8c:04:a4:a2:f5:ed:0b:3f:29:fa:98:df:7b:
63:28:85:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 10:51:38 2024 by rpki-client on console-fra.rpki-client.org