Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/0dcfd0fa-57e5-39c2-8dcb-d486b907f2da.roa
File: 0dcfd0fa-57e5-39c2-8dcb-d486b907f2da.roa (raw, json)
Hash identifier: 3D1luP4MG0im396kHEXHbFoDhoJYfzcvCKLZLND8wIw=
Subject key identifier: 5F:88:1B:6D:2F:48:A4:83:11:8E:AF:8C:9C:3A:10:BD:86:B4:49:A7
Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial: 010D0C9F432858438C2537D614036429F01B8D00
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/0dcfd0fa-57e5-39c2-8dcb-d486b907f2da.roa
Signing time: Sat 14 Oct 2023 13:00:18 +0000
ROA not before: Sat 14 Oct 2023 13:00:18 +0000
ROA not after: Fri 12 Jan 2024 14:00:18 +0000
asID: 7029
IP address blocks: 209.250.21.0/24 maxlen: 24
209.250.22.0/24 maxlen: 24
209.250.24.0/24 maxlen: 24
209.250.25.0/24 maxlen: 24
209.250.26.0/24 maxlen: 24
209.250.8.0/24 maxlen: 24
209.250.28.0/24 maxlen: 24
209.250.9.0/24 maxlen: 24
209.250.29.0/24 maxlen: 24
209.250.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:8c:25:37:d6:14:03:64:29:f0:1b:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Validity
Not Before: Oct 14 13:00:18 2023 GMT
Not After : Jan 12 14:00:18 2024 GMT
Subject: CN=522c9cbf-d564-4b8e-89ff-07b6714ed85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:4d:49:7b:78:8c:39:9a:cc:53:f7:14:1b:
20:79:ad:52:24:86:32:d5:28:47:85:3b:00:db:c3:
9b:b2:8b:75:20:06:22:b2:e9:33:6a:8d:96:35:55:
41:f7:ee:0e:f5:68:14:87:e1:15:78:5d:d9:55:a5:
de:3a:11:f9:7c:07:0c:9d:87:d4:9d:0f:7a:56:63:
8a:fd:98:1e:33:f5:93:48:50:3f:6f:d8:b9:72:a7:
9e:5e:90:be:8d:b4:19:f2:e5:e5:e6:5d:0a:a8:4e:
a6:31:be:15:2c:0f:40:1b:b3:20:8d:f0:00:b5:a9:
64:12:9d:c7:fb:52:e3:d2:55:69:01:46:9f:f8:2d:
8f:34:34:3b:08:f0:a1:6f:f1:08:dc:bb:8a:fb:0a:
e1:f5:5f:5a:6e:86:1f:72:7f:f7:68:3e:77:65:d9:
05:fb:d0:6b:c6:4f:d4:e0:41:f1:9d:12:10:b4:91:
99:f8:59:5a:31:d5:f1:4b:bc:97:d1:09:65:22:16:
90:32:84:5d:17:d1:26:c7:b9:74:02:d4:e6:f3:80:
22:16:c6:c0:fd:ec:a6:05:e0:5b:b0:cf:81:98:b9:
01:cc:e3:fe:7a:9b:fe:c0:8e:08:d9:b3:1e:1a:5f:
de:16:99:46:17:45:a5:db:7b:ea:77:3e:9e:dd:cf:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:88:1B:6D:2F:48:A4:83:11:8E:AF:8C:9C:3A:10:BD:86:B4:49:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/0dcfd0fa-57e5-39c2-8dcb-d486b907f2da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
X509v3 Authority Key Identifier:
keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.250.8.0/23
209.250.11.0/24
209.250.21.0-209.250.22.255
209.250.24.0-209.250.26.255
209.250.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:f0:b9:f6:4d:9d:e6:cd:fa:1c:e2:17:e0:6b:fb:bf:70:9b:
99:46:84:9f:9d:85:51:b5:b5:5e:ed:c5:ef:ed:3b:0a:f6:b4:
09:e2:f8:40:d7:38:34:a2:95:15:ed:96:94:50:3a:f2:ba:80:
a0:73:be:64:09:d9:e9:1f:3e:f0:5d:d8:7b:b6:ba:b2:30:aa:
05:1b:8b:3a:07:3a:b3:21:67:93:45:13:4d:20:14:9e:bc:d1:
3b:53:4a:76:4f:dd:66:58:ee:e0:f7:ce:74:f8:1b:27:75:d0:
ec:cc:98:7d:43:84:2b:b4:0f:97:ce:87:f0:47:d5:5c:1c:1d:
5c:a0:d3:f6:26:b0:84:95:f3:a6:f0:c5:28:f4:55:70:7e:7b:
a8:35:55:44:bf:e7:ed:8b:70:fe:32:8c:f1:8d:20:4b:ba:27:
6b:63:eb:e4:fc:61:67:5b:fe:21:0d:54:e4:9e:2c:46:62:25:
f0:e8:ec:5a:51:b3:24:4c:b9:e7:08:cd:85:ff:31:be:ed:a8:
6d:06:d4:2b:0b:52:f8:2a:ed:8d:2b:50:f0:c3:0a:06:ac:d0:
92:93:ef:5a:f4:dc:72:38:fe:68:62:eb:81:7b:e6:3b:32:a0:
b4:a5:c9:e4:d7:0f:75:35:e1:b2:15:f3:a1:de:53:2c:81:3f:
42:ef:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 05:05:38 2023 by rpki-client on console-fra.rpki-client.org