Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/1fbe9ed0-daed-3381-99aa-b84732d7e76b.roa
File: 1fbe9ed0-daed-3381-99aa-b84732d7e76b.roa (raw, json)
Hash identifier: lKCs15mJGu8pPaw3fl2SSpbTsOS6RJMkaPKlaS1kzyI=
Subject key identifier: 01:80:F6:C5:C2:DA:29:51:B5:9A:5D:B2:B7:E9:8F:88:43:B0:3E:35
Certificate issuer: /CN=fd61a214-d867-444e-b2f4-ca291d4c4419
Certificate serial: 010D0C9F43285848159FD2E439BBAD101BE51D80
Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/1fbe9ed0-daed-3381-99aa-b84732d7e76b.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 834
IP address blocks: 207.167.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 15:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:d2:e4:39:bb:ad:10:1b:e5:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=e3b442d1-6a12-4fe5-80f1-ee0bcec9adb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:97:0a:8e:26:14:3a:ee:19:34:95:3e:47:61:
6e:cf:c2:34:e4:99:fd:b1:61:53:1a:78:8a:78:68:
c2:f1:d7:54:ee:2e:7a:50:e9:66:78:66:6c:f6:3f:
19:46:c5:e2:8f:da:f2:6f:fc:18:49:3b:15:23:73:
fc:b0:8c:8f:0c:fb:5c:20:4d:88:bc:10:33:a0:b3:
d1:fb:66:29:fa:65:75:ac:ed:12:c6:a5:91:f5:ec:
27:ac:ba:fd:82:c4:ae:a0:d7:e3:7d:95:6b:16:e0:
88:bb:a0:ca:ba:43:0d:14:36:25:e4:6b:38:09:94:
40:92:1c:13:f1:84:56:e9:fb:3e:87:78:19:a3:98:
98:a2:2e:f7:e0:27:0c:e6:2d:be:04:a8:23:36:f7:
09:00:8d:61:66:43:b8:fe:63:0e:d8:73:80:e8:01:
b8:41:e3:1a:7b:b7:4c:d7:5e:e3:6f:a2:49:34:03:
b1:6d:07:04:b2:f0:1f:e9:50:44:7e:9d:0d:6a:4e:
82:ca:3f:6a:ae:d6:71:b9:8c:6e:57:43:7e:32:ec:
35:61:1d:40:3f:f6:f7:8b:03:84:56:4e:d4:1a:f6:
5c:d4:a2:f4:c0:ba:e8:a2:e6:2f:a5:74:ab:01:27:
e1:ff:3d:c3:4b:a2:32:c1:fb:97:b0:40:00:1e:4d:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:80:F6:C5:C2:DA:29:51:B5:9A:5D:B2:B7:E9:8F:88:43:B0:3E:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/1fbe9ed0-daed-3381-99aa-b84732d7e76b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl
X509v3 Authority Key Identifier:
keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer
sbgp-ipAddrBlock: critical
IPv4:
207.167.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:e5:63:f6:e8:c7:27:c7:59:c0:3b:d8:36:48:62:80:df:6c:
de:a3:31:25:88:db:e7:72:d3:68:39:ae:93:ad:f9:cf:d7:1f:
45:ab:5a:70:38:6b:26:ae:3a:31:50:e5:03:32:70:99:51:7d:
9a:6e:7d:2d:41:06:be:5b:27:05:48:4a:21:b8:6b:12:f6:dc:
03:84:bb:77:a1:09:14:20:78:9d:25:59:20:25:2b:97:54:b6:
e7:7b:d7:de:06:bf:16:96:db:99:57:31:10:7f:0f:d2:e2:a8:
97:82:66:42:9c:06:4f:37:35:81:96:60:50:ac:63:b6:79:4d:
0e:dc:53:99:fe:55:4e:56:c3:50:a5:64:aa:8d:05:e2:5d:48:
3c:23:b6:2a:14:f2:43:7c:3f:a4:b4:d4:51:7b:20:3f:99:ac:
19:f9:0c:bb:7e:39:e8:d5:6c:23:67:27:09:4e:14:ae:61:ac:
74:6f:70:4f:c5:2d:d9:7d:a3:6c:c3:e5:28:b7:51:5d:6a:5b:
21:61:23:47:99:81:00:7e:a7:02:a1:af:be:dd:db:5c:ff:45:
46:e9:cd:77:27:39:4f:72:b5:9c:ce:e7:61:70:10:c3:50:63:
c2:2b:af:f9:8e:1b:ee:22:f3:d7:d2:95:e0:c0:22:f4:2f:55:
0e:c0:b6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:33 2025 by rpki-client