Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/e0bc7b3e-7407-3b3c-89ce-0483fa7bfd64.roa
File: e0bc7b3e-7407-3b3c-89ce-0483fa7bfd64.roa (raw, json)
Hash identifier: dtqc9lGu9/TKamhauhToucTuPsZcXo7cOnCcKza1E6E=
Subject key identifier: F3:49:FC:65:5C:3F:88:E1:5B:F0:B2:46:52:1E:89:D3:63:B0:5D:DD
Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial: 010D0C9F43285845A4128087205355138982FC00
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/e0bc7b3e-7407-3b3c-89ce-0483fa7bfd64.roa
Signing time: Tue 23 Apr 2024 12:15:55 +0000
ROA not before: Tue 23 Apr 2024 12:15:55 +0000
ROA not after: Mon 22 Jul 2024 12:15:55 +0000
asID: 56274
IP address blocks: 198.208.96.0/21 maxlen: 24
198.208.134.0/24 maxlen: 24
198.208.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Apr 2024 18:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:a4:12:80:87:20:53:55:13:89:82:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Validity
Not Before: Apr 23 12:15:55 2024 GMT
Not After : Jul 22 12:15:55 2024 GMT
Subject: CN=60b19d38-466c-448f-a401-d3fdcd2217d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:48:7a:1b:90:77:b3:38:d7:29:05:bd:2d:1c:
70:9d:bb:b8:08:4c:a3:08:33:23:d6:46:2f:71:e5:
55:23:80:ea:45:b5:41:32:16:7f:f8:b2:1c:19:bb:
61:39:f5:ad:16:2e:71:c7:d8:36:06:98:50:ad:4c:
da:ab:47:70:21:9d:40:51:1c:32:af:f5:3b:c5:98:
25:e3:ef:dc:a3:78:a7:48:12:58:45:1f:6a:89:df:
52:c9:01:fd:12:ea:5d:0e:5c:d4:48:d3:64:3a:22:
d8:a8:ad:46:cf:27:59:25:fc:9e:cd:43:77:e1:a3:
18:e1:45:4c:f0:54:7d:3c:72:f2:b8:d1:04:a3:f4:
fd:11:63:f9:fd:ee:b9:ec:c7:aa:2e:d5:0b:89:00:
27:c4:4f:23:29:60:67:98:f2:19:04:6b:8b:4d:d7:
8a:ab:55:ae:c3:4e:f6:68:29:2d:98:40:41:8c:38:
5c:e5:68:3f:7c:61:b6:54:40:bb:19:7b:fd:fc:02:
ef:14:ae:33:a9:f6:bf:c5:68:46:dc:bb:c0:96:ca:
94:e8:cb:f0:bc:60:ee:24:08:a5:4e:d3:41:73:39:
fa:99:bc:8f:7a:13:0d:01:7c:f5:be:0e:6f:ae:e3:
18:b6:4c:89:dd:e9:95:02:90:bd:b9:7f:56:23:32:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:49:FC:65:5C:3F:88:E1:5B:F0:B2:46:52:1E:89:D3:63:B0:5D:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/e0bc7b3e-7407-3b3c-89ce-0483fa7bfd64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
X509v3 Authority Key Identifier:
keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
sbgp-ipAddrBlock: critical
IPv4:
198.208.96.0/21
198.208.134.0/24
198.208.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:ff:39:de:12:18:9c:6b:fb:00:07:e2:1b:3b:a6:b8:be:b5:
df:ec:e7:75:ca:d8:33:9e:15:68:e7:15:bd:eb:7d:53:20:cb:
56:45:4b:37:46:0d:78:b2:75:23:e9:66:4c:9e:b0:85:dc:76:
b8:b6:7a:80:72:81:b7:c2:86:37:c0:0a:5e:50:49:59:96:62:
43:6f:f3:4d:5b:82:ae:fc:c8:54:c6:6b:86:99:24:e7:0a:02:
e2:27:b0:7b:c8:65:ab:ae:b1:b0:6f:ee:5f:c0:bf:fc:f9:95:
44:7f:e4:ed:cc:d5:75:fd:d9:a7:7a:00:37:dd:4d:ee:89:50:
c3:3a:93:ea:e9:2f:36:bd:54:be:60:fd:d9:e7:0b:dc:3b:e5:
58:d7:e0:f7:d6:f9:a9:46:f0:89:7c:e7:83:fb:35:52:76:18:
bc:ef:8d:2c:df:d0:0c:4a:f1:a8:90:f0:86:f8:90:7f:b7:37:
37:37:f8:d1:ef:57:3a:bc:b9:9c:3c:9f:af:49:52:2b:94:94:
47:6e:70:31:6a:ab:5c:3d:2c:bb:4e:72:8f:0b:09:e0:c8:1a:
be:41:6d:37:96:fa:06:80:47:c5:bc:ad:02:49:d4:60:0d:02:
cf:a7:ea:de:16:27:30:8a:33:2b:5e:24:16:08:2c:e7:85:8e:
a2:fa:75:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:14 2024 by rpki-client on console-fra.rpki-client.org