Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/d6a7205e-bc2b-3754-995f-cfa29ec00ddf.roa
File: d6a7205e-bc2b-3754-995f-cfa29ec00ddf.roa (raw, json)
Hash identifier: ec7T57iIO9GsoL4xNkZVd07LQZ6MWh+g8RKvXlllW6g=
Subject key identifier: 27:9D:33:43:BE:4B:17:F3:D0:EE:A3:33:D2:B6:C8:9B:A0:E9:35:06
Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial: 010D0C9F432858442DEAA7F332F19D58437B1500
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/d6a7205e-bc2b-3754-995f-cfa29ec00ddf.roa
Signing time: Mon 11 Dec 2023 11:43:19 +0000
ROA not before: Mon 11 Dec 2023 11:43:19 +0000
ROA not after: Sun 10 Mar 2024 10:43:19 +0000
asID: 5650
IP address blocks: 172.85.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 07:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:2d:ea:a7:f3:32:f1:9d:58:43:7b:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
Validity
Not Before: Dec 11 11:43:19 2023 GMT
Not After : Mar 10 10:43:19 2024 GMT
Subject: CN=6b2b69a3-6d73-4029-a67a-8d644924c3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e4:1c:06:99:b4:07:6a:c6:9b:a5:f4:c4:fc:
b4:32:32:59:5b:0e:1d:e6:b8:33:db:a9:49:f1:dd:
6e:a7:6d:eb:06:f9:7c:35:69:2b:02:e5:b1:d6:77:
2c:4e:22:4f:23:dd:6c:0c:34:07:9f:9d:68:d9:d1:
19:62:fe:80:b7:1c:86:9c:f6:ed:db:49:f7:3b:1c:
78:b7:6e:5d:b3:22:7c:0e:8d:83:77:04:63:b0:88:
12:3f:69:e2:a3:bb:9e:67:e0:24:96:12:84:48:0c:
0c:7b:af:96:4b:7c:f0:60:56:c1:89:70:0f:0a:72:
b3:02:31:e8:5c:68:80:d4:ac:6d:5f:13:aa:ef:ee:
af:3b:d9:cf:4a:d0:bb:81:4a:90:76:7d:9b:3a:e9:
e1:a0:d2:18:2c:0c:78:4d:70:21:e4:33:87:3d:23:
2e:11:4a:82:a3:2e:84:50:9e:52:50:da:ed:80:dd:
82:4f:03:ac:7a:91:27:fd:a2:c1:1e:dd:61:53:69:
0d:82:33:58:07:5b:27:af:ce:09:20:f1:eb:94:56:
00:1e:0b:e0:03:4a:3c:9b:de:ba:b9:4d:54:6a:2d:
85:c0:1a:c3:9c:7b:2c:ef:49:d3:23:58:bd:b4:10:
01:8e:f2:8d:9f:ac:aa:ee:bb:90:55:d6:4f:80:e8:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9D:33:43:BE:4B:17:F3:D0:EE:A3:33:D2:B6:C8:9B:A0:E9:35:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/d6a7205e-bc2b-3754-995f-cfa29ec00ddf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
X509v3 Authority Key Identifier:
keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.85.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:16:34:79:27:a7:c6:d8:d8:a1:f5:ab:2f:09:02:1f:6b:01:
5b:b2:0e:96:ef:30:21:a6:2d:7e:6c:14:ce:d7:09:09:e4:01:
53:fa:f7:63:e8:c6:57:ec:32:6f:ce:85:38:77:11:f8:73:50:
99:22:87:cd:bd:d7:81:84:2c:d8:77:64:3c:43:f1:ea:53:45:
e5:46:3c:d8:dd:fe:aa:f0:c6:8f:1f:10:af:18:35:16:b6:f8:
aa:06:c4:85:0a:a0:21:16:ac:a1:6b:0a:83:51:fe:87:b2:1e:
62:2c:68:e1:f9:f4:87:fa:8e:36:29:34:26:cd:24:55:bc:43:
1b:4d:3f:08:26:00:71:9a:af:eb:55:9b:a2:10:16:bc:89:82:
53:06:13:c3:a1:9d:1e:38:2d:da:e0:04:3a:bd:b4:29:51:c5:
e5:19:de:6f:6a:30:3a:f1:2e:39:5f:74:f9:7c:e6:2e:d7:5d:
94:38:b5:41:55:e0:8e:93:66:fd:0d:ea:c2:c7:ae:e9:19:ce:
74:0e:8a:6c:d0:a6:5e:18:34:c5:4c:f7:1c:61:da:7d:e8:cf:
79:e3:9c:67:85:f3:90:97:c4:97:e2:19:6e:35:8e:ed:f8:e4:
51:ba:d4:a2:7a:69:28:62:f6:26:b2:c1:ae:fb:fc:f4:14:72:
06:91:96:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 12:53:18 2024 by rpki-client on console-fra.rpki-client.org