Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/f4f78b43-23c0-3670-b956-8a213f7f7452.roa
File: f4f78b43-23c0-3670-b956-8a213f7f7452.roa (raw, json)
Hash identifier: 075kWYaZOkM+/G8+n1QxQQfWeUWWJjow+gkUyT70Otk=
Subject key identifier: 95:8C:3A:5B:22:10:CA:9B:18:18:37:5D:4F:29:84:A5:58:94:3A:3C
Certificate issuer: /CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
Certificate serial: 010D0C9F4328584768F391543E7283574C59B480
Authority key identifier: CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/f4f78b43-23c0-3670-b956-8a213f7f7452.roa
Signing time: Wed 02 Oct 2024 17:34:47 +0000
ROA not before: Wed 02 Oct 2024 17:34:47 +0000
ROA not after: Tue 31 Dec 2024 18:34:47 +0000
asID: 401338
IP address blocks: 67.22.96.0/21 maxlen: 21
67.22.104.0/22 maxlen: 22
67.22.108.0/23 maxlen: 23
67.22.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 19:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:68:f3:91:54:3e:72:83:57:4c:59:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
Validity
Not Before: Oct 2 17:34:47 2024 GMT
Not After : Dec 31 18:34:47 2024 GMT
Subject: CN=cbe1c924-bf73-4329-be5d-5efbe554ffd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:64:c4:5d:0f:7b:c3:a6:9b:f5:68:fb:64:d7:
5e:55:8b:8b:de:0d:9a:bb:47:27:b9:7c:8a:3b:82:
d6:c3:e5:26:b1:09:bb:0a:61:af:f0:9b:ac:04:46:
17:81:af:d8:5a:15:18:13:b1:fd:ff:2d:72:dd:a4:
ca:41:c2:86:fc:1c:07:4a:fe:8b:c8:f5:7a:4d:68:
51:7b:cb:b0:22:64:ec:f4:d1:c0:76:99:1f:9a:53:
4e:ad:0f:80:3f:ae:10:6b:ac:a4:34:12:1f:de:4c:
5e:c8:d2:05:ef:a0:f8:50:d0:66:b3:f2:ac:69:51:
38:25:fd:76:c9:e7:86:cd:ff:df:ea:98:de:94:9b:
13:9a:fd:32:fb:18:62:87:8d:5a:eb:de:34:5b:b3:
d5:f9:b4:7e:7d:26:73:8b:3b:a3:3c:e2:36:f3:5d:
d3:90:0b:38:a3:3e:c6:5f:7f:a6:83:34:b7:b6:5f:
af:16:0f:c0:5a:86:20:26:57:18:75:58:64:a5:a5:
b9:54:cb:38:41:fc:aa:5c:55:99:75:9f:17:62:68:
3c:a4:67:19:f9:1a:dd:1e:8e:4d:b5:1f:59:7a:c5:
4a:c7:10:90:7d:5e:28:4d:df:0f:4c:e5:0c:5e:ba:
03:b1:f4:a2:66:b2:c4:d8:74:6a:10:64:0c:95:3d:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:3A:5B:22:10:CA:9B:18:18:37:5D:4F:29:84:A5:58:94:3A:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/f4f78b43-23c0-3670-b956-8a213f7f7452.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.crl
X509v3 Authority Key Identifier:
keyid:CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer
sbgp-ipAddrBlock: critical
IPv4:
67.22.96.0-67.22.110.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:1b:7a:38:70:8f:7b:46:9c:f5:a2:47:2d:8c:eb:b3:d3:82:
4e:e3:f7:0e:89:8f:7f:03:5d:42:ed:f9:ac:09:f2:f6:ee:ef:
ee:f1:bc:43:89:1a:e5:f4:80:33:91:c5:af:fb:62:39:10:2f:
3f:be:1d:40:30:8c:10:45:d5:e0:12:e4:3f:1f:27:a9:cb:c7:
be:9e:e9:e1:9b:b0:2c:ff:44:5f:54:a6:4c:23:36:50:ca:ef:
3e:74:67:12:c9:ac:9a:42:85:05:b5:dc:61:49:ae:3c:5f:96:
6a:03:96:bc:2a:87:24:7d:f4:fc:ea:3a:3b:94:03:08:f7:9c:
51:f6:8e:c0:80:99:44:37:fb:fb:13:2c:ed:0c:fd:a8:a9:09:
40:bf:a9:8e:38:ee:5e:0c:01:8d:2e:a4:f7:de:64:f9:21:15:
98:de:f9:57:99:06:53:38:41:56:e3:1c:1e:83:b9:76:e3:46:
f8:e9:43:b6:9a:a3:1c:a2:fc:1b:67:fe:83:1f:be:5d:bd:17:
b7:a4:d2:4d:90:c2:7e:d7:81:8d:a1:ba:0e:40:d0:7c:9b:21:
51:a0:0c:70:6c:9b:e4:bb:21:89:6c:94:b1:28:96:85:bb:44:
fe:c1:99:27:df:30:27:ad:4c:6b:d5:7a:5b:26:44:03:2f:7f:
11:3c:4b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 22:04:18 2024 by rpki-client on console-ams.rpki-client.org