Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a041ce2-cafd-3011-8806-85af3fd9a3fa.roa
File: 9a041ce2-cafd-3011-8806-85af3fd9a3fa.roa (raw, json)
Hash identifier: B104++R3x84+238ZPIJUAR6T7UOfpHhDGOiCu5U1u4Q=
Subject key identifier: AB:D8:D1:FF:38:4A:63:F9:23:DB:5A:9B:D5:0D:F4:FD:64:F0:73:DE
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBB3A03CE725BDCC12340
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a041ce2-cafd-3011-8806-85af3fd9a3fa.roa
Signing time: Wed 16 Oct 2024 14:26:34 +0000
ROA not before: Wed 16 Oct 2024 14:26:34 +0000
ROA not after: Tue 14 Jan 2025 15:26:34 +0000
asID: 81
IP address blocks: 152.26.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bb:3a:03:ce:72:5b:dc:c1:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:34 2024 GMT
Not After : Jan 14 15:26:34 2025 GMT
Subject: CN=9a5c5412-1adb-4c8f-85a1-3a67ae179e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:00:b7:62:2e:ec:08:22:de:5a:ed:ad:dd:
d0:2e:0d:80:84:d0:90:1e:d3:58:3a:31:a1:e2:ba:
52:82:31:93:a6:10:21:c8:03:07:87:9c:c6:50:52:
6e:fc:36:fa:0a:dc:25:24:ea:ad:dc:77:6a:86:ab:
d0:45:b1:bc:a7:eb:80:68:8b:39:0d:e8:da:4f:bc:
80:1e:63:71:1d:b0:9e:17:00:8a:d2:70:5a:5b:0c:
02:05:06:f6:ec:04:5a:16:eb:35:b0:45:02:3d:08:
75:37:e2:9c:9a:0b:9f:df:1b:a1:5e:33:92:34:91:
8a:93:fe:b2:ed:a4:c5:a6:8b:32:2c:c4:67:35:39:
61:82:c7:c0:5c:5c:12:59:fc:dc:17:b2:ba:bc:0e:
03:b0:11:7a:3f:18:17:ab:11:35:d4:57:ca:0b:ac:
ea:84:2b:54:74:20:d7:a6:40:d5:da:84:03:22:1c:
19:da:4c:83:7a:7c:36:a0:6f:8b:8f:e0:7e:c3:26:
8b:e4:95:48:91:06:89:90:8e:a0:1b:c8:49:9f:ea:
24:08:63:12:5d:7a:5a:d5:9d:40:55:77:b5:b1:6b:
e9:18:47:24:26:00:2c:6a:f1:92:a9:91:90:48:eb:
c0:ce:36:a0:65:22:35:2c:20:81:b1:b4:b6:52:73:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D8:D1:FF:38:4A:63:F9:23:DB:5A:9B:D5:0D:F4:FD:64:F0:73:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a041ce2-cafd-3011-8806-85af3fd9a3fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:a8:f7:92:af:10:1b:db:80:88:fb:eb:1e:e1:8d:17:16:66:
00:c5:33:ef:11:d7:8f:7c:74:89:18:bd:06:a7:fc:20:f7:1d:
bf:bc:1e:98:d2:26:15:f2:c9:fd:71:53:ce:8c:22:d9:52:85:
87:80:39:46:47:5b:0f:41:75:38:ae:23:6e:4e:86:be:b3:34:
5f:da:cc:ba:7c:6f:c4:dc:ca:3c:f0:07:6e:46:2d:83:80:29:
14:c8:6c:f5:74:2d:62:4f:94:64:31:7c:d9:18:44:fd:de:12:
37:d7:f6:90:b8:85:8c:75:c9:23:d5:2f:7d:bc:10:f3:39:4d:
f1:9f:36:e6:8e:8e:9e:f7:9b:96:38:c1:16:45:6a:22:9f:1a:
77:fd:c1:b6:f4:8c:7d:74:d3:56:15:22:6d:7b:45:b3:db:f8:
1d:a3:d5:c5:02:86:4b:7e:4c:68:8e:0b:ba:08:de:e7:ef:6b:
be:6c:1f:54:22:02:b9:f3:cc:8e:4c:5a:43:86:86:ea:d5:20:
4f:2b:95:b9:a2:ab:1e:aa:bb:c2:90:d5:c7:c7:04:a2:1d:8a:
1f:f4:d3:da:f1:a9:97:64:03:1c:da:c4:de:50:a5:6e:77:4d:
a7:cb:d7:52:eb:a3:21:1c:dc:f4:04:89:fa:79:d4:db:b4:0b:
97:67:0a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:58 2024 by rpki-client on console-ams.rpki-client.org