Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a826be6d-1c11-3948-81a8-304a5e912b2e.roa
File: a826be6d-1c11-3948-81a8-304a5e912b2e.roa (raw, json)
Hash identifier: tNvspYJEesa2mmxkjthV/+aoSdOBPYIBqNw/A8JwZVU=
Subject key identifier: AB:D0:C8:49:33:6A:47:FD:FB:C2:6B:49:F1:BF:03:C6:4D:83:C5:43
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB99E00CCCC6430F3BB40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a826be6d-1c11-3948-81a8-304a5e912b2e.roa
Signing time: Wed 16 Oct 2024 14:26:33 +0000
ROA not before: Wed 16 Oct 2024 14:26:33 +0000
ROA not after: Tue 14 Jan 2025 15:26:33 +0000
asID: 13371
IP address blocks: 152.16.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b9:9e:00:cc:cc:64:30:f3:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:33 2024 GMT
Not After : Jan 14 15:26:33 2025 GMT
Subject: CN=7f458029-f0ae-4118-8426-1f3d93c44d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:9e:d1:e9:36:a2:27:4c:2c:cc:47:43:26:
f8:36:1e:87:71:d2:00:8e:62:d0:44:6f:e8:60:3f:
4f:25:f9:60:32:40:b4:c7:db:15:e4:06:b1:53:7c:
96:3e:9b:55:ac:7b:0b:fa:00:18:3f:7f:2b:d7:a8:
6a:79:37:19:85:8b:b4:7f:96:eb:69:c2:96:35:89:
84:3e:91:1f:d7:58:33:c0:0c:1b:0f:9e:e3:7c:d4:
93:e4:4a:7a:a2:f4:1c:ec:19:7c:5b:c9:af:c8:90:
a1:f0:40:aa:f9:e5:11:a9:95:8d:e6:a7:17:c2:31:
d3:4e:76:cb:82:c1:00:01:c5:db:e7:fa:4b:5d:ce:
dc:e1:6d:cd:6e:69:cb:14:a7:26:2a:f4:9c:0c:e9:
6e:0a:01:f5:0f:9c:b4:4c:6f:d3:26:19:62:9a:e4:
c6:38:2e:b5:7b:ac:3c:46:2b:de:f3:ea:0f:02:26:
19:09:80:76:1b:57:7d:80:be:ab:3d:ad:87:e7:e8:
88:f7:08:b2:f0:95:21:a4:3b:ce:bb:6b:cf:d9:29:
ee:1c:56:fe:72:74:9e:e7:25:bd:68:86:8d:52:dd:
ca:03:e9:fd:07:43:8a:6d:f7:5e:b7:30:c9:4e:76:
88:7d:e1:bb:97:37:19:cd:e0:f7:f9:5f:69:44:fc:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D0:C8:49:33:6A:47:FD:FB:C2:6B:49:F1:BF:03:C6:4D:83:C5:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a826be6d-1c11-3948-81a8-304a5e912b2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:49:db:57:70:d9:05:5f:6c:14:a0:36:e7:8e:5f:8a:6b:9e:
8d:ab:79:b2:5d:f3:f7:ff:8e:56:53:9d:89:b3:29:16:bc:b0:
a6:f7:d0:d6:57:50:c5:c5:f2:db:60:b0:4d:d6:75:13:05:5f:
54:a3:a2:09:6a:f2:31:96:2d:8f:76:ca:f1:7a:b5:c5:c4:72:
1d:49:84:b8:46:b9:68:b2:ce:e7:83:a9:11:39:5b:93:01:81:
5d:d2:2c:66:c4:a9:b8:10:95:e8:23:5f:bf:52:41:17:6f:27:
c0:5e:7c:a5:fd:65:c6:9c:ec:5e:53:dd:c7:d5:c5:fe:7a:81:
70:db:92:6f:2f:47:4f:95:34:9f:1b:33:c9:ea:3a:76:61:81:
2a:9d:7d:c3:b8:cb:b6:5f:0c:55:95:0c:5a:a7:0d:b3:89:04:
d6:95:5c:0b:7d:2f:39:f7:f1:77:f5:25:7c:57:1b:9c:48:fd:
83:e0:0a:22:b4:a3:36:dd:d2:99:08:8d:9d:7c:b9:ba:33:06:
64:88:4b:62:7b:67:09:50:ce:d9:cb:1d:a5:e9:81:aa:02:c3:
71:49:af:3a:3d:7b:0a:27:2b:b8:40:77:b7:d3:86:c9:dd:a5:
78:f6:26:16:50:a4:f5:1b:69:c8:1a:7a:7d:d8:58:51:60:85:
2d:1d:af:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:58 2024 by rpki-client on console-ams.rpki-client.org