Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b4f9ccf8-8b65-3296-b3a8-d14736bf9627.roa
File: b4f9ccf8-8b65-3296-b3a8-d14736bf9627.roa (raw, json)
Hash identifier: pCSbZLXcpKUC/M80jgeBEWqwcvzSLCIE0HWqZNwn4CM=
Subject key identifier: 08:41:9C:9B:91:6D:4E:9A:AD:DC:05:68:6A:CC:39:2D:F2:D7:70:14
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB8ECC3B7E123F4910480
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b4f9ccf8-8b65-3296-b3a8-d14736bf9627.roa
Signing time: Wed 16 Oct 2024 14:26:33 +0000
ROA not before: Wed 16 Oct 2024 14:26:33 +0000
ROA not after: Tue 14 Jan 2025 15:26:33 +0000
asID: 81
IP address blocks: 192.101.22.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b8:ec:c3:b7:e1:23:f4:91:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:33 2024 GMT
Not After : Jan 14 15:26:33 2025 GMT
Subject: CN=39982beb-98ff-408a-95a7-06913d4f1a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:bb:0d:95:ba:6d:e7:07:cd:09:48:c4:c2:
de:63:8d:55:2e:87:ff:fa:7d:4b:c9:c3:ba:4c:da:
1e:36:af:96:b7:b6:ac:fa:14:72:d3:2f:68:13:77:
89:6e:b5:15:b1:24:88:11:6c:24:f0:de:88:eb:75:
81:9a:8c:b2:9f:3c:5b:f7:6c:fc:bf:75:b5:90:ce:
ba:a8:5f:b6:dd:ac:ba:2a:f9:70:34:86:20:c4:e5:
fc:16:f5:05:7a:42:cd:18:09:4a:08:05:61:1d:ba:
8a:80:50:d7:28:80:ea:04:05:d6:65:92:e3:71:78:
72:35:50:56:6a:6f:29:75:58:f0:bb:f6:95:4c:51:
c2:93:47:23:a1:18:41:0d:e7:59:2e:bd:c5:e0:b8:
e2:a8:4c:e7:3b:cc:2e:2c:2d:db:02:ff:76:ad:69:
98:cc:68:64:29:65:43:8c:82:e0:14:fb:98:8f:06:
34:f7:a3:37:6a:61:c9:7a:01:b5:4f:e6:ad:d8:6d:
8c:e5:0f:d8:27:ea:7f:17:2e:7d:3d:d1:77:71:2e:
17:9b:64:09:90:85:12:aa:b6:db:91:58:a1:34:e7:
03:ed:a2:7f:45:26:c3:01:6a:04:64:85:15:49:6c:
ef:ac:ea:dc:00:b8:34:d9:36:4e:41:f5:21:e3:a7:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:41:9C:9B:91:6D:4E:9A:AD:DC:05:68:6A:CC:39:2D:F2:D7:70:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b4f9ccf8-8b65-3296-b3a8-d14736bf9627.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:7e:c6:e8:e0:8a:ab:40:db:77:7c:fd:e4:e2:50:01:2d:7c:
0a:79:e6:1d:87:24:cb:6c:82:50:8e:56:d5:b5:dd:07:c2:87:
f5:06:b9:27:77:9c:a3:89:da:eb:c8:94:c3:63:c0:93:e1:66:
4e:6e:73:5c:6f:fd:73:7c:d1:1d:95:4d:f3:8a:98:8a:87:b9:
aa:02:44:c5:9f:13:5d:d2:96:99:d9:f0:9f:75:b9:e5:b4:7f:
b4:d6:7f:1a:2b:18:b1:97:28:5b:56:c4:dc:04:2a:7a:a3:1c:
44:5f:c8:ba:5d:84:03:bd:29:40:f2:e5:f1:6d:1e:f4:f9:ec:
84:b6:6f:78:1c:74:03:7e:4d:ad:cf:b5:58:f2:e9:a6:36:9f:
d8:80:79:a4:7d:11:fc:71:e3:f5:06:6f:96:54:2c:96:1c:00:
4d:7f:d4:f0:1f:78:f6:e3:bd:bd:45:2b:3b:69:e0:d6:a4:27:
b8:13:8f:34:bb:81:ce:5a:89:5c:b6:51:f3:0e:c5:67:1a:84:
0b:5d:7a:28:68:4a:31:21:ca:35:5b:8b:2a:bd:b2:dd:e8:da:
23:03:fb:d8:dc:40:9a:0e:6a:3c:ba:a6:2b:ac:fc:3e:82:ab:
27:c9:08:5a:0a:94:19:6d:92:2a:8c:d5:0d:d9:ca:57:0d:80:
60:22:61:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:58 2024 by rpki-client on console-ams.rpki-client.org