Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/3dd99e87-1d50-39ad-a316-7e06aecba014.roa
File: 3dd99e87-1d50-39ad-a316-7e06aecba014.roa (raw, json)
Hash identifier: pcJ4Zp6o12+qOfZFJFvrLIBzEPeZ3+3ACWDXjgoYiY4=
Subject key identifier: A6:F5:33:9A:CF:46:43:CF:43:83:56:0F:00:D6:44:66:18:D6:F5:DF
Certificate issuer: /CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
Certificate serial: 010D0C9F432858477230DB944446A3F14B7468C0
Authority key identifier: B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/3dd99e87-1d50-39ad-a316-7e06aecba014.roa
Signing time: Sun 06 Oct 2024 01:00:31 +0000
ROA not before: Sun 06 Oct 2024 01:00:31 +0000
ROA not after: Sat 04 Jan 2025 02:00:31 +0000
asID: 401041
IP address blocks: 192.25.8.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 17:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:72:30:db:94:44:46:a3:f1:4b:74:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
Validity
Not Before: Oct 6 01:00:31 2024 GMT
Not After : Jan 4 02:00:31 2025 GMT
Subject: CN=a0adcd3e-ddd5-4b75-acf8-1abbf38dd4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fb:27:86:e0:73:b6:57:0d:1c:f6:8e:5e:38:
dd:aa:41:99:32:d3:86:2b:41:4a:f1:1a:56:49:05:
57:be:71:74:55:bd:a4:4b:fb:85:37:b6:37:fb:49:
c0:2b:7d:1b:c6:58:6e:77:41:de:42:02:e9:59:2d:
47:d8:2b:64:6d:64:0f:ff:64:4b:28:f0:92:37:6a:
68:09:ef:5a:79:80:02:90:92:16:25:53:e5:d3:9d:
1c:5d:92:ba:f9:91:2f:46:35:04:c4:6f:06:fb:a6:
9a:82:de:12:89:67:c0:4c:04:43:b3:51:e6:6a:4d:
05:9a:82:93:5e:94:11:fe:06:0f:85:e0:3d:31:54:
76:97:96:c7:a5:ac:a8:0c:6a:d8:6f:b8:2a:1f:85:
4e:06:0c:f4:b9:ee:ee:92:e7:4a:8c:4f:b0:c2:2a:
6a:7a:9b:d9:e6:30:5f:f0:ce:81:fb:9b:ed:90:cb:
97:fd:05:76:37:2c:05:08:40:9f:b5:f4:f5:6e:40:
84:a5:c8:3d:04:b9:54:f7:57:7c:33:93:1e:c9:d4:
c5:8d:ea:88:6e:74:48:31:d8:68:87:2e:e2:e9:c5:
6a:30:cb:51:e5:ef:56:f1:d7:6f:36:23:1e:f4:c8:
ff:22:78:88:46:07:ef:87:d5:ea:7e:a1:ad:1b:69:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F5:33:9A:CF:46:43:CF:43:83:56:0F:00:D6:44:66:18:D6:F5:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/3dd99e87-1d50-39ad-a316-7e06aecba014.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.crl
X509v3 Authority Key Identifier:
keyid:B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
sbgp-ipAddrBlock: critical
IPv4:
192.25.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:b7:a5:12:5b:bf:86:49:71:56:fb:a3:bc:ac:55:c2:c8:dc:
8f:cc:ef:3b:fa:65:19:d4:04:d2:73:b4:05:e0:6c:7e:af:b1:
ea:b7:97:a9:d7:22:ba:69:e7:0d:df:6a:bd:02:1a:e7:95:35:
e7:09:2e:41:61:0c:ea:84:5c:17:fc:49:b8:f5:f0:55:c1:21:
96:74:dc:50:f2:02:a4:3f:0e:77:df:22:47:2d:0c:08:76:b5:
66:02:c5:42:b7:9e:6a:21:50:8e:53:32:6a:8f:70:da:b7:53:
3a:42:f3:75:40:eb:56:4a:5c:d0:61:a9:d6:f0:f4:85:75:ef:
14:5a:a0:1b:7c:4c:87:3d:aa:15:17:9c:a0:c1:68:3a:fd:1e:
97:2e:97:e5:b2:66:e3:af:7b:25:47:63:15:0f:c1:4c:86:b3:
77:bc:f4:32:0d:ba:65:7c:17:8f:4e:87:d8:ce:e0:c0:4b:33:
6f:9a:6a:c8:f5:42:54:76:97:7c:14:03:a0:20:1f:d5:86:eb:
71:ac:b0:9d:64:26:2e:8f:3c:18:af:5e:c3:71:a9:39:c3:a8:
6a:cf:c0:56:b2:d7:55:83:41:22:60:d2:27:bf:f9:bd:3d:ff:
f5:6e:27:83:74:55:d7:75:30:60:5b:6e:92:07:0d:1a:f8:e7:
3c:5f:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 21:55:54 2024 by rpki-client on console-ams.rpki-client.org