Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/895676fd-eb9b-3438-acf4-05c91b626340.roa
File: 895676fd-eb9b-3438-acf4-05c91b626340.roa (raw, json)
Hash identifier: SPi69bmvf2ZwoL0VmxQi8hjkTDl8u7XQzGnBGyETo+8=
Subject key identifier: 0D:58:74:AC:B4:57:10:B4:C7:6C:B4:E0:C8:98:93:64:AF:7D:6C:FE
Certificate issuer: /CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
Certificate serial: 010D0C9F43285847BC2C25A3D3572DA7F96006C0
Authority key identifier: B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/895676fd-eb9b-3438-acf4-05c91b626340.roa
Signing time: Fri 01 Nov 2024 13:00:41 +0000
ROA not before: Fri 01 Nov 2024 13:00:41 +0000
ROA not after: Thu 30 Jan 2025 14:00:41 +0000
asID: 14618
IP address blocks: 192.25.8.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 17:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:bc:2c:25:a3:d3:57:2d:a7:f9:60:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
Validity
Not Before: Nov 1 13:00:41 2024 GMT
Not After : Jan 30 14:00:41 2025 GMT
Subject: CN=9686dc3d-9004-4067-8566-95fb5388cbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:46:c9:5c:27:03:69:28:70:4a:9d:1d:54:ae:
a4:58:41:87:12:1a:b2:18:d1:d2:a1:ce:40:94:4a:
ba:b4:37:41:2e:e0:80:8f:55:00:53:6c:eb:2d:2b:
26:62:c5:30:8e:d5:68:98:bd:0d:8b:b0:e8:74:71:
99:bd:3f:56:a7:df:ae:82:5f:81:98:93:ea:59:62:
ad:1d:0b:9b:10:29:3f:44:9c:4d:39:e1:66:72:82:
f6:6b:11:1d:a9:59:55:4e:c0:b2:61:7c:da:e3:3a:
3c:3d:78:cc:17:57:c8:0a:b6:51:27:a1:8f:72:a2:
6c:1f:7d:c4:d3:82:c7:05:8b:a5:6d:28:3d:03:95:
1a:6c:c3:02:58:1d:f3:2e:d0:1d:b9:7d:28:e9:98:
63:09:4b:64:67:5a:57:8f:1f:0b:9b:8c:4c:8c:b4:
9c:3c:b2:9b:5a:a9:5e:56:ff:1f:96:a7:9f:1c:54:
93:54:6e:3a:69:e1:b4:88:20:7a:81:1a:78:e4:e7:
64:8b:45:89:6d:de:e6:c6:81:f1:04:6e:ae:98:7d:
58:ea:03:90:1c:85:25:ff:82:c1:f5:8d:0d:ea:4e:
32:2c:94:8e:97:85:4a:6c:d0:81:34:bd:3e:88:74:
87:f3:63:93:c2:4a:38:58:d3:a2:c9:07:2f:9d:b8:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:58:74:AC:B4:57:10:B4:C7:6C:B4:E0:C8:98:93:64:AF:7D:6C:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/895676fd-eb9b-3438-acf4-05c91b626340.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.crl
X509v3 Authority Key Identifier:
keyid:B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
sbgp-ipAddrBlock: critical
IPv4:
192.25.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:2c:03:1a:c5:30:97:01:64:63:5e:50:02:86:64:f8:6a:5a:
88:a0:07:d2:b7:e1:ad:9c:2c:e1:32:a6:35:58:37:ae:2c:39:
d3:ff:07:36:15:48:2e:d6:af:43:b4:a9:85:11:7e:b4:f8:c3:
da:09:52:11:40:f1:f6:9d:02:81:ab:e9:2a:af:5b:a3:84:1c:
cc:2c:ea:22:76:36:09:69:67:da:16:37:9b:86:3d:d0:02:e4:
db:16:4f:84:65:49:0d:4b:f0:26:9f:71:c3:fc:29:cf:fd:69:
bf:dc:6e:f2:3a:85:06:04:0f:03:ad:96:13:d8:7d:7f:3c:dc:
75:9f:2a:8c:a9:5d:e6:54:20:d3:e0:0c:41:b2:85:0f:74:76:
f3:c9:be:de:ee:68:43:fd:55:24:8b:fa:61:8d:60:a5:b6:53:
66:ea:be:14:e3:f9:fb:d2:cf:ce:71:2b:f1:41:ce:b4:a6:65:
20:6c:25:1f:9e:67:01:5f:42:5f:cc:a6:97:1f:07:6d:4e:0d:
6d:d9:69:a1:fc:83:90:cb:d6:84:0e:52:56:70:1e:99:e5:35:
13:e0:b0:35:f7:cc:ae:37:68:50:e7:35:77:b4:97:88:fa:c2:
93:98:9c:d3:19:02:22:c9:ad:1b:c2:5e:7e:02:c2:42:f0:90:
f5:f4:53:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 21:55:54 2024 by rpki-client on console-ams.rpki-client.org