Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/3d854202-f422-3783-ba84-0b07e24101e9.roa
File: 3d854202-f422-3783-ba84-0b07e24101e9.roa (raw, json)
Hash identifier: fEZdzn8vB80FepJ/jJx/JLfthv8N5fJcm17G7ZxsmO0=
Subject key identifier: FD:37:14:C1:9C:3E:62:C3:74:EA:EB:D2:24:09:47:52:CD:78:53:9C
Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial: 010D0C9F432858467E9EFD43D2E3288E9B31F100
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/3d854202-f422-3783-ba84-0b07e24101e9.roa
Signing time: Wed 10 Jul 2024 19:05:12 +0000
ROA not before: Wed 10 Jul 2024 19:05:12 +0000
ROA not after: Tue 08 Oct 2024 19:05:12 +0000
asID: 11052
IP address blocks: 199.249.238.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:7e:9e:fd:43:d2:e3:28:8e:9b:31:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Validity
Not Before: Jul 10 19:05:12 2024 GMT
Not After : Oct 8 19:05:12 2024 GMT
Subject: CN=31fc2b92-484f-4a9f-9224-1bc830a919b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:33:9f:2a:44:b4:09:5f:e1:d6:7c:d6:50:
d0:b5:b4:1a:e5:00:da:f1:7c:b2:dc:bb:f1:f2:9d:
8f:0d:a3:15:fc:0b:54:65:e9:09:df:19:f3:16:3f:
b6:b4:50:41:64:26:d8:2b:fe:09:76:ec:f9:e6:9f:
b7:ff:74:a9:fc:08:7d:5c:2a:cb:c5:c6:c8:80:45:
ec:b2:d6:32:48:96:0f:e2:1f:5f:c3:71:fd:30:86:
2f:63:6c:ad:8d:07:80:a5:01:9a:59:a2:34:cc:b8:
ee:e1:26:2e:03:14:d3:ea:b1:49:e0:b7:d0:b6:64:
95:80:37:4a:23:c1:90:4b:b7:bf:90:16:b2:42:33:
31:7f:42:05:08:66:9f:6d:6a:fa:65:dc:0d:61:22:
c2:33:9d:37:d7:f2:c3:0f:c0:20:d8:4d:a0:d5:02:
21:78:64:38:73:46:d9:83:f0:be:97:51:4a:92:11:
40:5d:b4:1b:d3:59:cb:ee:56:39:24:12:47:70:c9:
08:e9:ce:ed:e5:9f:b0:7a:9c:b0:4a:f0:79:31:18:
f7:af:60:67:d1:51:a4:55:58:e3:5c:eb:01:fb:c6:
70:50:f7:df:e9:16:6c:68:d2:c2:d2:5a:1c:8a:2b:
d6:49:84:e4:a6:e5:43:56:1b:2b:21:71:46:7f:91:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:14:C1:9C:3E:62:C3:74:EA:EB:D2:24:09:47:52:CD:78:53:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/3d854202-f422-3783-ba84-0b07e24101e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
X509v3 Authority Key Identifier:
keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:b1:aa:85:57:e1:16:a9:7d:77:c4:f5:07:a1:c9:eb:3d:1d:
c1:28:e9:86:2a:f9:8e:64:c8:eb:72:03:34:63:2f:76:cc:0b:
ea:d9:77:97:2a:2d:91:fd:65:60:c1:ed:55:c6:f5:db:2d:98:
c8:19:8e:33:1b:5b:64:3a:c1:b5:7c:73:f7:74:57:00:f1:67:
45:ce:63:67:df:30:16:5e:d7:2a:a5:54:6f:51:e2:c8:90:5f:
71:19:19:72:1f:67:54:6b:b7:0c:00:76:fd:4a:81:5d:6d:17:
63:30:df:6a:fd:1a:5b:08:62:ef:73:25:57:75:84:67:d2:d1:
63:ee:c9:29:00:0e:1d:bc:14:4b:9a:e9:8c:fe:c8:3a:62:53:
d2:23:70:ea:e5:9b:f6:05:90:8a:fa:97:70:4e:93:d9:2b:df:
d7:6c:0c:c2:16:22:cf:9b:98:9c:91:c6:76:5a:13:99:dd:bc:
62:ba:a8:c1:ca:69:7f:ce:31:a6:cb:71:e0:df:d0:bf:c5:e9:
46:fe:43:42:4d:49:d1:5c:e7:6a:33:38:95:9d:12:fb:8c:fe:
af:d3:6a:3f:d9:6d:8b:5b:57:36:bb:2d:88:07:20:39:75:a6:
72:53:93:5c:fd:a4:9c:3c:49:c3:9d:4b:b3:8c:b0:d1:78:b9:
53:d3:0e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 19:21:51 2024 by rpki-client on console-ams.rpki-client.org