Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d67fd90-6324-3fcc-a9b5-53001b852b20.roa
File: 0d67fd90-6324-3fcc-a9b5-53001b852b20.roa (raw, json)
Hash identifier: Gy7nQc9EYY/jHAZrcoil92O8vA/EwlVz5K14VEaNs1g=
Subject key identifier: E0:48:A6:26:FD:62:CF:00:D4:92:83:0D:D1:B8:A6:8C:70:8C:D7:CE
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858458679F7BAD2B8F6950EAB5700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d67fd90-6324-3fcc-a9b5-53001b852b20.roa
Signing time: Fri 12 Apr 2024 21:50:09 +0000
ROA not before: Fri 12 Apr 2024 21:50:09 +0000
ROA not after: Thu 11 Jul 2024 21:50:09 +0000
asID: 18779
IP address blocks: 68.68.96.0/20 maxlen: 24
69.46.64.0/19 maxlen: 24
104.164.0.0/15 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 17:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:86:79:f7:ba:d2:b8:f6:95:0e:ab:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Apr 12 21:50:09 2024 GMT
Not After : Jul 11 21:50:09 2024 GMT
Subject: CN=689230db-7180-4148-b736-070a082ea4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:60:19:48:c0:42:e3:e6:42:07:fa:59:cb:
e2:be:e8:9f:cf:65:ed:d1:8c:1d:a4:78:04:93:fb:
d1:2c:a2:46:ab:1c:ae:6b:8a:33:f5:67:62:c5:2a:
c3:05:39:1a:c7:6f:3b:cc:4b:65:66:6f:06:9e:30:
2c:b2:b4:f3:fe:bc:43:ec:c1:2e:09:6c:91:56:f3:
3e:d9:97:ab:18:6a:24:2a:2d:1a:ae:af:50:b7:f5:
72:95:83:96:56:90:f6:cc:07:52:3a:3c:76:12:39:
13:76:65:1f:9d:1b:2c:c5:e8:96:3f:e4:23:8a:73:
5c:e7:1d:46:d9:ea:20:d0:d5:76:bc:74:55:39:d5:
91:7b:6d:51:09:69:0d:f6:22:ca:7b:78:42:9d:54:
98:ca:55:8e:2d:01:ba:b1:8f:86:1a:bb:a1:a4:3b:
1b:37:ae:cc:23:c1:ed:50:4e:9f:18:78:6a:c1:0c:
0d:0f:94:f0:3b:da:c8:25:8e:fb:53:dc:04:49:68:
a8:a8:a2:ff:1b:0c:f6:77:6e:96:f8:29:ef:6d:42:
20:82:db:e9:58:e9:c3:53:16:35:01:c9:40:46:48:
94:86:29:51:78:c0:69:14:31:be:dc:21:fe:e0:90:
6c:c4:ee:3c:c7:33:70:de:1c:af:76:57:f8:13:0d:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:48:A6:26:FD:62:CF:00:D4:92:83:0D:D1:B8:A6:8C:70:8C:D7:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d67fd90-6324-3fcc-a9b5-53001b852b20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
68.68.96.0/20
69.46.64.0/19
104.164.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:fb:f1:bd:d3:30:73:05:74:1e:4b:1b:77:d3:71:fd:ab:7b:
98:2e:1e:34:fa:91:64:51:9b:c4:e3:2a:29:e6:61:43:c7:87:
69:c5:32:e9:e1:bb:2b:23:62:03:1a:19:77:93:89:01:5d:27:
bd:08:59:df:83:02:6e:ef:4c:a0:a6:09:89:4f:09:cf:a8:f4:
0f:c5:62:ae:74:5a:13:9b:1a:f2:80:b0:3d:46:f8:f4:2c:1e:
0f:ef:36:87:48:eb:40:bc:38:b5:ab:11:e7:4a:3d:67:6c:a6:
4d:c0:7b:2f:18:69:e7:ed:e8:22:6b:b6:67:46:60:e8:6c:a6:
f7:f5:c1:4e:19:e2:1c:03:ca:e5:8e:77:d4:26:e4:60:65:6e:
cb:9a:69:e5:1c:4a:0e:5d:32:c7:3a:f0:e5:99:3f:d8:0a:e4:
cf:17:d9:eb:34:77:5d:e8:8f:ff:89:a0:03:a9:35:ff:8a:2b:
07:a3:38:0a:72:73:45:08:89:b4:ff:e1:9c:1b:07:0a:67:55:
c8:0d:c4:ad:f8:e4:4e:14:a6:ba:7c:6e:72:62:2a:3d:7b:e9:
7c:07:b5:b9:72:ed:cb:2d:32:20:97:ab:7d:65:a5:3f:0e:ce:
c3:85:0b:7a:bf:6b:ea:d9:7d:9e:5b:52:4f:68:c8:a9:0b:b8:
30:b5:c2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 19:48:47 2024 by rpki-client on console-fra.rpki-client.org