Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/6e0386e1-7a6f-3902-a710-af705812f798.roa
File: 6e0386e1-7a6f-3902-a710-af705812f798.roa (raw, json)
Hash identifier: mpt/M6ZDCsKsKYbmJbiniO9a7dHSzIcD3q9/b9MtohQ=
Subject key identifier: 93:F2:8B:82:5B:2A:D6:39:8F:79:A9:E3:68:62:BD:94:FC:B6:1E:80
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F43285844798F32A26CB1240DBD1F9C80
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/6e0386e1-7a6f-3902-a710-af705812f798.roa
Signing time: Sun 07 Jan 2024 14:00:20 +0000
ROA not before: Sun 07 Jan 2024 14:00:20 +0000
ROA not after: Sat 06 Apr 2024 13:00:20 +0000
asID: 834
IP address blocks: 144.168.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 08:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:79:8f:32:a2:6c:b1:24:0d:bd:1f:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Jan 7 14:00:20 2024 GMT
Not After : Apr 6 13:00:20 2024 GMT
Subject: CN=01ddc413-d652-4f60-83f0-f9a41736fcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c6:d2:16:fe:d4:70:be:1a:6e:f3:a9:07:28:
95:da:63:61:92:4f:e0:88:75:1f:fa:18:8a:43:a9:
e6:9c:92:32:d8:96:78:03:a7:74:3d:e9:ab:d2:19:
f0:07:b3:08:11:df:e2:0e:56:5e:ef:8f:80:fa:77:
4a:4f:9e:95:f3:1d:87:ab:db:42:4b:09:8f:40:f1:
9c:da:4d:53:16:ed:28:6b:cd:16:b2:13:1d:f3:de:
c5:af:d1:1d:37:96:b8:66:67:e2:e5:21:e4:f1:1b:
8e:ee:fd:9f:aa:cb:05:44:81:d0:5f:7f:a9:ec:6f:
9c:ca:53:09:92:29:60:df:7c:5a:5c:d0:10:fc:a6:
44:15:27:c5:97:9e:62:08:ff:e6:1b:cf:2e:46:84:
98:02:a5:7b:60:21:3d:07:4d:c3:e0:a9:b2:08:fc:
6a:d8:ea:2b:90:da:12:da:68:ac:76:f3:64:07:e0:
0d:21:2a:fb:64:36:91:50:66:78:ca:c7:4c:0c:88:
69:16:54:0d:ff:9a:ae:99:6f:d2:b0:eb:e9:5f:9b:
cd:06:d4:9b:89:72:90:40:e2:45:f5:cf:3c:b8:46:
2b:2d:68:ba:6b:55:e3:e8:d7:76:2c:5a:50:77:ed:
ea:77:b0:23:a6:e0:21:05:cc:bb:34:0e:4a:39:00:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F2:8B:82:5B:2A:D6:39:8F:79:A9:E3:68:62:BD:94:FC:B6:1E:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/6e0386e1-7a6f-3902-a710-af705812f798.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
144.168.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:cb:83:d4:2e:72:ae:a8:8a:69:c5:08:dd:ad:a0:d2:cc:80:
7b:df:c3:4a:4c:17:a3:fb:41:1a:32:55:0b:88:af:4a:44:8e:
09:0a:c0:ad:15:1b:64:4c:2c:8a:ab:fb:23:bc:49:6b:78:e3:
13:69:63:6b:f8:ae:54:f8:2d:61:d5:e1:6d:50:60:60:f8:9a:
16:8e:34:29:f4:24:3e:65:20:2f:ea:71:fe:6b:76:8d:d3:ef:
9f:5a:2e:3d:67:87:a0:de:07:76:27:22:36:91:de:09:90:26:
1f:42:1d:4d:c1:c5:50:4e:af:5d:08:7d:7d:36:92:c6:9d:78:
5f:05:99:39:b7:d4:5a:da:59:e1:46:ab:b9:30:05:4f:cf:13:
cf:55:a5:28:0e:90:0e:df:6a:e3:dc:32:0b:d5:43:ee:76:43:
37:e0:50:6c:75:00:4b:dd:06:be:53:0f:73:a6:28:42:aa:06:
d9:f7:b2:6e:db:4f:f4:c5:a9:6f:ce:5d:87:00:aa:e2:87:0d:
78:f0:55:8e:1c:fb:5c:e7:fa:ac:2a:5f:43:77:f4:6e:66:b3:
46:b9:17:41:f5:05:b1:02:f4:33:fc:4f:0c:89:d7:ce:b6:9b:
33:6a:48:6f:1b:fc:b0:c0:9b:0e:09:54:03:77:21:11:1b:ee:
e3:16:cf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 21 10:49:46 2024 by rpki-client on console-ams.rpki-client.org