Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/52d40830-b653-3f42-abc3-b7274384f95b.roa
File: 52d40830-b653-3f42-abc3-b7274384f95b.roa (raw, json)
Hash identifier: hptpRnihS+WjmS+oJJf4JXQDdVCnyER2XiVoZtuwQ+w=
Subject key identifier: 78:AC:CD:14:A6:75:45:96:24:97:E5:A5:58:A1:73:29:BF:D3:68:FF
Certificate issuer: /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial: 010D0C9F432858377A6A5A4B7CE44D95A72DEA40
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/52d40830-b653-3f42-abc3-b7274384f95b.roa
Signing time: Wed 16 Sep 2020 04:00:00 +0000
ROA not before: Wed 16 Sep 2020 04:00:00 +0000
ROA not after: Mon 01 Jan 2024 05:00:00 +0000
asID: 398646
IP address blocks: 162.253.212.0/22 maxlen: 22
162.253.212.0/24 maxlen: 24
162.253.213.0/24 maxlen: 24
162.253.214.0/24 maxlen: 24
162.253.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:7a:6a:5a:4b:7c:e4:4d:95:a7:2d:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
Validity
Not Before: Sep 16 04:00:00 2020 GMT
Not After : Jan 1 05:00:00 2024 GMT
Subject: CN=a4c87853-8e34-474a-aa2b-ec6b974f0ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:07:59:2e:73:1e:db:3a:56:3c:d3:e5:95:
f6:05:03:c5:b8:38:81:82:8a:80:eb:51:16:89:98:
44:2c:ec:b1:68:28:2f:49:81:b5:70:73:70:d8:11:
88:be:db:ee:27:67:ba:2a:5f:21:d3:4a:7c:83:17:
ce:ec:e2:71:91:cc:9a:b7:4b:52:e0:47:c6:d5:fa:
7c:16:f5:9f:8c:4f:af:94:df:2b:27:6f:8d:57:06:
53:bd:9d:b0:14:99:8d:4a:50:2b:9d:3c:c8:53:f0:
b2:77:6f:bb:2c:b4:c6:cc:2a:2a:d3:42:bb:b9:4d:
63:93:9c:c9:66:c2:98:05:d2:82:65:3c:19:8d:cc:
40:42:93:d0:45:f7:d4:13:c0:8d:ec:fb:b4:54:c3:
a7:8c:c0:b6:3d:75:34:05:4b:49:9e:a1:9a:cf:05:
02:16:dc:ae:b1:e4:ea:9c:60:42:e6:9b:f0:d6:af:
3e:f7:fd:5f:20:ba:0f:30:af:8a:40:c3:68:8c:1b:
7b:8e:2c:44:f2:8b:99:9a:7d:f0:b8:67:c9:39:c7:
8d:1d:36:7f:44:8a:72:ff:55:bf:47:f9:4a:0d:b4:
61:73:4b:0a:60:a2:14:42:c5:a3:b2:e3:31:58:dc:
b0:53:14:90:d1:42:2d:78:42:1b:0b:5e:8b:d0:6d:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AC:CD:14:A6:75:45:96:24:97:E5:A5:58:A1:73:29:BF:D3:68:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/52d40830-b653-3f42-abc3-b7274384f95b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
X509v3 Authority Key Identifier:
keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
sbgp-ipAddrBlock: critical
IPv4:
162.253.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:ff:21:2a:3a:8e:9f:b4:a1:4a:c7:ac:d3:6d:21:22:ca:61:
94:6a:72:01:e2:bd:e7:1a:20:d6:71:6c:ed:79:a6:c1:32:73:
6c:75:2d:08:f5:2b:bd:2d:3d:9a:ee:7f:3d:e0:b1:87:22:bb:
e3:bb:a7:31:fe:97:9c:d7:93:30:59:ab:bf:4e:24:66:76:0f:
31:ec:2a:df:15:71:f6:a5:e4:5c:9c:5e:f6:6c:88:57:0e:3f:
5a:e1:23:d5:01:da:9b:e8:a5:a1:b0:7f:ff:fd:1c:d9:d2:9e:
da:7d:c6:d3:60:9a:34:ea:0e:30:6a:2c:d6:70:19:09:db:29:
03:f5:ca:87:18:58:0d:a8:80:f6:50:a9:41:08:e2:fc:32:93:
cc:f9:96:61:66:55:60:e8:3d:45:3f:f8:18:81:7d:48:3e:5a:
8b:fe:c9:ea:96:54:96:a1:af:88:c0:ae:53:ea:d9:7c:2a:15:
2b:d6:88:3f:98:ce:88:41:45:08:19:1f:b6:ed:ce:5d:42:85:
2a:dc:6d:35:01:d5:ba:69:73:10:c7:6f:db:f2:46:24:46:2d:
cb:95:33:b1:d0:f8:b5:9f:78:fe:4e:70:ed:55:03:f9:3a:95:
55:4d:b0:1c:05:32:de:3a:06:65:6d:16:95:c4:64:36:19:2b:
af:39:b0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:16 2023 by rpki-client on console-fra.rpki-client.org