Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/1ec37dd3-7566-32b2-9013-8ab1dfc0328f.roa
File: 1ec37dd3-7566-32b2-9013-8ab1dfc0328f.roa (raw, json)
Hash identifier: /XhKh0qwLmewOC+oi5QWfkL6jQuFOHcY86K1UG5Luwo=
Subject key identifier: 53:41:3C:54:94:F8:4C:71:D8:9F:77:36:75:8B:AD:CE:C9:90:A4:EC
Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial: 010D0C9F4328584692DA15D545EDCCC9A237A380
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/1ec37dd3-7566-32b2-9013-8ab1dfc0328f.roa
Signing time: Thu 18 Jul 2024 01:00:24 +0000
ROA not before: Thu 18 Jul 2024 01:00:24 +0000
ROA not after: Wed 16 Oct 2024 01:00:24 +0000
asID: 13213
IP address blocks: 208.131.152.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:92:da:15:d5:45:ed:cc:c9:a2:37:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Validity
Not Before: Jul 18 01:00:24 2024 GMT
Not After : Oct 16 01:00:24 2024 GMT
Subject: CN=a659aa44-73c4-404c-b4ca-dda9ba270051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b5:cf:da:10:22:6e:d0:df:1c:c5:ef:fe:ac:
cb:a2:ee:1c:a9:54:92:cb:e6:9c:36:9e:44:1c:30:
84:d4:05:12:fe:c3:a8:e6:ae:fb:2a:89:a4:16:31:
99:bb:4f:92:17:61:e6:db:e3:bc:ac:3f:d3:0c:ee:
18:3a:a3:fb:c3:9d:c6:5e:8f:a0:39:39:81:15:46:
01:a1:d8:8b:2e:bc:9a:35:06:b9:cc:fb:f5:27:de:
f1:a2:85:e5:98:06:4b:5f:14:a3:9d:5c:21:67:cd:
7b:bb:ed:9c:dc:ca:9b:68:63:44:a3:52:04:af:4e:
3d:1b:c5:26:6e:f7:b5:2f:f4:5a:b4:47:d7:ac:4b:
45:72:d2:a0:fb:c1:76:64:2a:a3:87:a2:ff:d3:20:
16:93:b7:e1:6d:39:25:37:49:45:0a:fd:4f:07:62:
4e:7b:9f:78:a0:21:8c:5e:65:4c:d2:a8:13:e8:8b:
7c:09:2c:14:3c:1a:e6:69:8b:4d:af:bd:ad:5d:4e:
0f:58:70:a8:0c:c9:78:1f:e0:99:fa:cf:f8:41:9e:
12:2f:e3:2e:c7:a1:c2:37:07:b2:d9:5e:b9:d7:93:
7d:ee:e8:29:a5:d4:4f:6e:f3:e1:64:c1:06:84:41:
b0:73:b1:82:47:a9:00:74:17:e8:48:32:b1:11:b8:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:41:3C:54:94:F8:4C:71:D8:9F:77:36:75:8B:AD:CE:C9:90:A4:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/1ec37dd3-7566-32b2-9013-8ab1dfc0328f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
X509v3 Authority Key Identifier:
keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
sbgp-ipAddrBlock: critical
IPv4:
208.131.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:6b:65:63:31:f5:d4:50:d9:65:2f:13:19:ea:90:9f:a5:d1:
4d:22:0b:6e:2e:04:25:52:3c:3c:4b:fc:ae:7e:f2:2e:ae:cc:
5a:e3:ca:63:b7:99:22:0a:f1:40:af:b6:24:53:95:ea:7b:59:
c4:ee:e1:9f:3e:be:0d:1b:50:6a:d6:1e:78:da:f0:7a:39:47:
09:56:53:16:28:22:8c:64:42:0c:ac:a2:cd:1b:6b:0a:7d:36:
8c:de:00:d0:d4:d9:23:03:f7:9e:01:40:22:c4:2b:27:fe:39:
2c:6e:5c:95:72:e5:97:ff:c4:71:a9:ba:a1:70:cc:c8:be:6f:
a4:2f:da:17:15:a4:7e:ab:bf:7c:02:8b:ac:b0:db:91:2c:ec:
67:f7:c9:e5:02:49:4e:4b:dc:0e:ec:e3:b6:43:5f:c6:39:68:
ee:d0:95:04:cf:7d:40:14:0e:2a:3b:53:a6:d8:e3:ce:8a:4e:
f7:32:19:60:ad:05:ce:c4:d6:ba:50:40:eb:01:ca:48:cb:51:
c6:9a:88:4d:67:5a:6b:c8:e6:36:a6:cf:d4:8c:d6:e3:ba:a7:
27:69:39:74:48:8c:57:31:56:73:ec:e4:bb:0c:4e:2d:16:d5:
d8:9a:de:ed:bd:92:70:8c:74:6e:0f:71:d8:a7:67:cc:68:8c:
57:cb:f1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 10:06:39 2024 by rpki-client on console-ams.rpki-client.org