Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89c1fc0f-ae84-3f43-ac6d-065ec10a3f9d.roa
File: 89c1fc0f-ae84-3f43-ac6d-065ec10a3f9d.roa (raw, json)
Hash identifier: spNgVrlpRyX3/z0BYVjdHWocQ2lamSU0UprToHwevq8=
Subject key identifier: 0A:94:DA:8B:99:B4:98:FE:31:7E:65:74:BC:44:15:8A:47:99:D3:A9
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584420394DCB183D7CD99FAFDB00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89c1fc0f-ae84-3f43-ac6d-065ec10a3f9d.roa
Signing time: Wed 06 Dec 2023 14:00:20 +0000
ROA not before: Wed 06 Dec 2023 14:00:20 +0000
ROA not after: Tue 05 Mar 2024 14:00:20 +0000
asID: 36639
IP address blocks: 206.206.100.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 Feb 2024 18:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:20:39:4d:cb:18:3d:7c:d9:9f:af:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 6 14:00:20 2023 GMT
Not After : Mar 5 14:00:20 2024 GMT
Subject: CN=6b3bf66e-b315-4a95-bbdc-f6cbcdf49479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:47:d1:11:dc:d8:d3:fa:52:5b:8e:8e:8b:79:
b4:b6:18:ae:ff:42:30:ce:4d:7e:65:6d:9d:81:a8:
c8:ab:0f:7a:9a:e8:b6:f4:71:54:88:a0:5b:23:93:
9e:14:db:92:4d:e7:d9:19:ef:42:36:4b:0d:22:26:
0a:31:ad:d8:f0:08:f0:86:d9:1e:88:1b:43:7f:97:
40:f3:0d:3a:04:ee:4c:01:a4:ad:2a:f8:04:f1:ec:
d4:cb:83:5b:fa:b1:9d:3b:38:ea:ff:d1:5e:dc:74:
28:91:d4:aa:69:4f:4c:8b:c7:03:00:b2:48:52:1a:
35:07:92:7f:a1:04:a8:2d:5b:fb:c6:42:65:61:74:
3d:00:40:79:19:c4:9d:a8:9b:a1:70:7c:7b:48:57:
96:96:cd:82:9e:3f:85:e7:d3:fd:75:e6:5b:06:da:
68:9e:42:cf:41:9a:d7:32:5c:81:c8:f7:b0:73:87:
3c:c8:a9:ff:1e:90:8b:87:45:47:f5:ab:49:b0:6e:
b9:ed:55:43:a1:76:b3:40:ad:2a:64:86:75:7e:cb:
b6:b1:06:fd:9c:87:bd:12:95:65:f0:a7:19:03:3d:
81:5f:f8:4e:5f:01:9e:8a:03:dd:b4:d0:82:12:75:
ca:5b:b3:98:c2:f3:4f:a9:ab:a8:bc:91:d9:a2:38:
64:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:94:DA:8B:99:B4:98:FE:31:7E:65:74:BC:44:15:8A:47:99:D3:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89c1fc0f-ae84-3f43-ac6d-065ec10a3f9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
206.206.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:5b:62:5b:6a:39:ac:bb:e7:f0:db:34:9f:6d:6a:70:b6:23:
b6:c6:01:72:a2:92:3d:e5:7b:bb:b1:28:3b:84:81:d5:5f:97:
83:bb:b2:16:68:3e:44:c5:32:5d:17:c3:4b:73:df:44:3d:06:
ad:26:41:c7:59:da:df:bd:55:05:7a:96:fd:e7:c5:63:4e:60:
a2:18:fd:92:cb:df:cb:62:c3:a2:9b:a1:24:fa:b0:f7:28:6b:
14:a2:04:30:15:b7:37:e6:d1:3d:79:1c:eb:f8:bc:7b:3c:91:
ac:39:48:d1:2b:0a:6f:7d:08:eb:c8:00:c1:d0:1e:eb:7a:41:
84:73:ed:46:72:05:53:8a:38:04:66:18:d2:b4:b7:2b:f1:b5:
15:ed:d3:d0:26:38:51:ff:dd:34:bb:a9:6f:35:0b:38:4e:d0:
aa:38:9d:46:85:e5:00:c6:a0:c2:5b:4c:ae:b1:bf:f3:c6:c5:
db:d4:ff:0d:37:44:82:f7:97:f3:7a:64:29:cc:54:97:d6:db:
70:32:b6:74:97:76:04:c1:4f:dc:cb:ac:4d:9a:d7:8c:15:43:
f5:7f:e2:3e:be:af:79:f8:9f:9e:5b:90:e8:12:a8:29:02:94:
de:1b:86:e7:05:c2:bd:2c:e1:00:5d:07:09:b9:f9:d5:36:50:
f6:a9:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 22:03:28 2024 by rpki-client on console-ams.rpki-client.org