Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a964ce72-6a30-39f8-8fc1-23a6fc57ff74.roa
File: a964ce72-6a30-39f8-8fc1-23a6fc57ff74.roa (raw, json)
Hash identifier: UGEoQi+Xxbj649wUOuqZu0nD3R4vRDao+adgesgC+QY=
Subject key identifier: 04:99:78:1F:C5:A1:3F:92:85:BB:81:12:CB:47:64:83:11:86:E5:10
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285846E025E5337D1834B1A2CD1900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a964ce72-6a30-39f8-8fc1-23a6fc57ff74.roa
Signing time: Wed 14 Aug 2024 17:30:26 +0000
ROA not before: Wed 14 Aug 2024 17:30:26 +0000
ROA not after: Tue 12 Nov 2024 18:30:26 +0000
asID: 54004
IP address blocks: 198.89.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 21:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e0:25:e5:33:7d:18:34:b1:a2:cd:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Aug 14 17:30:26 2024 GMT
Not After : Nov 12 18:30:26 2024 GMT
Subject: CN=d02a09c0-8ab7-49d4-aec1-7465d8335f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:73:11:8b:14:7d:62:e3:24:0e:0c:87:44:
21:ad:db:bc:a6:01:40:ad:4b:04:64:65:9f:d1:7b:
33:49:89:e0:13:50:08:38:d4:1c:04:05:75:d4:11:
35:c8:c0:2e:aa:81:09:24:be:1f:a0:f5:83:95:ae:
b5:90:40:bd:07:e6:27:29:0e:79:c0:f1:1d:25:f2:
3f:24:bf:8c:e3:b9:ee:24:e7:35:7f:e3:77:b8:04:
18:85:b4:85:69:31:ae:f8:b6:0d:1c:af:5e:d3:1d:
a3:27:8c:37:95:b9:56:82:65:54:e6:f9:89:c5:48:
d8:57:16:53:80:e5:b0:1c:20:66:8f:90:3c:37:54:
6a:46:73:24:2c:b9:3a:65:9e:56:59:80:d3:34:13:
8a:0f:e7:02:47:fb:3d:48:c8:8f:3d:69:ec:4d:b4:
4e:e2:69:b7:0f:c5:51:5c:cb:73:c1:51:9a:72:f7:
c2:99:2d:25:bf:f1:e8:7d:a3:35:2b:73:c0:3d:9a:
15:92:63:aa:be:e9:7e:d2:1c:1f:63:c9:82:76:ef:
f1:16:cb:b9:52:1b:cd:7b:ae:73:00:9b:16:01:da:
ab:13:f6:79:fb:a8:68:9f:1b:4c:c1:57:fd:67:e7:
90:f5:55:cf:b1:d5:0d:97:84:4e:c4:08:39:53:7f:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:99:78:1F:C5:A1:3F:92:85:BB:81:12:CB:47:64:83:11:86:E5:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a964ce72-6a30-39f8-8fc1-23a6fc57ff74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
198.89.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:ff:09:15:60:cb:3d:81:bc:4d:85:6c:b1:ee:46:a1:12:9b:
f2:d3:47:fc:cf:f2:9c:12:2a:4b:97:93:24:b0:cd:ea:9b:ed:
fc:e9:73:f0:62:82:58:00:0e:bb:8d:05:56:03:ef:50:4a:de:
cb:7a:9a:96:ac:ca:e4:f9:78:7f:4f:14:3b:72:84:a8:aa:9c:
6c:fa:a0:be:fd:3d:7c:24:c1:b2:af:11:a3:4b:38:56:d7:9b:
6a:fe:2c:f1:a9:38:fb:9c:67:42:48:db:4c:d9:e3:c3:47:bb:
84:b8:41:cd:8f:7d:34:d5:8e:b7:dc:62:ab:72:58:8e:0f:ca:
25:25:07:8a:72:a5:45:4a:97:ae:45:e6:92:e3:e9:71:52:65:
79:3d:af:69:33:dc:f6:13:96:71:b8:9f:c7:c6:97:d8:4a:d6:
34:3d:e8:67:c7:f0:1b:47:b9:16:e0:28:45:c5:c2:25:66:f6:
dd:23:a4:a7:5d:89:5b:8d:df:d0:af:92:7f:e6:3c:d5:39:54:
73:b6:75:64:7d:96:a6:47:25:b1:1c:1f:e3:41:0e:00:38:89:
63:9b:36:94:bd:3a:b8:94:8f:82:ad:6f:f9:70:25:3d:cc:65:
4a:24:af:18:e0:a2:ea:20:1f:67:44:6e:1c:e3:07:c3:fa:d7:
f0:27:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 23:21:43 2024 by rpki-client on console-fra.rpki-client.org