Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bd05e4c9-4152-3466-ad99-17b8ac6cf728.roa
File: bd05e4c9-4152-3466-ad99-17b8ac6cf728.roa (raw, json)
Hash identifier: B/NaqsfB4hOQUAerbBEoTZPGu/esTGBpZiZnkMny1lI=
Subject key identifier: CA:B9:BA:EF:35:65:CA:F8:2F:26:4D:61:0B:48:0C:66:2B:4C:0B:D4
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858403C3254C2C3CF175CC7688D50
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bd05e4c9-4152-3466-ad99-17b8ac6cf728.roa
Signing time: Tue 13 Dec 2022 18:27:09 +0000
ROA not before: Tue 13 Dec 2022 18:27:09 +0000
ROA not after: Tue 18 Mar 2025 04:00:00 +0000
asID: 61138
IP address blocks: 206.206.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Dec 2022 15:52:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3c:32:54:c2:c3:cf:17:5c:c7:68:8d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 13 18:27:09 2022 GMT
Not After : Mar 18 04:00:00 2025 GMT
Subject: CN=80e10390-7da4-43c0-90c5-7b44a0b86a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:14:77:e9:b0:ee:f2:d3:f7:88:b9:2d:1f:
df:5b:5b:b9:af:4b:fc:f0:df:f3:c7:db:dd:19:23:
33:21:c7:d8:54:77:ab:23:da:6c:fc:b3:59:8f:a0:
8d:4b:99:cd:34:85:0f:88:af:37:32:20:8e:bb:99:
0e:9b:f5:62:62:ed:55:1d:27:df:91:61:47:38:32:
36:39:ab:f3:53:69:86:ec:30:82:30:8d:12:d7:1d:
8f:f6:18:62:df:47:95:f8:65:ab:5d:c8:ff:28:36:
4e:cc:a4:b1:ae:94:99:78:80:72:ca:6d:4c:5c:c3:
ca:79:cf:41:98:34:c5:1f:d1:eb:0c:d7:43:38:26:
02:4d:d6:78:4f:50:40:c2:96:35:6e:70:ef:06:ea:
ef:f2:31:13:6d:76:33:91:0f:f4:04:0d:9a:5b:27:
9b:a9:58:09:b1:39:fd:b9:5a:02:8b:b4:07:46:21:
45:77:7e:21:c2:0c:d4:4c:92:cc:18:27:f5:96:8c:
28:b9:09:c3:88:66:5d:a2:0c:42:f1:25:62:26:1d:
05:07:f3:e6:f3:31:ec:3d:0d:6c:75:d0:5a:c9:b8:
17:e8:d5:07:8e:0c:51:ac:03:3e:1a:94:22:31:7f:
94:8d:f5:f2:19:da:8a:c5:8a:cd:5a:f0:ce:24:31:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B9:BA:EF:35:65:CA:F8:2F:26:4D:61:0B:48:0C:66:2B:4C:0B:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bd05e4c9-4152-3466-ad99-17b8ac6cf728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
206.206.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:8e:11:9f:57:f3:12:33:87:c6:52:70:f1:39:b3:6e:86:c3:
45:ff:60:a1:9f:5a:83:1c:4c:09:41:8d:95:e9:01:06:9b:8c:
76:30:10:c5:98:a5:3b:12:87:7c:5d:41:47:0d:4d:b7:f8:01:
ad:9a:1a:4f:f1:45:ae:38:38:f3:50:a2:b0:9f:93:90:62:f0:
ba:21:53:22:2a:6a:2d:1e:6c:39:e8:ee:1c:e0:45:0d:b8:20:
e0:b9:10:c3:00:2b:66:7d:88:04:bc:d1:dd:42:91:4f:51:a7:
e9:ab:b5:60:c5:c6:af:c3:cd:e2:53:6b:6e:e7:c1:92:88:95:
79:62:c9:f8:e4:01:cc:ac:10:b4:0c:d1:fd:73:7b:64:b2:1f:
af:a3:9f:db:11:23:e4:ce:ee:54:03:d1:a3:88:ce:e1:2e:1d:
60:8d:4e:be:e7:ef:cb:b4:fd:81:13:c2:ce:c4:44:e1:e2:bc:
67:b5:9c:a2:e9:bb:b3:5f:8a:ca:d1:c3:22:c8:08:44:27:bb:
b6:26:7d:19:d8:53:10:fe:f3:77:fe:b2:3a:a5:af:f7:2d:a8:
63:5a:95:87:65:78:46:e4:76:41:c4:9f:3f:16:76:b4:24:27:
07:da:eb:24:6d:1a:40:0d:91:0e:85:6c:29:b2:c4:d3:cc:33:
f7:8e:04:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:01 2024 by rpki-client on console-fra.rpki-client.org