Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/14c060b8-b340-3103-93a6-e36d287abeb2.roa
File: 14c060b8-b340-3103-93a6-e36d287abeb2.roa (raw, json)
Hash identifier: /J8xXlp8Hj6gJ6z+sOrD+3HfNF217jQ1dF1EeoDFbWQ=
Subject key identifier: DE:9F:3F:D1:D9:9A:5B:02:33:99:13:35:24:A4:1B:07:A6:CE:A6:21
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F432858473BC09CDB5B73192B6C6B9280
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/14c060b8-b340-3103-93a6-e36d287abeb2.roa
Signing time: Mon 16 Sep 2024 13:00:42 +0000
ROA not before: Mon 16 Sep 2024 13:00:42 +0000
ROA not after: Sun 15 Dec 2024 14:00:42 +0000
asID: 40940
IP address blocks: 139.5.20.0/23 maxlen: 23
139.5.20.0/24 maxlen: 24
139.5.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 11:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3b:c0:9c:db:5b:73:19:2b:6c:6b:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Sep 16 13:00:42 2024 GMT
Not After : Dec 15 14:00:42 2024 GMT
Subject: CN=bfbfc5ba-29c2-4fd9-9436-bbf25c1fd685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:e1:3c:59:5d:31:1a:83:1f:e1:e8:ec:3a:
e5:31:3c:34:56:2b:f3:07:c5:23:c6:57:df:9a:c0:
e3:58:d1:51:24:1e:38:f2:2f:d3:5f:be:9b:00:cb:
45:a3:70:ca:b6:7a:1e:df:b6:ba:ab:2f:11:0e:55:
1e:6c:1e:26:e5:ad:23:05:f7:9c:03:aa:19:93:6d:
21:53:3c:9c:c5:49:64:09:fd:de:04:08:b9:75:f8:
9c:fd:08:85:8c:f3:68:48:f3:22:fc:35:c5:3f:8f:
b5:bf:38:b7:83:6c:e6:4d:70:be:8c:09:a4:77:87:
bd:ec:3c:c3:be:df:54:bf:4d:d7:8e:c9:d0:19:14:
f3:28:c8:39:1c:80:3b:c9:89:71:89:43:6d:de:fb:
39:93:fa:8f:38:fb:ae:00:78:29:4e:0e:dd:30:41:
75:3a:26:82:ac:47:02:86:11:a4:10:d7:cc:a1:d6:
91:34:b0:49:c5:45:39:81:77:8d:ba:5d:ff:40:df:
4d:87:b4:c3:f1:19:56:b4:2c:18:4a:5b:3f:ce:8a:
64:b9:20:f9:d5:64:0e:38:5e:e0:6c:ba:72:26:ad:
4d:6c:65:0c:5f:91:be:76:d4:5b:dc:10:08:28:c9:
9e:6e:e6:63:67:8e:6a:f9:0e:f7:6d:5b:e8:ed:7d:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9F:3F:D1:D9:9A:5B:02:33:99:13:35:24:A4:1B:07:A6:CE:A6:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/14c060b8-b340-3103-93a6-e36d287abeb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
139.5.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:18:c1:3f:d9:c6:db:5d:c2:6a:88:61:54:ba:12:25:44:85:
a7:fa:49:fd:88:2b:b3:21:ba:ac:92:52:51:3f:be:b8:20:05:
28:48:5c:ce:5c:ab:47:ce:5e:9d:8d:ee:97:b2:2e:b2:7c:a9:
1b:e0:18:cd:dd:eb:53:50:a6:8f:52:8d:ed:56:9d:4a:56:17:
68:a6:62:a7:e0:95:d9:28:ad:ad:14:e5:dd:c2:84:be:e6:e2:
1e:91:ed:52:ec:be:bd:ff:4f:58:f1:c9:c0:f5:0a:ab:5b:2a:
74:fb:43:69:2f:6c:7d:ae:5d:23:36:7d:f9:6f:a7:d2:15:ef:
a1:07:3d:04:12:37:1e:24:6d:91:25:61:e0:ff:96:23:19:1a:
3a:73:58:cd:18:22:ca:01:3c:a9:11:08:2c:d4:95:f6:b2:81:
e0:67:cf:94:77:6d:9e:09:90:2a:69:25:df:c9:1a:d5:20:b4:
f7:65:95:59:14:60:a2:7d:4e:03:e7:b2:07:18:23:ff:2f:29:
d2:15:31:9e:df:4f:af:50:6c:29:30:4e:85:d2:bd:95:54:8e:
3a:dc:6d:e4:67:c6:49:8c:03:80:1d:09:75:8f:ee:74:a5:ad:
47:15:a2:44:22:95:96:e7:89:0c:fa:44:24:2e:29:d3:ef:7b:
df:cd:db:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 14:03:38 2024 by rpki-client on console-ams.rpki-client.org