Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/88dedbfc-f319-34d3-9a3b-7831a270bcaf.roa
File: 88dedbfc-f319-34d3-9a3b-7831a270bcaf.roa (raw, json)
Hash identifier: wGweZ3hJ1vVxLRWy2udtkXSWrX0K/i5+XsYCFkg9svQ=
Subject key identifier: 7E:86:79:6F:37:E6:1E:D5:B4:87:63:AE:91:81:25:89:8B:A2:E0:61
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F43285847DFDA3C4B6D03149E454A9F00
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/88dedbfc-f319-34d3-9a3b-7831a270bcaf.roa
Signing time: Thu 14 Nov 2024 07:44:56 +0000
ROA not before: Thu 14 Nov 2024 07:44:56 +0000
ROA not after: Wed 12 Feb 2025 07:44:56 +0000
asID: 396982
IP address blocks: 199.249.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 04:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:df:da:3c:4b:6d:03:14:9e:45:4a:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Nov 14 07:44:56 2024 GMT
Not After : Feb 12 07:44:56 2025 GMT
Subject: CN=b58a80e2-e1ca-4ca2-82ea-53a671fe1b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4f:98:93:a2:f5:f6:98:78:3f:0d:35:1e:37:
0b:c5:4f:07:8d:17:30:7c:1b:5f:e7:65:0e:f1:f6:
cf:0a:80:82:8e:cf:32:da:c7:f6:98:29:49:d6:37:
7b:37:26:fe:86:f2:64:e0:0a:23:a4:c9:2d:0a:39:
55:a6:0f:42:1b:42:e1:0b:2b:06:52:19:29:a0:7f:
8c:5f:a3:7c:1c:49:2e:b2:f1:64:09:9d:cc:44:7b:
14:d0:fb:35:f1:e3:7b:8f:ec:43:8a:cb:08:a3:c7:
40:a6:b7:ab:3b:2c:43:60:2a:f9:5d:50:e0:ac:7f:
c8:21:47:b4:52:f1:46:de:37:f5:90:60:88:9d:38:
4b:91:f1:65:de:f8:e7:6e:4d:ac:f6:27:43:cc:f5:
22:63:b9:1c:42:04:8d:61:f8:7c:c5:8f:2c:9d:fb:
d5:39:af:a6:e1:ef:1d:fb:03:e2:9e:5b:c4:a1:d9:
e0:29:d7:86:67:cf:a7:59:42:5b:f8:93:d1:de:c3:
81:12:88:d4:fb:78:0d:e1:f6:1b:d0:4f:35:15:f3:
7d:cb:4e:3e:8d:e3:fd:c7:b3:7f:85:93:5f:56:33:
c7:32:53:5a:e3:d4:4f:f7:25:77:70:9c:99:18:0f:
3a:c0:46:b4:16:50:d6:30:d3:a0:b5:cd:a6:4d:d7:
a6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:86:79:6F:37:E6:1E:D5:B4:87:63:AE:91:81:25:89:8B:A2:E0:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/88dedbfc-f319-34d3-9a3b-7831a270bcaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:61:3e:5d:4f:5f:54:17:3f:4a:87:ba:0a:2e:5a:3d:8f:49:
fa:49:7a:05:a0:e0:31:14:82:6f:d9:d7:02:71:4f:6a:85:ea:
9a:7c:18:1c:fc:11:34:2e:9b:64:be:bb:c4:a4:32:fd:a2:8a:
d8:ff:a9:63:71:76:68:13:91:04:89:45:fb:4f:c5:fe:10:0d:
03:9e:23:7b:54:ed:d3:e6:6a:4f:af:ce:1c:71:bc:30:3b:72:
26:d9:88:9e:0c:9e:85:6b:a5:3a:13:46:a6:3c:21:28:60:6a:
5a:06:c8:5c:72:50:be:8d:2d:11:f1:09:52:4f:93:69:64:f3:
f1:64:d9:e8:e6:bc:56:9e:0f:54:0e:87:9d:ca:92:f3:55:38:
fa:be:dd:db:ed:c1:7c:f1:39:92:ed:7c:3b:89:1a:18:e7:9c:
5f:51:d3:3a:01:6d:b3:4d:1b:71:4c:ba:6d:94:54:99:55:2a:
c4:ae:5a:1e:4c:b3:6c:f6:37:e3:61:40:84:03:85:d5:4a:d5:
ff:9f:29:88:4f:5a:f7:a8:29:f9:2b:c5:01:44:bb:06:96:d9:
b7:d1:02:4b:51:f3:3a:24:ec:ab:da:34:b9:95:b4:cc:04:a8:
8d:97:a8:2c:35:a6:a9:1d:6f:a1:52:50:30:79:04:e4:31:d2:
a8:b2:51:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 07:12:12 2024 by rpki-client on console-ams.rpki-client.org