Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/ad73dcce-84d7-3f48-9c3d-16cd8cabe2f3.roa
File: ad73dcce-84d7-3f48-9c3d-16cd8cabe2f3.roa (raw, json)
Hash identifier: etuJzGHiXr6NjbPlKlWUG89eWlcoe4sklkXSoZVi7v4=
Subject key identifier: E6:3D:25:93:41:B6:95:91:63:8E:D1:A4:E8:87:7C:72:A2:BA:22:2B
Certificate issuer: /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial: 010D0C9F4328584787211378DF9E2FBCBD01E080
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/ad73dcce-84d7-3f48-9c3d-16cd8cabe2f3.roa
Signing time: Sun 13 Oct 2024 13:00:42 +0000
ROA not before: Sun 13 Oct 2024 13:00:42 +0000
ROA not after: Sat 11 Jan 2025 14:00:42 +0000
asID: 25795
IP address blocks: 174.136.96.0/20 maxlen: 24
206.125.168.0/21 maxlen: 24
206.162.240.0/23 maxlen: 24
206.162.242.0/24 maxlen: 24
208.79.88.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 00:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:87:21:13:78:df:9e:2f:bc:bd:01:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Validity
Not Before: Oct 13 13:00:42 2024 GMT
Not After : Jan 11 14:00:42 2025 GMT
Subject: CN=3fd7ab35-ca35-46f7-a9e6-92eaa03f0e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:e3:25:18:04:5c:50:f7:9a:23:33:6a:ff:
c4:7a:ef:81:c6:78:26:72:7e:a5:83:8a:3c:1f:86:
53:34:b0:15:ba:64:3e:c4:74:c9:30:1f:e8:af:87:
6a:7d:56:47:86:3c:0e:91:f6:11:82:d5:a3:40:13:
62:23:af:6d:97:26:2d:61:8e:93:86:57:02:6e:d6:
0f:44:3d:f5:23:6f:f3:88:43:d7:cc:b7:40:71:59:
7e:d8:09:d4:86:ff:8b:3b:12:db:37:be:2b:f8:e3:
6e:e7:6e:9a:77:69:07:34:76:d2:47:c5:96:f7:0d:
f4:27:b4:19:d8:fc:a0:65:7e:91:c8:dc:47:28:cb:
5f:9f:30:73:48:ad:35:9f:e5:f7:c6:5f:cb:1e:ff:
df:37:05:db:42:e0:4e:77:5c:db:a1:50:e3:14:1a:
34:fd:b2:54:47:d5:33:0c:30:48:01:e5:1a:9c:0d:
53:15:d2:8c:85:d1:65:80:93:c5:41:4b:80:1d:24:
50:0f:e0:72:8d:ab:7e:d1:c1:39:a5:3c:4e:e2:22:
46:f2:81:14:54:75:09:d9:46:ca:ae:c6:f9:24:c6:
e4:87:14:6b:1d:51:f0:ed:d8:1c:a1:d6:32:e3:1f:
76:5e:52:df:b6:2a:7f:68:48:ca:27:d6:3e:4a:55:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3D:25:93:41:B6:95:91:63:8E:D1:A4:E8:87:7C:72:A2:BA:22:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/ad73dcce-84d7-3f48-9c3d-16cd8cabe2f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
X509v3 Authority Key Identifier:
keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
sbgp-ipAddrBlock: critical
IPv4:
174.136.96.0/20
206.125.168.0/21
206.162.240.0-206.162.242.255
208.79.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:3e:19:44:5e:a5:cd:65:57:e6:9a:2f:cf:5d:b9:6a:26:55:
63:16:d0:13:22:5f:70:a3:7b:9d:73:d7:46:09:f8:3e:62:28:
01:f1:0b:1d:9e:bc:85:1d:29:84:e7:c5:db:1a:67:30:8c:e1:
56:81:8f:3b:28:ea:6f:77:f7:b9:e3:91:c1:c7:92:50:9e:11:
fa:81:a5:c8:43:9f:47:37:a1:f0:c7:92:f4:30:ae:f7:e9:ee:
e9:8e:ce:ff:15:5d:f1:d8:5a:8e:be:7a:ed:03:30:7f:a6:9f:
39:bd:75:44:be:d6:0d:12:22:aa:2d:b8:77:16:46:d7:57:23:
1a:50:6b:dc:5a:86:9f:9f:ff:62:c9:1f:a3:94:ec:f9:8f:98:
df:02:4a:58:de:44:c3:2d:3b:17:c2:a7:c3:11:1c:2d:f2:ba:
8f:30:01:48:0d:87:67:db:e4:16:f4:3e:9b:2c:bd:fa:41:22:
f0:68:0e:ac:96:81:13:cb:7f:09:28:da:68:68:71:ce:1c:13:
8e:e9:c0:8f:4f:ff:c5:75:16:69:c3:a0:0b:bb:c1:55:6c:74:
96:56:43:93:1f:a8:ec:c2:a5:4a:f6:25:73:bc:d8:4e:72:e4:
d5:fe:38:12:79:50:48:e3:69:a2:81:5b:4d:51:69:b0:9b:64:
dc:c8:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 05:35:58 2024 by rpki-client on console-fra.rpki-client.org