Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/c736f540-5081-3c12-853d-3d2b43a0798b.roa
File: c736f540-5081-3c12-853d-3d2b43a0798b.roa (raw, json)
Hash identifier: i+lVDYEi30LohMs+Ca0w46Duso28pyV1lCkb0S+/xBk=
Subject key identifier: 0E:7B:C4:32:8D:52:38:8B:03:00:E4:9A:B4:33:D1:C0:32:8D:8C:44
Certificate issuer: /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Certificate serial: 010D0C9F43285842BAC3E9F3F8BE41CE8C904740
Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/c736f540-5081-3c12-853d-3d2b43a0798b.roa
Signing time: Mon 31 Jul 2023 13:00:18 +0000
ROA not before: Mon 31 Jul 2023 13:00:18 +0000
ROA not after: Sun 29 Oct 2023 13:00:18 +0000
asID: 393429
IP address blocks: 216.127.221.0/24 maxlen: 24
216.127.222.0/24 maxlen: 24
216.127.219.0/24 maxlen: 24
216.127.223.0/24 maxlen: 24
216.127.220.0/24 maxlen: 24
139.60.8.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ba:c3:e9:f3:f8:be:41:ce:8c:90:47:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Validity
Not Before: Jul 31 13:00:18 2023 GMT
Not After : Oct 29 13:00:18 2023 GMT
Subject: CN=5ce2d5ae-0d77-4b61-81f9-97837da41ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:0d:55:dd:73:ab:5f:0a:c1:5d:05:6c:b3:
53:fd:96:be:b8:aa:fd:51:b6:05:99:23:c9:7d:73:
0f:99:f0:37:59:51:12:ca:02:ad:14:44:4c:45:69:
76:66:aa:ff:f2:25:3f:f8:ba:61:72:65:e2:07:78:
0a:ec:86:c0:b1:e7:fb:a8:49:6e:b1:3c:a0:5d:99:
38:4a:e9:66:de:85:98:fc:a2:24:a4:dc:fd:3e:3a:
a3:70:b7:3c:43:35:ea:81:f6:bc:cc:75:97:31:9b:
8c:00:f7:22:c5:7d:4b:80:08:ea:33:52:17:d4:9b:
fb:66:13:3c:a8:6e:bf:56:b0:52:67:bc:62:d4:4a:
e4:33:f9:4e:b8:b8:91:ef:73:4d:04:59:6c:f3:f0:
dc:70:ba:99:55:a0:49:49:ec:f3:c0:88:91:bf:28:
b2:8f:f6:80:48:89:7b:c8:87:5b:5f:14:45:87:71:
c9:a0:d7:2f:e5:2c:8b:29:6f:ab:6c:c2:4e:53:01:
c7:ad:34:bf:0f:ce:62:e9:7d:d3:29:01:ba:ac:23:
a3:f6:0c:e1:3c:ba:17:e5:3c:ba:c5:bf:9d:cc:8b:
25:13:af:c8:10:e0:ce:9d:d3:b1:9c:a2:de:16:e3:
d4:76:e0:18:1a:a7:65:ac:18:1a:76:c6:23:35:94:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7B:C4:32:8D:52:38:8B:03:00:E4:9A:B4:33:D1:C0:32:8D:8C:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/c736f540-5081-3c12-853d-3d2b43a0798b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl
X509v3 Authority Key Identifier:
keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
sbgp-ipAddrBlock: critical
IPv4:
139.60.8.0/21
216.127.219.0-216.127.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:c7:ec:79:d9:2c:af:e4:c3:e1:f9:3c:4b:96:15:c3:d2:5d:
2c:67:2b:32:36:a5:11:39:a9:56:26:b2:c2:89:7e:3d:c4:e0:
f1:4a:f7:11:b5:05:29:98:10:72:f6:bf:55:32:3e:55:d6:b6:
df:f1:9f:90:1d:8d:80:c1:1d:41:a4:b9:b5:3d:5d:44:3c:39:
72:4d:ee:07:fc:af:77:07:3b:a4:f1:c3:68:05:f7:8e:a0:9c:
93:8e:d6:e8:66:ce:fd:3d:2f:6f:99:90:ed:27:37:3e:d0:1f:
49:df:7e:e0:a5:b6:9f:35:b4:bb:61:cd:b7:25:b3:fa:67:75:
1a:f1:fa:a8:3d:fa:0a:e4:ca:02:5b:c6:24:cb:43:66:0c:e4:
e5:51:24:5a:8c:f3:87:5a:e5:fe:de:f5:7c:97:b1:14:1f:b8:
ac:27:fe:9e:35:d7:a0:f2:54:f3:00:c7:f9:3a:e3:03:cd:7d:
9d:a3:a5:a3:73:cf:3f:fb:46:9c:7e:ce:b7:a6:70:ed:2b:dc:
36:87:fe:9f:e8:9f:92:23:0d:2e:ef:b4:7c:46:45:c4:18:80:
6b:67:a8:79:e4:45:5d:20:c6:20:3b:98:c4:1f:0a:b9:89:25:
fc:08:15:90:53:3a:ab:bc:ae:d6:6a:22:e6:0b:3e:e6:58:e1:
16:1a:86:1d
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 5 21:22:41 2023 by rpki-client on console-fra.rpki-client.org