Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/946f85dc-08b8-3b9a-9187-2b4459123c6c.roa
File: 946f85dc-08b8-3b9a-9187-2b4459123c6c.roa (raw, json)
Hash identifier: t61FcABbKntk87fyjsWlMiHLC45y87iqevOomFQ0oYE=
Subject key identifier: 39:DF:52:5E:AD:FD:23:3E:3B:A2:5D:4D:9C:1F:F3:45:53:BD:3F:B8
Certificate issuer: /CN=3d21f741-fd91-4158-8853-7388dab3b3e3
Certificate serial: 010D0C9F4328583D47900086FC25219829E17D00
Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/946f85dc-08b8-3b9a-9187-2b4459123c6c.roa
Signing time: Fri 18 Mar 2022 04:00:00 +0000
ROA not before: Fri 18 Mar 2022 04:00:00 +0000
ROA not after: Thu 20 Jun 2024 04:00:00 +0000
asID: 53274
IP address blocks: 162.255.168.0/22 maxlen: 24
199.168.200.0/21 maxlen: 24
204.48.56.0/22 maxlen: 24
2602:ff8f::/36 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:47:90:00:86:fc:25:21:98:29:e1:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3
Validity
Not Before: Mar 18 04:00:00 2022 GMT
Not After : Jun 20 04:00:00 2024 GMT
Subject: CN=79d39734-9bca-4eb8-907e-ec5da3dc3370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:6c:a7:88:3f:25:29:90:ae:a9:c8:a1:68:
3f:39:9a:79:78:10:a0:37:39:0b:bd:83:06:9b:51:
ff:6d:80:96:73:b2:d1:76:d1:9e:b7:9d:0b:9b:f9:
e9:51:e7:18:92:67:49:a1:01:23:c7:0d:18:bb:9f:
03:d8:67:9f:9f:c3:db:a5:a6:05:33:3d:00:d0:bd:
23:fc:b9:3a:21:42:27:8e:01:b7:b9:82:88:51:fa:
7c:6d:25:b7:3f:a9:ae:81:7e:98:7d:bc:a9:1a:6f:
45:a8:8f:34:60:ea:4b:64:fd:3e:aa:4b:8f:d6:85:
07:f1:d4:1c:b1:cf:17:f0:16:09:a7:44:3e:22:3a:
2a:15:26:aa:26:e3:86:c5:f0:a2:33:9c:f3:21:2a:
3e:da:d2:ff:9b:34:ea:93:b0:1d:8a:33:a9:1b:3a:
d2:e9:c2:63:7c:36:e9:94:5c:80:34:0a:11:3a:e1:
40:65:70:d8:29:a7:98:a3:ac:96:e0:e9:1c:73:c8:
eb:50:d0:3c:ad:7f:98:4b:ef:56:4a:ed:38:63:18:
29:22:7d:29:ad:28:5e:29:27:d4:04:66:d9:ae:94:
a5:ef:a7:f2:f8:dc:89:57:8a:cf:b7:1d:f4:e9:df:
aa:68:8a:7d:5b:86:e4:71:7e:88:89:42:6d:20:b2:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DF:52:5E:AD:FD:23:3E:3B:A2:5D:4D:9C:1F:F3:45:53:BD:3F:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/946f85dc-08b8-3b9a-9187-2b4459123c6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl
X509v3 Authority Key Identifier:
keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer
sbgp-ipAddrBlock: critical
IPv4:
162.255.168.0/22
199.168.200.0/21
204.48.56.0/22
IPv6:
2602:ff8f::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:e1:de:15:af:a6:e5:de:ca:d4:4c:e0:f8:88:97:8c:ee:01:
58:87:73:2b:02:15:8a:a6:5b:46:0c:b8:48:1a:ef:8d:24:04:
39:cd:69:aa:e9:04:bf:12:46:7f:f1:3c:1c:9e:93:fd:3a:43:
16:f2:3c:fe:01:7e:33:d2:11:ac:23:9f:a5:63:70:91:82:e3:
f2:30:8a:95:6a:9f:d4:32:e5:b4:82:22:89:ea:8f:ca:d0:a3:
a1:7e:84:b2:3e:2a:b8:ed:d7:4b:19:51:a6:18:85:02:1f:75:
aa:f2:14:2c:c4:c9:3d:4b:dc:7f:b5:0c:d7:91:6a:14:43:03:
a7:a1:c1:d2:4d:ef:43:bb:20:7e:10:9f:c0:b6:dc:ad:6f:52:
a7:55:d5:55:67:ac:f9:8a:cd:04:3b:07:0c:bf:f9:02:d7:af:
9a:7d:ba:c6:1a:4d:1f:e9:ef:f1:35:66:0f:97:ac:a4:ed:87:
56:76:cb:3e:dc:05:cf:04:1b:51:4a:14:6b:0c:45:60:ed:8d:
d8:3d:78:01:44:7f:91:a5:14:d7:a1:c9:6f:8c:47:1e:b1:62:
24:ec:ed:69:1a:f6:48:5a:4b:92:a9:5d:35:df:bb:99:18:9e:
f9:67:dd:c6:79:76:f3:df:76:27:b6:28:52:eb:a5:91:a0:70:
8b:b9:05:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:27 2023 by rpki-client on console-ams.rpki-client.org