Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/11eebf2f-1ae2-350a-9223-39d18b706b7f.roa
File: 11eebf2f-1ae2-350a-9223-39d18b706b7f.roa (raw, json)
Hash identifier: N4PZtapPLTWVgK5Ul8V1MbrW5ZPExRLZrhl+TZ/7054=
Subject key identifier: 33:03:46:82:2F:FC:19:54:2E:B4:A7:90:90:1D:B1:BA:8B:04:63:DE
Certificate issuer: /CN=53d3ef8c-8c56-4056-ba3f-9b8f638952cb
Certificate serial: 010D0C9F432858432799871A5A295EA1CE68F440
Authority key identifier: 38:11:5C:73:A8:6F:D6:66:4D:31:97:5D:5F:4A:40:F8:9B:90:6D:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/11eebf2f-1ae2-350a-9223-39d18b706b7f.roa
Signing time: Fri 08 Sep 2023 12:38:04 +0000
ROA not before: Fri 08 Sep 2023 12:38:04 +0000
ROA not after: Thu 07 Dec 2023 13:38:04 +0000
asID: 35913
IP address blocks: 172.98.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:27:99:87:1a:5a:29:5e:a1:ce:68:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d3ef8c-8c56-4056-ba3f-9b8f638952cb
Validity
Not Before: Sep 8 12:38:04 2023 GMT
Not After : Dec 7 13:38:04 2023 GMT
Subject: CN=3dc0f7fc-1fca-4565-b14a-91ae2e4a2902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:3f:96:1a:52:46:1a:c2:11:24:22:d0:3a:02:
30:a9:24:f9:e0:3a:c8:2d:89:89:33:9f:c0:c7:9b:
2d:9d:f5:f2:c5:a4:ae:d2:a2:4d:1a:7c:4d:a9:d3:
fd:a7:3d:52:36:8e:c2:69:27:d7:db:16:82:60:db:
56:d7:f8:64:b5:a1:3c:21:d9:3b:d4:6f:dc:91:26:
2f:d0:5c:87:5b:56:f0:7e:95:aa:ba:87:56:2d:15:
0e:db:a1:96:f8:fd:b7:50:b4:cc:cd:86:ee:84:4e:
b6:5c:3d:01:ae:42:48:20:35:28:7f:77:b7:f0:e1:
17:2c:02:62:c0:b1:94:d8:5d:eb:85:8f:88:09:5f:
16:d2:6e:62:bb:76:d2:f6:e9:55:d4:8b:16:b8:5f:
a8:08:dd:ce:03:0e:bd:e6:85:a6:b8:4d:c5:3e:2f:
20:49:8c:1e:83:86:5d:04:46:e3:49:5d:0d:61:82:
5c:94:82:00:aa:0a:13:e5:b0:89:41:6b:eb:66:3c:
64:17:9c:b9:ef:6e:dc:59:f1:76:95:8d:c0:7d:bd:
f7:74:ab:68:93:5c:eb:c2:33:4e:07:b1:f7:26:d1:
74:cd:70:30:58:60:47:d9:39:fe:44:5d:4c:76:fa:
bd:ca:63:5d:32:53:d9:bf:8f:db:a1:1f:c0:b0:35:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:03:46:82:2F:FC:19:54:2E:B4:A7:90:90:1D:B1:BA:8B:04:63:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/11eebf2f-1ae2-350a-9223-39d18b706b7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.crl
X509v3 Authority Key Identifier:
keyid:38:11:5C:73:A8:6F:D6:66:4D:31:97:5D:5F:4A:40:F8:9B:90:6D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:ea:28:f8:f4:5c:20:2b:3a:d5:bf:3e:ec:aa:1f:cb:f7:50:
f0:74:78:52:0f:13:b1:29:40:cd:a0:c1:03:80:fe:ef:72:86:
32:60:37:69:d6:f9:e1:bf:41:0b:14:57:f4:b5:e0:ea:83:b9:
7e:6e:79:19:84:9e:dd:97:3b:94:b0:75:d5:fc:bc:2a:4c:90:
20:96:75:f9:7e:b1:35:30:db:b8:79:f4:45:bd:5a:6b:48:0f:
44:b9:72:eb:3e:26:7d:e8:5a:8b:52:52:54:09:a5:a2:9d:ea:
3d:d7:1e:5c:f8:b0:cc:c9:6b:fa:2e:37:15:45:ea:bf:42:b9:
82:05:4c:41:a2:74:83:76:bc:1e:33:fe:80:5e:dc:36:e0:92:
74:82:b5:c0:82:d3:74:fc:f1:82:60:d4:9a:3b:6e:16:44:f5:
2d:6a:5d:13:41:9d:2c:46:bd:6b:0f:6d:33:3a:ec:b4:38:95:
32:c4:4c:cb:be:7b:30:8f:c5:e4:bf:29:e8:73:50:60:5f:fb:
94:82:f0:22:fe:45:00:49:0f:50:21:74:74:53:cb:6a:09:a0:
f4:b6:ba:4e:66:91:c1:78:30:9a:b7:c0:8f:c5:a3:58:44:b3:
89:b3:d9:5c:23:f2:18:24:0a:fb:33:85:65:f3:a8:6b:91:da:
b7:d4:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 17:38:19 2023 by rpki-client on console-fra.rpki-client.org