Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/49d23117-4406-3992-8a39-a5371dfa4ce2.roa
File: 49d23117-4406-3992-8a39-a5371dfa4ce2.roa (raw, json)
Hash identifier: 3+rwmrVX1hAPRdej4I+ASbNoClJA0ZyIESH6f3ttw8c=
Subject key identifier: 83:CE:4F:EB:0C:1C:CD:1D:0B:F0:EC:D7:6D:21:7F:4B:16:6E:83:72
Certificate issuer: /CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9
Certificate serial: 010D0C9F43285844219E92DE06A0B1478BA45680
Authority key identifier: 07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/49d23117-4406-3992-8a39-a5371dfa4ce2.roa
Signing time: Thu 07 Dec 2023 02:00:17 +0000
ROA not before: Thu 07 Dec 2023 02:00:17 +0000
ROA not after: Wed 06 Mar 2024 02:00:17 +0000
asID: 210632
IP address blocks: 45.42.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 08:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:21:9e:92:de:06:a0:b1:47:8b:a4:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9
Validity
Not Before: Dec 7 02:00:17 2023 GMT
Not After : Mar 6 02:00:17 2024 GMT
Subject: CN=02a5b01a-c5c2-4549-a5a9-374ba56eb433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:21:1a:c3:c5:3d:cb:1a:52:86:7c:cb:94:
f9:c5:23:8a:d8:c3:11:8d:38:a7:fe:37:da:3c:c7:
1c:cd:38:cb:0b:b1:2e:63:d4:a8:9c:45:ab:ab:e6:
b3:46:aa:48:09:2f:a4:64:f5:0b:f1:6c:1a:51:dd:
25:98:9d:b3:5b:aa:45:df:56:7f:f4:85:88:d8:b9:
d6:80:2c:2b:27:4d:fc:3c:77:d9:01:5c:a8:61:2f:
17:56:5c:22:90:ea:b2:0d:40:a1:7a:9b:09:1a:67:
63:ba:0a:2f:3d:8f:95:ae:a7:4e:da:b4:8f:b6:ff:
0d:75:38:f9:0d:0f:8e:e1:05:bb:48:b6:4c:8d:f1:
86:0b:86:f1:95:dd:58:a6:9e:3f:09:94:91:dd:a4:
c1:57:09:95:3b:52:33:51:ed:10:85:3d:40:9e:c3:
da:b4:f4:30:a2:f3:56:92:fd:03:d7:7a:55:d1:f3:
75:7e:0c:52:44:a5:ab:67:ef:f9:ae:01:bb:54:13:
99:40:36:b9:d2:ee:e7:d0:5b:38:5e:9e:da:36:c2:
ff:ee:30:32:b2:57:a6:00:f1:b9:49:44:d7:70:ae:
06:c7:e8:6e:b1:c5:ca:91:6b:ab:16:31:56:19:9c:
3c:7f:78:a6:64:1b:2f:bd:7b:bd:dd:71:e3:f2:4b:
f9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:4F:EB:0C:1C:CD:1D:0B:F0:EC:D7:6D:21:7F:4B:16:6E:83:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/49d23117-4406-3992-8a39-a5371dfa4ce2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl
X509v3 Authority Key Identifier:
keyid:07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:a8:bb:77:b4:df:ca:90:7e:5d:4a:33:66:2a:e8:ed:0f:f6:
6a:38:fe:e6:fa:41:cb:01:4f:54:ee:76:69:9e:3f:1f:21:fa:
b2:cd:b5:08:4e:14:a0:10:68:70:43:74:98:18:77:8c:6d:e1:
f1:2e:a1:1e:ba:63:db:d7:2e:a8:23:1e:b3:77:b7:08:20:f8:
06:25:91:6f:38:80:a3:8b:57:b5:6e:35:5f:14:3e:fc:f1:7f:
c4:13:e4:f7:df:7d:16:22:15:44:1b:28:40:92:bb:c2:1f:7f:
12:66:68:2a:84:d9:98:f7:0d:1d:65:76:c3:7a:a4:f3:ff:41:
d8:10:46:9d:78:34:2a:0d:ca:c2:bc:73:32:8e:13:64:f6:29:
bd:1d:0f:28:9b:52:37:0a:50:3b:4b:81:d0:57:5e:38:d3:04:
3a:51:d0:f0:93:1c:91:0f:6d:5f:b3:b2:93:0d:9f:72:c2:35:
8b:eb:b3:e2:17:e9:ba:7f:3a:4c:d8:74:a3:33:13:79:52:3f:
86:e2:04:37:f8:c1:72:59:bc:82:a3:76:1e:ec:02:22:99:27:
ff:f2:61:e2:75:d1:39:71:27:94:14:d2:ca:be:3e:89:9e:17:
f7:1d:56:49:a4:44:34:db:07:c3:5f:48:80:5c:07:d8:bc:b3:
f8:4f:4f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 12:41:45 2024 by rpki-client on console-fra.rpki-client.org