Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f5cbf7af-3c13-3f13-8fed-7945b531f22b.roa
File: f5cbf7af-3c13-3f13-8fed-7945b531f22b.roa (raw, json)
Hash identifier: tGisFcGIyV7LZnbxEXp9/Ya3hydgheAACxMvr77wRw0=
Subject key identifier: B7:2B:1E:5E:E0:EC:32:28:44:CB:41:FF:5A:48:A8:EB:61:B8:F4:B8
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F4328583DA424A59B4100CC0976C705D0
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f5cbf7af-3c13-3f13-8fed-7945b531f22b.roa
Signing time: Fri 11 Jun 2021 18:59:09 +0000
ROA not before: Fri 11 Jun 2021 18:59:09 +0000
ROA not after: Tue 23 Jul 2024 04:00:00 +0000
asID: 23470
IP address blocks: 107.150.3.0/24 maxlen: 24
204.152.221.0/24 maxlen: 24
155.94.172.0/24 maxlen: 24
192.161.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Apr 2022 20:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a4:24:a5:9b:41:00:cc:09:76:c7:05:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jun 11 18:59:09 2021 GMT
Not After : Jul 23 04:00:00 2024 GMT
Subject: CN=afa815bf-e143-4716-b7af-444c03b2404c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:8d:ae:f0:bc:a0:33:47:43:bf:2b:3a:29:
80:b3:cc:f2:77:a3:83:06:d7:5d:ff:3d:4b:3d:83:
25:5d:84:6e:42:70:5d:fa:84:f2:e2:d0:ff:b4:13:
91:8d:d9:8b:39:43:b8:da:0a:de:35:7e:5b:21:97:
af:1b:c8:e2:04:2a:74:77:18:33:9d:c4:7d:5b:27:
f4:a6:b0:4b:50:e1:67:05:7b:5d:d3:b5:dd:0f:06:
66:d1:aa:8d:01:83:34:fb:d2:c8:65:24:24:12:0e:
d4:1a:f0:17:bb:fc:06:bb:5b:d5:92:8e:7f:41:07:
33:5a:b5:d9:79:d6:58:5c:1b:39:3d:c7:88:70:4a:
12:01:97:c1:b9:f5:82:6a:33:66:d4:c8:43:e0:f8:
f1:82:fe:59:6c:7e:b8:ab:4f:4c:fd:c2:b0:4c:90:
af:d7:2d:a0:a8:4a:e9:b6:a9:b2:24:c0:ec:dc:3a:
ed:09:e6:62:fe:28:77:d9:c0:df:17:0e:8e:e7:35:
fe:70:51:fe:49:3d:2b:f3:98:d6:a8:b0:e5:79:bf:
c1:76:77:64:fb:39:24:f4:62:d5:48:9b:e8:6a:dd:
18:f0:76:9c:73:5f:e0:1f:21:6a:38:37:01:e6:23:
a6:7c:a5:08:4f:8c:66:df:5e:e0:35:ce:d5:be:72:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2B:1E:5E:E0:EC:32:28:44:CB:41:FF:5A:48:A8:EB:61:B8:F4:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f5cbf7af-3c13-3f13-8fed-7945b531f22b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
107.150.3.0/24
155.94.172.0/24
192.161.170.0/24
204.152.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:58:08:e6:ba:62:f4:bb:35:82:75:95:61:ca:0e:99:5b:be:
03:6a:30:39:73:23:07:b6:c8:e2:28:76:78:a7:0d:31:30:4e:
e9:78:b8:55:d1:5f:44:cc:da:d1:ac:bc:63:09:3b:32:b6:b0:
86:15:6c:3b:36:d2:0f:4a:d1:a1:79:d2:01:f1:8b:dd:80:f3:
5b:e2:a8:10:f9:95:5d:37:f1:e2:5f:89:87:26:db:00:76:4f:
b6:ec:e5:3e:79:9f:5f:01:91:94:c2:78:89:fa:d8:ae:84:29:
a0:6f:61:eb:b5:29:2c:4e:fc:62:b5:88:fa:cb:04:12:9f:e7:
ac:bc:f3:f9:2c:80:77:3b:d8:fd:53:fe:9f:fb:e0:56:2d:4e:
cf:bc:fc:b6:7c:59:c1:d5:31:66:96:df:c2:47:52:4d:b4:d6:
60:75:43:e1:1e:1c:3d:e5:cd:c7:dd:d8:c7:43:73:8b:b6:a5:
f6:af:3e:88:62:6a:2e:e7:f8:e3:b3:a0:15:85:ec:36:41:ce:
49:1b:21:7c:de:20:06:7a:3d:8e:4d:17:f7:c0:91:9e:c5:77:
33:bc:77:6c:ed:e6:fa:73:fb:8c:82:b2:18:52:9b:61:3e:2c:
e7:51:2c:cf:a0:a6:36:b4:d8:9a:6b:5b:b3:5e:2e:0d:76:c6:
c5:75:58:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:25 2024 by rpki-client on console-ams.rpki-client.org