Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4f87522e-8bb5-371e-9403-314d002d0d3a.roa
File: 4f87522e-8bb5-371e-9403-314d002d0d3a.roa (raw, json)
Hash identifier: fI+NZBidO2Q88qFHzp5P/bsvhrail3zbthX5oMzgJMs=
Subject key identifier: 2F:2B:CF:8B:63:DC:01:EE:D1:5D:63:D7:C6:7A:17:D1:84:75:F0:68
Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial: 010D0C9F4328584138EAFB7AA69D653B13BDDC80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4f87522e-8bb5-371e-9403-314d002d0d3a.roa
Signing time: Tue 14 Mar 2023 12:00:00 +0000
ROA not before: Tue 14 Mar 2023 12:00:00 +0000
ROA not after: Mon 16 Jun 2025 04:00:00 +0000
asID: 36492
IP address blocks: 162.120.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:38:ea:fb:7a:a6:9d:65:3b:13:bd:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Validity
Not Before: Mar 14 12:00:00 2023 GMT
Not After : Jun 16 04:00:00 2025 GMT
Subject: CN=2e67fa27-0382-4a7b-b857-6f43b4dcaf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:95:f3:c1:c3:99:db:be:db:8e:05:36:67:
08:cd:b0:37:97:39:0e:6f:41:73:a4:1b:93:b7:97:
19:ad:db:b4:b2:4f:b4:d9:55:ff:38:7d:d0:9d:f9:
ff:a5:ec:8c:0f:80:5f:ae:27:ad:8e:bf:4a:08:b1:
07:06:e8:e2:8f:4f:b6:9a:fd:af:f3:e3:76:1e:e9:
de:d7:74:57:36:9d:53:76:8c:2a:db:51:20:a2:36:
73:b4:ad:2b:c0:a6:84:9c:42:0f:ac:05:30:df:75:
b4:64:c6:6e:f3:cd:e1:c2:6b:8d:19:33:3b:c1:f4:
9b:35:44:9c:b0:0d:42:4c:a5:10:6c:56:93:d6:47:
79:fc:a9:a6:f7:f6:8f:26:e9:4e:fe:21:ae:3a:f4:
1e:f9:fb:01:fd:73:09:f2:26:41:4a:06:37:97:3c:
f2:80:45:0a:1a:bb:4b:bd:0d:6b:d2:10:61:d9:29:
07:ca:78:f5:61:87:3a:82:3b:72:c8:b8:a2:d3:9a:
de:ae:0b:68:d9:7c:74:ca:30:f8:4a:ca:b0:d7:ce:
38:b0:57:0f:85:9f:17:31:f8:57:86:b5:36:37:aa:
85:31:fa:cb:9a:9c:74:5d:f2:f4:4e:60:e8:cf:9c:
20:b5:1a:8b:bf:14:78:d2:12:a3:13:e4:a6:c4:d2:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2B:CF:8B:63:DC:01:EE:D1:5D:63:D7:C6:7A:17:D1:84:75:F0:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4f87522e-8bb5-371e-9403-314d002d0d3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
X509v3 Authority Key Identifier:
keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
sbgp-ipAddrBlock: critical
IPv4:
162.120.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:94:43:8b:80:df:16:5d:7d:36:e3:e9:0a:ab:f7:39:f5:f6:
38:f5:67:7b:a1:a0:12:5e:d0:4c:d6:92:e1:cc:2c:c2:8d:d3:
07:45:4a:f5:90:4e:7d:0f:36:5a:4f:20:37:a0:46:e4:9d:cf:
e3:5a:c4:3f:90:8a:e8:aa:e5:48:49:8e:7c:45:3a:86:1a:96:
bd:d6:09:60:ce:6e:4a:00:1d:60:5e:28:3b:4e:b1:11:e1:73:
ff:48:5b:ad:75:13:b6:01:7f:50:9e:7f:0a:d1:d4:fa:ed:d5:
29:c6:be:ce:8a:87:38:4c:a7:f6:1d:14:cf:81:77:3b:2b:85:
78:af:fd:6e:01:6b:f4:d0:58:3d:e2:fb:d8:75:16:77:db:76:
71:0a:2e:72:28:bd:39:cb:e4:b4:93:db:c9:d0:a2:23:e0:e5:
85:27:0f:3c:0f:37:dc:26:3e:56:c1:7f:f1:63:3c:8e:cf:bc:
0c:3a:5a:3d:88:67:1d:7f:54:32:f7:c3:4e:c6:d4:35:46:9c:
27:1d:49:ce:63:e4:72:02:65:4c:0d:7d:2a:7e:7b:ba:f2:07:
7f:6e:cb:c9:ed:68:ff:77:8a:c2:08:9a:c2:55:6a:38:50:c2:
c8:06:12:24:25:c7:08:bf:55:17:cf:15:7f:5c:45:04:e7:cd:
b9:e6:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:26 2024 by rpki-client on console-ams.rpki-client.org