Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/fd4a9a64-6a0b-3606-917b-dc0c69500c56.roa
File: fd4a9a64-6a0b-3606-917b-dc0c69500c56.roa (raw, json)
Hash identifier: 7Msq9CfJRh+qmJNgmEDEqPLbftNw0uNMKusn9gEsf4k=
Subject key identifier: AD:28:52:50:9C:E6:B8:47:DF:A7:E5:5E:E9:97:C9:C4:A2:81:F3:85
Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial: 010D0C9F4328584138EB5664A499D546A1F48720
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/fd4a9a64-6a0b-3606-917b-dc0c69500c56.roa
Signing time: Tue 14 Mar 2023 12:00:00 +0000
ROA not before: Tue 14 Mar 2023 12:00:00 +0000
ROA not after: Mon 16 Jun 2025 04:00:00 +0000
asID: 36492
IP address blocks: 162.120.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:38:eb:56:64:a4:99:d5:46:a1:f4:87:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Validity
Not Before: Mar 14 12:00:00 2023 GMT
Not After : Jun 16 04:00:00 2025 GMT
Subject: CN=4e051ea5-0690-4f50-b005-d54e3bde1490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:09:c9:ff:83:86:9d:47:44:8b:42:02:22:
cc:a6:75:0e:e1:d8:27:99:ac:5a:9f:af:6a:7b:a5:
59:cd:c5:5f:ee:a5:a5:1a:38:e1:5f:0c:99:3d:b1:
6f:a9:ff:7f:37:31:b0:5c:a9:a5:b4:f5:55:80:8e:
ce:99:95:39:dc:42:49:c6:36:59:78:a8:21:52:70:
9d:a5:b4:38:b6:4b:2e:cd:9d:de:85:de:d6:e0:9a:
f4:d4:da:b1:07:bb:ec:0f:22:bc:50:6f:b8:31:4a:
20:a7:ea:5b:c4:23:d4:43:23:1a:d6:33:e1:21:e2:
eb:2e:03:49:0d:ff:b7:4c:96:6b:c0:9e:52:e4:30:
3f:3b:fd:4e:dd:b1:5d:fd:41:91:ca:7a:b6:8b:84:
af:17:44:d0:b4:65:fc:a0:b3:2c:6f:3a:8d:af:57:
a8:a1:17:51:9e:ad:9b:61:bd:27:ee:86:89:a3:50:
0d:a0:dd:00:cf:92:54:f8:0d:46:ea:0c:d0:0d:06:
cd:99:dc:c3:06:ed:2b:bc:73:cf:6d:e9:fc:82:7f:
51:21:2a:63:bf:55:f6:82:f7:40:ac:97:94:f5:26:
11:ee:c7:6b:cd:28:fb:95:b6:2e:18:3f:19:14:b2:
22:52:c1:c6:0e:20:74:15:53:c0:89:4d:8d:bb:65:
7b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:28:52:50:9C:E6:B8:47:DF:A7:E5:5E:E9:97:C9:C4:A2:81:F3:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/fd4a9a64-6a0b-3606-917b-dc0c69500c56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
X509v3 Authority Key Identifier:
keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
sbgp-ipAddrBlock: critical
IPv4:
162.120.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:81:97:68:a2:7d:bd:5d:4f:71:65:23:2b:b6:73:9d:35:fc:
34:22:b5:92:77:58:17:dd:85:8a:3a:6e:87:ef:15:ca:cb:70:
93:db:81:1e:9c:45:21:75:c3:e3:cc:a2:4f:45:7e:34:64:ea:
c6:f4:f8:13:9e:27:40:92:72:f1:55:8d:5a:0e:24:8b:31:7b:
a5:30:bf:26:bb:01:b7:d9:82:13:16:85:ce:6c:61:74:45:be:
83:ae:11:31:7b:94:91:5f:78:d6:39:e0:75:9a:82:19:b2:09:
18:0c:1b:46:0a:78:44:c4:af:f2:26:e9:76:d1:f2:f3:14:79:
41:fd:81:32:42:4a:15:65:cc:f2:74:f0:5d:ec:fe:a2:d5:ee:
9d:93:71:8f:62:0e:b7:36:d2:74:e6:c2:25:8f:0e:04:e0:7e:
a6:af:54:3f:73:51:8d:b2:53:85:e3:cf:b7:76:50:9e:ed:86:
6d:2d:9f:59:ad:47:c6:4c:24:fc:f8:27:90:e2:bf:b3:4a:67:
30:84:bc:71:45:94:22:3f:3d:58:a5:90:c8:21:7d:84:8e:a8:
8d:54:ff:08:be:79:1e:92:d2:45:bd:43:79:62:57:7a:a8:b4:
0b:df:0a:26:f4:d4:e8:c8:de:de:1a:a6:4a:57:2d:42:ba:b6:
bd:91:6f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:26 2024 by rpki-client on console-ams.rpki-client.org