Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d2a74c35-5073-3915-a630-34ef6dd044d3.roa
File: d2a74c35-5073-3915-a630-34ef6dd044d3.roa (raw, json)
Hash identifier: pcPFYpNnY4KA+acfkoIoXwXiQbUo7GRa8rdy/0J9t38=
Subject key identifier: 88:A3:F0:C8:42:D2:EF:E0:CC:2A:6B:DA:16:15:F7:B4:AF:DB:39:3C
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858472B3F7D10219F741916783480
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d2a74c35-5073-3915-a630-34ef6dd044d3.roa
Signing time: Tue 10 Sep 2024 15:07:38 +0000
ROA not before: Tue 10 Sep 2024 15:07:38 +0000
ROA not after: Mon 09 Dec 2024 16:07:38 +0000
asID: 6900
IP address blocks: 199.42.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 14 Nov 2024 11:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:3f:7d:10:21:9f:74:19:16:78:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Sep 10 15:07:38 2024 GMT
Not After : Dec 9 16:07:38 2024 GMT
Subject: CN=30686e4d-77ea-4e71-8bb4-bf3216b08958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:fc:cd:89:f4:3c:41:b6:aa:7a:2d:c1:c7:
8b:d9:1e:5a:07:26:0d:53:7c:66:fd:3e:b1:ba:61:
39:56:fa:00:a3:01:62:fb:7b:3c:6e:d3:3c:b8:4d:
93:7a:a3:5f:b0:78:69:ba:44:0a:62:e7:a5:54:b4:
8b:60:ea:13:d0:16:ee:50:b1:58:5d:04:e3:d3:eb:
d1:2f:d2:05:af:88:a7:90:95:74:1a:9c:1f:9f:53:
a7:da:2f:e8:72:01:ab:ad:58:ab:bf:75:d9:1e:fe:
85:5a:47:ed:91:ca:b1:09:74:95:fd:25:2c:f1:e6:
43:64:1c:7a:a2:25:5d:6a:97:81:ca:5d:4e:b2:4c:
31:f2:48:61:72:f1:fb:a3:e1:55:ab:bd:a5:bd:5f:
4a:7e:7a:a2:23:1f:10:35:9e:62:f0:7b:ee:c4:d7:
d2:ba:7e:0b:24:5c:3a:0e:f3:a9:46:87:8b:b5:5b:
7e:c8:1e:08:10:67:56:d6:1f:82:82:ba:92:81:73:
4d:23:56:56:58:6f:4b:c6:a8:fe:29:51:88:ec:4b:
b7:62:32:e1:b5:09:92:b6:52:44:1a:d8:af:1a:24:
1b:66:c7:5c:8c:9a:ab:89:a5:11:83:5d:3b:ee:76:
6c:0a:41:ad:b0:32:db:30:c9:2c:3a:1a:f5:57:47:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A3:F0:C8:42:D2:EF:E0:CC:2A:6B:DA:16:15:F7:B4:AF:DB:39:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d2a74c35-5073-3915-a630-34ef6dd044d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
199.42.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:1b:ca:82:fe:39:ce:ea:0b:0a:09:4f:ca:34:c4:ac:f9:b3:
33:4a:b2:fc:66:68:71:70:3b:78:e4:85:e4:c1:8c:63:37:40:
c7:5c:f9:d1:6b:42:82:8b:1e:7f:90:b9:53:47:b9:c7:80:b0:
ef:81:6e:a2:a3:84:ad:da:ee:09:10:dc:60:6b:93:81:d9:1e:
60:ef:b4:a2:20:73:3f:cb:85:ff:38:5e:18:2b:b4:58:06:da:
1a:02:ee:95:46:8d:51:28:e6:2c:83:57:e4:d3:a3:52:f9:a2:
3f:73:9f:a2:21:9c:10:e6:55:b6:e2:25:18:b6:b6:88:7b:2d:
d4:56:4f:b1:f1:b9:8e:14:7a:a1:b3:28:c1:29:bc:7d:c8:bd:
27:c5:c3:6f:94:ea:de:4c:ec:5c:08:c5:8b:02:b0:00:45:c3:
87:04:32:d1:88:a9:79:51:fc:4c:6c:ee:bc:0e:51:9c:37:c3:
7c:ca:2e:1d:10:11:8e:e8:c1:fb:15:b3:34:bd:34:cc:80:a3:
ad:04:b2:ae:e0:3b:12:f9:10:48:d8:fc:6e:69:46:c1:10:81:
f3:2d:a8:70:13:ee:5e:2b:39:26:ce:7c:0e:15:67:dc:63:e3:
72:14:df:c7:a4:b7:42:df:a5:95:6d:bf:ee:a9:ce:fc:d6:eb:
02:c6:04:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 14:16:24 2024 by rpki-client on console-fra.rpki-client.org