Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/5600c4ea-7333-3f7e-b4a2-1be501d49820.roa
File: 5600c4ea-7333-3f7e-b4a2-1be501d49820.roa (raw, json)
Hash identifier: ImiyYTrMcpQOQ12WxMTQlzUi1ubkoZw2hqzndRCO+DA=
Subject key identifier: BA:28:40:AF:F1:9B:8E:4B:15:FD:F0:0F:C1:26:7B:26:90:31:2B:2F
Certificate issuer: /CN=93652d41-9632-44fb-89a2-b986954b6570
Certificate serial: 010D0C9F43285844AF0945F96D3D28856AADB480
Authority key identifier: 89:10:A5:9E:8E:2D:D6:8E:E7:2E:9D:F5:FB:F6:D1:34:2B:B8:DA:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/5600c4ea-7333-3f7e-b4a2-1be501d49820.roa
Signing time: Fri 26 Jan 2024 17:44:17 +0000
ROA not before: Fri 26 Jan 2024 17:44:17 +0000
ROA not after: Thu 25 Apr 2024 16:44:17 +0000
asID: 212238
IP address blocks: 45.45.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 19:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:af:09:45:f9:6d:3d:28:85:6a:ad:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93652d41-9632-44fb-89a2-b986954b6570
Validity
Not Before: Jan 26 17:44:17 2024 GMT
Not After : Apr 25 16:44:17 2024 GMT
Subject: CN=66c2628e-4351-43da-bf9b-5e5de4032e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:58:c3:d7:0d:19:26:2a:dd:56:9e:fb:40:a7:
15:00:31:90:86:75:57:5c:dc:32:6a:d4:fc:2c:cc:
76:50:57:90:88:be:84:f4:f0:64:10:99:68:3c:6b:
3a:e0:a0:7e:86:b0:b1:ab:4c:c9:84:cf:4d:81:63:
17:b7:64:53:5b:27:b7:37:4d:56:c8:6e:20:ef:83:
b8:5d:80:c9:21:b3:6f:58:c8:d0:8a:c6:f0:32:a3:
66:7c:14:d3:89:b3:2f:37:c7:9f:dd:ff:cc:5a:63:
af:b5:d3:43:56:2f:58:5d:9f:1f:80:45:ba:9c:c9:
ff:43:66:d7:5b:46:87:d7:45:be:94:41:94:ec:5a:
dc:5d:96:75:33:d6:46:8b:8b:90:0b:8d:18:7b:e7:
9a:77:bd:51:f6:74:ac:14:02:ef:62:3a:e6:e2:84:
61:ed:e7:f7:59:78:c1:af:82:ef:1a:2b:53:59:16:
21:16:c2:3b:9e:6c:85:f7:e0:03:88:ea:16:fb:40:
c6:3b:82:7b:49:81:0f:d4:08:77:a0:b2:10:c2:1c:
fa:de:e7:5b:5c:a6:ed:27:35:96:24:ca:9d:bc:b7:
1a:80:82:a2:24:a6:32:2a:f7:04:bf:6e:02:17:31:
61:ca:4b:a7:c7:6f:92:66:35:b5:13:b3:07:c5:43:
4b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:28:40:AF:F1:9B:8E:4B:15:FD:F0:0F:C1:26:7B:26:90:31:2B:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/5600c4ea-7333-3f7e-b4a2-1be501d49820.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/93652d41-9632-44fb-89a2-b986954b6570.crl
X509v3 Authority Key Identifier:
keyid:89:10:A5:9E:8E:2D:D6:8E:E7:2E:9D:F5:FB:F6:D1:34:2B:B8:DA:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:7b:b5:e9:82:34:aa:64:b8:3b:66:63:97:ec:d6:5f:0b:63:
d3:c8:0a:af:a9:c6:ae:1d:27:16:11:41:23:1b:8f:26:1c:e0:
69:c2:a0:23:e8:08:d7:12:cb:f1:45:c7:17:e4:a5:94:0c:df:
1a:84:17:81:dc:91:bd:8f:4c:10:21:85:e6:72:07:86:1c:da:
60:5f:cd:72:45:da:96:f1:c6:e5:14:30:39:02:88:cb:ca:4f:
e5:86:77:df:c2:02:3e:7b:fa:d9:6c:45:9d:4a:4a:d6:fb:22:
9f:59:97:52:64:13:69:34:4e:d6:93:d3:4b:05:ac:7d:72:59:
a9:c3:1f:b0:fe:ae:45:cd:02:a4:db:ed:67:67:13:ab:dd:0d:
c8:ce:3e:e9:22:9e:9a:41:c7:a5:dd:2d:f7:b0:fd:1a:0b:04:
7a:4e:c2:d4:c2:0c:6f:0e:b3:ad:99:56:7c:4f:aa:43:78:c2:
50:49:75:7f:6d:26:a9:e5:c5:64:29:46:53:6e:18:a5:eb:6c:
f9:6f:47:2e:78:97:88:8d:2b:c1:64:c2:45:d0:8c:d3:51:78:
a7:70:48:a9:fd:a8:6a:44:a1:eb:fd:c8:21:cf:35:34:c4:ae:
0a:9b:53:a9:e6:f7:16:6b:df:87:d3:87:55:a4:1a:a1:55:44:
c7:77:11:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 22:26:40 2024 by rpki-client on console-fra.rpki-client.org