Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7df1af36-5b3c-3ec5-a68b-88d3dec2b718.roa
File: 7df1af36-5b3c-3ec5-a68b-88d3dec2b718.roa (raw, json)
Hash identifier: gV1t+7ijvX/Mm7hfMl3ydN0XER1Rn2htgT5rNevvyKY=
Subject key identifier: AB:EE:E7:73:5F:98:9A:09:16:82:FB:7B:06:34:EB:95:18:28:47:09
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328583E0041ABF23601E7856E373F80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7df1af36-5b3c-3ec5-a68b-88d3dec2b718.roa
Signing time: Tue 18 May 2021 13:36:10 +0000
ROA not before: Tue 18 May 2021 13:36:10 +0000
ROA not after: Sun 25 Aug 2030 04:00:00 +0000
asID: 7029
IP address blocks: 172.98.188.0/24 maxlen: 24
172.98.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jan 2023 13:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:00:41:ab:f2:36:01:e7:85:6e:37:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: May 18 13:36:10 2021 GMT
Not After : Aug 25 04:00:00 2030 GMT
Subject: CN=63cd578d-e387-4b90-8325-45caea19b3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:d2:98:d3:42:19:e0:14:0c:a4:88:c2:45:
be:0a:44:dd:df:85:08:b9:1f:24:9c:a9:41:9e:8c:
0b:cc:3e:ff:c4:26:f9:88:72:b6:9c:58:3e:bf:dd:
2f:e5:25:e7:fe:8e:98:8c:8e:d5:84:b4:dd:9d:e4:
e6:28:b1:ed:e3:ac:a4:4f:1b:4a:55:c7:dd:2c:5c:
b0:5b:a0:f8:60:12:7e:07:35:1f:69:90:7a:84:04:
16:2b:05:98:10:3a:0b:82:f0:9d:61:81:43:2c:0e:
a9:62:07:3d:dc:0e:45:37:9c:8e:d2:d0:6a:a5:3f:
7a:4d:2a:d6:0a:0b:7e:ea:38:cd:53:39:a3:c5:14:
79:ee:b2:92:a8:8d:60:7d:42:5d:6e:9a:98:f1:6c:
6e:ad:d4:57:06:ec:31:1b:d7:88:b9:77:e1:27:40:
85:3b:55:79:12:3a:ba:8b:20:ad:22:7d:1f:f8:6c:
11:55:6e:bd:e1:5b:57:43:8e:94:55:d1:6c:e7:f7:
64:a1:1d:f9:84:4e:75:2f:7f:0c:66:76:39:80:3a:
a0:b7:0f:c4:a1:30:76:f6:11:17:f8:25:13:2a:3c:
a5:b7:10:f0:03:45:1c:f6:fb:02:57:ba:4b:7a:58:
de:eb:a1:5d:15:23:d5:6c:ff:23:a3:5e:2d:8f:c8:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EE:E7:73:5F:98:9A:09:16:82:FB:7B:06:34:EB:95:18:28:47:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7df1af36-5b3c-3ec5-a68b-88d3dec2b718.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.188.0/24
172.98.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:72:5a:57:e5:63:07:39:15:cd:c1:38:ed:f8:92:5c:d9:aa:
7b:be:94:38:b1:e0:1d:ac:2d:73:66:c5:85:6f:e5:10:0a:22:
ca:3c:50:46:33:98:c9:9b:62:68:8b:6f:ae:cb:a5:e5:ed:88:
fb:eb:1c:df:66:0a:e9:bb:a4:42:69:bf:57:93:d6:2e:37:7a:
73:47:40:75:59:b0:cd:e6:f3:9b:a9:c7:d2:cd:80:1d:19:97:
77:2f:ef:ea:f3:5a:59:5f:f6:78:ab:b8:d0:94:67:da:de:7e:
c3:fe:53:e1:05:0c:a8:9a:5f:0d:a1:53:ed:af:a0:ee:02:a5:
8f:ec:20:89:e9:3b:03:7b:ee:cc:96:94:e9:54:e6:7e:d1:cc:
9e:90:69:7b:f0:8f:39:27:b9:9b:a7:4d:83:0e:b5:c9:9e:22:
75:df:fd:bb:7d:3c:49:8b:a4:d8:a7:6c:39:98:2d:68:a5:48:
b5:59:03:5e:0a:77:57:c8:9a:4a:29:1d:4c:8d:7e:a6:5b:7a:
0b:f7:0e:c1:1b:1d:4d:ad:ec:13:13:4f:b8:91:95:80:20:b1:
a1:95:ab:3e:97:44:d8:2b:9e:89:79:d3:58:1c:22:7a:fb:b3:
59:a7:70:4e:cd:09:2e:07:f2:fa:f1:0b:ff:d0:e6:a2:22:12:
f3:9f:cb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:08 2024 by rpki-client on console-fra.rpki-client.org