Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1/309d1e22-7628-3f94-97ec-a69fe1be2a8a.roa
File: 309d1e22-7628-3f94-97ec-a69fe1be2a8a.roa (raw, json)
Hash identifier: cbkEql3sC3p2fU3KBVleIEv39odx4yUrQB0U/sNEYvg=
Subject key identifier: D2:12:7F:50:E7:9F:08:15:5A:04:20:4B:EC:CD:29:90:32:FE:5B:40
Certificate issuer: /CN=b9176e2a-57c3-493e-acd0-2507f77918d1
Certificate serial: 010D0C9F4328584542B91FC577BED186E86AC480
Authority key identifier: 31:F7:86:5A:8B:81:14:FA:25:4F:84:22:C3:6F:E2:81:5A:3B:58:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1/309d1e22-7628-3f94-97ec-a69fe1be2a8a.roa
Signing time: Tue 19 Mar 2024 15:22:26 +0000
ROA not before: Tue 19 Mar 2024 15:22:26 +0000
ROA not after: Mon 17 Jun 2024 15:22:26 +0000
asID: 7029
IP address blocks: 23.156.112.0/24 maxlen: 24
136.175.100.0/24 maxlen: 24
136.175.101.0/24 maxlen: 24
136.175.102.0/24 maxlen: 24
136.175.103.0/24 maxlen: 24
136.175.100.0/22 maxlen: 22
2605:c240::/28 maxlen: 28
Validation: Failed, certificate revoked on Tue 19 Mar 2024 18:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:42:b9:1f:c5:77:be:d1:86:e8:6a:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9176e2a-57c3-493e-acd0-2507f77918d1
Validity
Not Before: Mar 19 15:22:26 2024 GMT
Not After : Jun 17 15:22:26 2024 GMT
Subject: CN=f708d3ed-dc70-4f16-8f8d-d8210ec0e1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6c:26:25:e8:02:8a:2b:f4:82:b8:2d:ca:8e:
dd:28:32:94:71:96:f9:4b:28:fa:fe:96:c6:76:23:
f3:e3:02:67:f2:ef:e7:b0:31:b9:2f:6c:64:86:db:
53:a7:f1:3f:1b:bb:92:57:c2:f3:24:5e:5a:d9:28:
95:7a:97:c2:e7:13:24:e0:44:4a:cf:52:c2:46:dc:
83:af:8d:6d:98:fd:7c:7c:5a:a3:20:04:c3:7f:7d:
3e:a5:f9:80:93:5e:13:72:1c:3f:12:95:7c:ad:2d:
0c:74:48:09:3c:fb:e5:d6:d5:09:88:2f:3a:51:43:
50:08:79:d8:a1:35:98:4b:39:0c:31:ac:61:a8:8a:
c0:63:9a:4e:78:32:e1:5c:66:08:e8:49:c8:f1:68:
b9:c7:0e:14:52:bd:04:1a:0b:b1:37:ea:59:78:65:
fb:7d:d4:9f:8f:24:57:1f:7d:f0:89:00:fc:e6:6f:
df:d7:55:2f:b2:6e:a0:3c:9e:97:7a:00:d1:9d:a3:
38:6c:3c:0c:f0:53:58:0c:6f:85:48:43:49:66:bb:
0f:62:d6:99:5c:a5:33:71:22:56:e8:dd:6f:cd:5e:
f1:dc:40:b7:53:ab:35:63:02:64:94:5f:ac:1c:9b:
ba:af:34:f2:48:da:b2:fb:e9:4c:bb:ee:17:c5:3a:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:12:7F:50:E7:9F:08:15:5A:04:20:4B:EC:CD:29:90:32:FE:5B:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1/309d1e22-7628-3f94-97ec-a69fe1be2a8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1/b9176e2a-57c3-493e-acd0-2507f77918d1.crl
X509v3 Authority Key Identifier:
keyid:31:F7:86:5A:8B:81:14:FA:25:4F:84:22:C3:6F:E2:81:5A:3B:58:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.112.0/24
136.175.100.0/22
IPv6:
2605:c240::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:44:dc:0d:e7:89:c5:d9:37:88:ae:14:c9:32:8e:d3:34:1b:
39:21:14:f7:ed:62:b9:da:2a:3e:1c:c5:1c:c5:46:6a:04:20:
64:9f:90:3b:5e:36:9a:57:dc:47:d7:33:83:62:cd:a8:12:df:
21:1d:7f:19:27:61:43:52:18:8e:92:dc:ed:20:01:93:9e:ca:
4a:09:dd:a3:b9:da:53:ac:6c:db:5f:d4:7a:96:55:60:01:73:
79:7f:70:40:f6:2b:eb:76:bd:1b:53:b1:c1:21:b5:94:cc:f8:
18:4e:c8:ae:75:7e:9d:57:8f:e2:7e:bf:91:a4:ba:2f:ea:37:
ea:72:00:c9:e7:15:a5:78:8b:a3:81:91:82:eb:5c:7a:27:07:
cb:49:48:ed:91:b1:dd:62:43:a7:f4:6f:fa:63:ba:10:5a:11:
49:ce:1e:06:43:c6:d5:c4:1f:e5:90:02:e6:d3:e3:b0:6b:eb:
43:67:00:b8:7e:ff:11:c7:f8:7c:c6:b5:e8:a7:69:a7:f0:24:
e3:2a:a3:05:d2:9f:cc:a3:bb:4b:4d:3d:f0:00:94:c5:ba:cf:
52:41:10:5b:54:ad:8b:21:e3:60:f1:98:5e:c8:77:49:7d:1a:
58:85:10:31:2b:75:d8:b3:db:84:61:ff:82:f2:bb:e4:b6:ac:
ec:ee:9e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 23:07:30 2024 by rpki-client on console-ams.rpki-client.org