Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/1a834bbe-202e-30a0-abb8-fbfa9027405d.roa
File: 1a834bbe-202e-30a0-abb8-fbfa9027405d.roa (raw, json)
Hash identifier: WGzZhQ0I8gAxdRcI/SqZH21+fDjc30eNIqDkI149sE4=
Subject key identifier: 96:65:4F:32:F4:12:5D:AD:24:31:48:9D:2B:5F:3E:14:73:C3:AE:5D
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F43285843D63E222C3FA96010FDF25500
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/1a834bbe-202e-30a0-abb8-fbfa9027405d.roa
Signing time: Fri 10 Nov 2023 02:00:15 +0000
ROA not before: Fri 10 Nov 2023 02:00:15 +0000
ROA not after: Thu 08 Feb 2024 02:00:15 +0000
asID: 55293
IP address blocks: 68.66.212.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d6:3e:22:2c:3f:a9:60:10:fd:f2:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Nov 10 02:00:15 2023 GMT
Not After : Feb 8 02:00:15 2024 GMT
Subject: CN=0ff5c814-b6d3-4e2f-bad5-fe103afdfdd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:86:4e:a3:e1:f6:dd:69:65:d9:ff:10:a2:
da:dd:24:57:43:37:5b:11:59:aa:48:e4:f0:fa:6f:
b0:4f:14:2c:e2:c5:f5:21:56:94:be:ca:c1:44:56:
74:05:31:f9:cf:14:a0:1b:a9:72:f8:ba:09:f6:47:
ea:e9:1c:99:6b:2c:45:e1:1c:f8:ae:ae:a1:16:3d:
90:8f:6e:ac:11:00:08:2a:93:f2:07:18:45:ff:f0:
c5:0c:89:fe:b8:b8:49:e5:a2:eb:df:2e:20:0e:1e:
b4:45:48:7a:47:3a:c2:68:7b:fc:4e:05:f0:36:bf:
ed:12:62:fb:39:d6:ed:98:24:cd:39:1f:7e:10:7d:
31:ce:1b:d0:18:0a:7e:da:38:76:f7:b0:de:d9:f1:
6f:4e:fa:f1:14:a9:39:ba:7d:f8:e7:a3:fb:3a:5b:
57:4b:7e:28:8c:94:b5:5b:f3:bf:32:fd:ac:51:1d:
9a:bc:06:62:a7:a9:fb:8d:01:68:75:5a:91:30:8a:
97:1c:92:a8:19:b2:7a:83:64:bc:c2:03:83:98:33:
14:7c:a9:0c:10:db:e8:2b:52:fa:8b:13:3a:3b:9b:
3d:d9:88:71:ed:36:70:ff:1c:2e:d1:38:3e:c5:16:
9c:20:ab:2a:27:0b:3d:82:e7:6f:ce:c9:d2:1e:3c:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:65:4F:32:F4:12:5D:AD:24:31:48:9D:2B:5F:3E:14:73:C3:AE:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/1a834bbe-202e-30a0-abb8-fbfa9027405d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
68.66.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:c6:28:a5:fa:ea:37:65:9e:74:63:eb:2a:0e:fa:84:0b:ce:
81:07:53:84:83:a1:55:83:37:ea:ed:b3:11:0e:fd:96:73:28:
3d:c4:84:91:49:eb:c3:66:92:ce:d2:6e:82:3b:45:a5:32:9f:
b3:34:93:59:e7:35:63:64:4a:59:1c:ef:35:74:1f:73:8b:a1:
da:1b:00:5a:9b:c7:9d:6c:6a:c5:fb:5a:72:1d:02:8c:04:5f:
4f:69:04:12:fb:dd:39:6e:d3:f0:eb:47:1a:6b:a4:e5:13:a4:
00:78:80:f9:5f:37:11:a2:46:12:b6:de:99:29:bf:db:0e:35:
31:09:79:43:9f:1a:b0:f6:b8:89:d3:c5:20:a1:63:60:07:d7:
6f:f8:f6:ad:b7:1c:0b:6b:ec:12:2d:1f:32:c2:0f:79:07:02:
c1:b0:4d:34:7d:8f:0b:d4:39:dd:1d:68:6b:01:22:ce:8d:17:
9b:df:fc:5d:d4:e3:ee:3e:e5:cf:ea:49:e8:f4:22:8c:98:93:
2e:51:b8:4b:57:c1:c1:d6:17:d6:f8:91:ef:52:32:7c:e1:6f:
2d:a0:c9:5a:a5:a5:bf:91:57:78:2f:3b:2f:32:b8:36:2f:75:
ba:fb:ae:d6:38:41:bc:47:f7:61:3d:f6:b6:ca:70:ab:6b:0a:
02:33:5d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:17 2024 by rpki-client on console-ams.rpki-client.org