Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/33431cfb-62a3-3dc2-a9a0-b5719db613a9.roa
File: 33431cfb-62a3-3dc2-a9a0-b5719db613a9.roa (raw, json)
Hash identifier: ly1JXIVzz7C9HxlH/zGZ/R8NWzAjyRrO9vvc8ZDdNRA=
Subject key identifier: 2C:DA:CF:AA:FA:4B:F2:3A:E4:0C:92:3F:ED:82:54:12:5F:AA:EB:D2
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F43285843D63E228414CA5E417F2FFF00
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/33431cfb-62a3-3dc2-a9a0-b5719db613a9.roa
Signing time: Fri 10 Nov 2023 02:00:15 +0000
ROA not before: Fri 10 Nov 2023 02:00:15 +0000
ROA not after: Thu 08 Feb 2024 02:00:15 +0000
asID: 55293
IP address blocks: 67.209.112.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d6:3e:22:84:14:ca:5e:41:7f:2f:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Nov 10 02:00:15 2023 GMT
Not After : Feb 8 02:00:15 2024 GMT
Subject: CN=ab732d96-5948-426d-a612-e81b2806455c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:a8:88:f8:ac:e3:8e:4a:52:53:df:54:00:
d3:b6:a7:57:4a:0d:66:be:84:a9:0b:75:52:39:06:
88:36:ec:51:93:32:95:e5:81:f5:8f:f6:14:2d:57:
bc:7d:5d:0c:fe:7c:d8:1e:1c:b2:9e:72:f0:ce:c6:
9e:e7:ee:99:20:bb:75:6d:72:44:91:cb:0d:82:5f:
dc:6b:ca:23:7b:c1:e0:b2:45:08:0d:ea:1a:6b:ee:
11:1a:6b:87:ab:6c:c5:87:ef:6c:61:0d:3a:b9:cc:
99:a6:74:b2:98:24:23:5a:51:29:d6:c5:30:e2:91:
ca:17:75:c0:04:eb:bd:ef:0d:80:1b:bf:23:39:e8:
92:9d:e6:d2:0c:cc:51:bd:ec:d3:4d:f9:78:a9:f1:
90:61:be:b0:4d:87:7d:13:96:1b:c8:ff:cb:1d:46:
54:7a:bd:53:21:6d:c0:57:ee:69:40:71:3b:b5:62:
b1:b5:43:af:1b:c5:bd:e5:84:82:95:e0:84:26:09:
3c:6b:cb:da:52:55:45:8a:b9:be:e1:98:fc:38:86:
a4:a3:ec:2a:39:81:64:9f:0d:ec:93:e6:6c:ef:f4:
89:2a:76:12:8a:e7:3c:bd:32:35:0d:82:91:3d:5c:
61:cc:80:66:ac:03:c7:ef:ba:a6:4b:32:36:ab:17:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DA:CF:AA:FA:4B:F2:3A:E4:0C:92:3F:ED:82:54:12:5F:AA:EB:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/33431cfb-62a3-3dc2-a9a0-b5719db613a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
67.209.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:0d:0a:1e:3d:fd:30:b1:6f:22:58:85:d9:07:80:18:e2:bf:
27:5d:1a:1d:a3:ce:74:5d:07:de:81:56:e3:4b:0a:df:0c:5c:
3f:48:ab:3b:a8:f0:6f:22:6d:c8:ac:b6:79:b3:0a:6f:17:6b:
c4:ef:13:23:41:4c:69:bd:07:89:6a:61:15:28:77:33:70:8c:
a0:a6:4e:1c:d1:5f:30:a7:33:74:c1:f1:63:6d:99:e6:cf:94:
ce:7d:de:25:2e:1a:03:f1:9e:b4:a1:a7:d2:f1:72:92:80:1b:
11:8f:4c:1c:da:35:9c:a5:56:bc:fb:77:c0:55:ab:6c:84:e0:
4e:84:13:9d:0a:6b:ba:73:9f:bd:bb:51:1b:bf:f8:f2:9c:36:
9b:a5:80:34:94:4c:32:e0:00:86:50:03:df:e4:b1:9c:15:1a:
cf:c9:c2:97:e5:19:bd:ec:c8:32:35:e4:96:c0:17:45:16:4e:
f1:dc:4c:17:e8:9b:43:85:b3:0d:4a:51:fe:54:0c:92:77:c5:
cb:72:b9:e9:d1:59:26:c1:d5:d7:fc:ae:7b:c4:d0:6b:98:2f:
f0:7e:75:2a:db:86:10:22:f4:b4:d8:84:1b:51:f0:ee:c9:4c:
4b:90:66:17:18:91:6a:61:4b:63:0e:16:c0:e8:9d:39:81:7d:
3d:72:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:44 2024 by rpki-client on console-fra.rpki-client.org