Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3b02942b-b2a9-3b24-a2c7-5fb9542653a1.roa
File: 3b02942b-b2a9-3b24-a2c7-5fb9542653a1.roa (raw, json)
Hash identifier: R3Zyk+xhnzv5yyy/6wiCBZN96hgdUFpcYRJGoJgZg1s=
Subject key identifier: 31:57:68:DC:26:AD:F8:DF:49:C2:F9:FC:D3:E6:BE:9A:FB:4F:33:F7
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F43285843CDDE161283742E4A587C1110
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3b02942b-b2a9-3b24-a2c7-5fb9542653a1.roa
Signing time: Tue 07 Nov 2023 02:00:16 +0000
ROA not before: Tue 07 Nov 2023 02:00:16 +0000
ROA not after: Mon 05 Feb 2024 02:00:16 +0000
asID: 55293
IP address blocks: 200.69.20.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:cd:de:16:12:83:74:2e:4a:58:7c:11:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Nov 7 02:00:16 2023 GMT
Not After : Feb 5 02:00:16 2024 GMT
Subject: CN=d034259f-f37f-4b72-8ca6-e40e1df0c46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:22:2e:10:8c:5b:6e:4f:88:7b:e8:e7:f2:
fb:ef:e5:01:b9:57:1a:04:f2:55:42:14:00:bd:7a:
6e:60:78:2f:4f:5e:49:41:92:d4:fd:a7:9e:72:f2:
60:ef:11:bb:9d:9b:a5:cd:08:96:83:b8:ec:50:68:
55:01:64:dd:70:44:fa:74:e4:14:1f:8d:85:7b:a7:
01:6e:44:0c:d8:7d:0d:30:c1:91:a8:63:17:ab:5d:
d6:23:e5:05:55:0f:51:05:4b:bd:6f:a2:d0:d4:d2:
aa:29:39:68:e0:72:e5:a3:dc:bf:ca:d4:9f:3c:fe:
31:7b:a3:0a:13:f7:9a:2b:28:13:6b:eb:d8:37:04:
e5:21:0d:c2:5f:fb:10:b6:34:89:b4:cc:0a:1b:1d:
8a:08:b4:ad:1c:6f:1b:24:7b:09:bd:70:4a:db:12:
71:e5:1e:ea:d7:39:dc:c5:4e:cc:84:dc:81:eb:51:
66:ad:6f:f1:2c:c0:28:82:a0:7b:d4:35:c1:ee:b1:
4a:67:14:da:04:1e:70:1b:ce:97:df:6a:d9:21:6a:
a4:e4:1f:d3:35:13:95:6c:57:92:f6:2b:fc:7a:ee:
f1:9a:72:6d:97:f0:32:00:9e:3a:72:95:dd:4f:da:
a0:6d:41:14:5b:3d:5f:bf:0c:e5:15:6b:58:a6:15:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:57:68:DC:26:AD:F8:DF:49:C2:F9:FC:D3:E6:BE:9A:FB:4F:33:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3b02942b-b2a9-3b24-a2c7-5fb9542653a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
200.69.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:a6:ee:66:5b:3b:43:c0:6c:b6:d4:c5:59:cb:05:06:15:e5:
c5:2e:6f:43:0f:2b:8d:03:04:82:da:91:16:a8:8d:b3:c5:4d:
9e:c7:0f:c2:2f:94:25:96:24:61:86:9f:c0:49:2f:c5:3a:99:
37:da:95:50:aa:6c:39:6b:fc:f5:4d:02:9e:9d:80:ec:c2:c6:
08:d3:36:22:59:85:e1:1f:d0:ae:c2:3f:5d:09:65:2f:18:81:
10:0d:fa:96:73:c8:98:9b:11:ed:0e:3f:35:3a:e9:e8:14:81:
62:7d:ee:43:af:a6:d7:a8:06:b3:e3:b5:c1:21:8e:ca:64:22:
17:6c:88:4f:f2:ac:07:69:2c:88:93:da:ad:f0:19:99:66:9b:
fa:36:e7:22:0b:bd:b3:df:1d:f2:55:16:79:3d:de:db:ce:7f:
f6:d9:77:e1:18:8e:7c:6c:47:62:7e:82:fa:1f:e4:5f:63:10:
40:16:c3:27:eb:04:51:6b:3d:55:c4:5a:f2:bd:b8:ef:03:c6:
cb:c5:98:33:4c:e1:7b:2f:7e:ce:aa:52:59:6a:de:0b:12:95:
77:e0:e9:f3:4a:31:ae:4d:41:71:60:82:7d:71:b0:92:44:76:
3c:f1:63:23:4b:85:54:e7:57:3e:3e:eb:cc:0b:6b:22:10:5a:
1f:72:d0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:19 2024 by rpki-client on console-fra.rpki-client.org