Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/6a94384f-9ed7-3b53-90d7-9e979c353867.roa
File: 6a94384f-9ed7-3b53-90d7-9e979c353867.roa (raw, json)
Hash identifier: qfQHGoSE49kFJjitJ+s1Khh1uL0Pc0bpmGS261M24K8=
Subject key identifier: 16:4E:52:25:6B:27:54:2F:10:F6:BA:DB:44:36:36:76:9C:F6:80:20
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F43285843D63E20EFAFAED06978C51100
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/6a94384f-9ed7-3b53-90d7-9e979c353867.roa
Signing time: Fri 10 Nov 2023 02:00:15 +0000
ROA not before: Fri 10 Nov 2023 02:00:15 +0000
ROA not after: Thu 08 Feb 2024 02:00:15 +0000
asID: 55293
IP address blocks: 103.72.76.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d6:3e:20:ef:af:ae:d0:69:78:c5:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Nov 10 02:00:15 2023 GMT
Not After : Feb 8 02:00:15 2024 GMT
Subject: CN=a183393d-e341-4ae0-9006-301802466e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:3c:e1:a5:cc:51:55:34:41:ef:aa:a5:44:
a9:90:36:97:59:66:8f:15:c6:7a:b9:45:b9:90:6d:
80:40:f2:1e:c0:24:0f:0b:10:0e:fc:68:3f:22:24:
06:57:a5:57:5e:c0:49:7d:61:0c:9e:da:61:de:63:
98:a2:cb:be:a9:d7:46:7a:52:04:2a:c0:6d:0b:33:
b8:83:ca:bf:89:5d:a2:08:45:d8:21:6f:17:80:b8:
0d:76:77:4b:79:8a:aa:79:17:8e:b6:d5:92:40:1d:
30:18:8a:32:84:90:3a:46:b4:c1:7c:95:63:df:f7:
cb:e1:b6:16:91:45:79:59:24:bd:33:31:08:b3:d2:
24:a9:a4:86:c2:e0:87:c2:05:71:48:af:37:f6:75:
c5:58:ca:d3:ce:1b:8c:b3:fe:b5:7a:f9:61:d3:09:
7c:04:30:a5:99:80:39:bd:21:41:3e:bb:a1:a5:b8:
79:90:11:6e:7a:1d:3a:0b:a7:10:28:94:16:a0:56:
44:22:1d:e6:d1:c7:7e:56:77:53:1d:7f:43:d7:43:
87:5a:4e:b7:a0:0b:b6:06:02:51:e3:8d:08:0f:fa:
82:5c:1f:fb:1c:70:ae:ea:dd:b6:04:67:f3:90:5f:
25:4a:92:56:53:62:04:b7:7b:9c:6f:61:ad:ed:73:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4E:52:25:6B:27:54:2F:10:F6:BA:DB:44:36:36:76:9C:F6:80:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/6a94384f-9ed7-3b53-90d7-9e979c353867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
103.72.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:20:66:00:4a:11:4a:fe:92:8e:9b:00:f1:fd:48:23:62:11:
74:ab:c7:ec:76:08:48:12:42:b0:6c:1e:eb:ee:08:19:9d:fc:
23:01:a0:fb:b4:20:5e:5c:4a:cb:38:84:f7:a7:df:a0:51:1c:
84:f3:d9:e6:26:1e:eb:62:39:c9:ee:59:01:bb:c0:30:28:ab:
0f:9a:a2:90:f5:5f:95:c0:66:8e:d1:51:a1:c9:0c:f8:f6:12:
c5:2a:ed:71:60:c6:ae:66:5b:b9:e3:3c:87:59:03:10:f1:b6:
85:07:1b:89:ba:19:b8:72:5a:ac:e5:df:fb:57:bf:ae:a3:b0:
5c:42:24:d2:bd:fe:35:b4:0f:0e:22:18:c0:da:af:d6:cd:4c:
09:92:0a:2e:7a:47:a0:45:8e:98:85:19:f8:4e:b9:2e:a2:ec:
35:90:46:d4:d9:b4:b7:b2:79:de:bc:e7:b9:ca:ee:f7:5f:c6:
b9:9d:47:c4:fb:eb:f2:ac:41:bc:12:23:12:0e:b5:a1:22:9f:
d7:d7:01:9b:7b:7b:1b:c7:91:7a:1f:da:8e:81:30:fa:89:8f:
1f:53:a9:71:4d:f1:db:94:48:dc:9f:5c:57:98:2d:92:c1:06:
32:30:f4:3c:d7:07:58:6a:35:c8:de:54:52:c2:34:ff:3f:1d:
9f:b7:7e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:17 2024 by rpki-client on console-ams.rpki-client.org