Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8d7d733f-e610-3417-be6d-9159fb2179c9.roa
File: 8d7d733f-e610-3417-be6d-9159fb2179c9.roa (raw, json)
Hash identifier: zy+Ltjtgsor4dZAawRKlns6roPVtZ4g1klMXgWU0m5g=
Subject key identifier: E7:C8:E3:83:EC:78:D8:6C:B1:F1:59:2A:02:AE:02:B0:30:A9:DF:4C
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F43285843D63E21E311DB5D552F83B4C0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8d7d733f-e610-3417-be6d-9159fb2179c9.roa
Signing time: Fri 10 Nov 2023 02:00:15 +0000
ROA not before: Fri 10 Nov 2023 02:00:15 +0000
ROA not after: Thu 08 Feb 2024 02:00:15 +0000
asID: 55293
IP address blocks: 68.66.224.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d6:3e:21:e3:11:db:5d:55:2f:83:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Nov 10 02:00:15 2023 GMT
Not After : Feb 8 02:00:15 2024 GMT
Subject: CN=f0522d4e-1363-4477-9940-9778803ac7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:30:3e:93:a1:3f:72:ef:8c:41:0d:29:a3:
77:c9:b3:36:53:92:62:f5:6d:7d:2d:fd:7b:f1:c9:
ba:98:1e:a7:64:96:aa:a3:d7:43:02:c5:3a:87:bf:
c4:17:d4:6d:b0:ab:da:29:40:24:d9:f9:75:38:51:
83:40:cd:59:a5:c2:1c:50:6c:cf:42:fc:76:21:3f:
b1:6b:1a:10:6d:2e:7e:f7:b7:f3:d5:3c:fe:7f:82:
e2:f9:3f:03:42:e2:73:31:af:6d:11:ce:33:a8:f8:
62:36:a2:e1:66:ba:5c:06:b0:4c:b8:a7:13:b3:3f:
1b:26:ed:fe:ca:f3:0a:d7:9d:a5:08:a7:93:50:fa:
f3:ae:15:9a:71:d3:e2:02:53:9e:68:d8:a1:99:16:
9c:b6:06:f9:52:79:56:55:6e:d1:62:52:5f:84:b5:
8e:6d:4f:19:92:b3:55:c7:4b:45:9c:80:9f:7c:3a:
1d:84:b4:22:ef:00:a6:c7:d0:3f:1d:c3:ca:2c:30:
12:c6:db:c2:11:c4:b1:3b:7d:95:0e:2d:6a:c6:3b:
81:5d:b9:0e:98:c2:49:34:24:97:94:5c:a4:66:a6:
e8:0e:7a:fb:8b:8c:b6:c8:25:26:72:84:58:54:99:
d3:73:5d:87:2b:9f:e1:f2:51:6f:6c:d5:ac:06:12:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C8:E3:83:EC:78:D8:6C:B1:F1:59:2A:02:AE:02:B0:30:A9:DF:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8d7d733f-e610-3417-be6d-9159fb2179c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
68.66.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:be:dd:30:41:ed:ea:e9:f4:0e:77:a9:e0:ce:96:bc:7c:87:
30:19:f0:15:22:fa:72:5b:de:cb:fb:b5:bd:d5:f6:ec:e8:fa:
72:28:08:c5:af:b6:0c:6a:f1:8b:d1:46:a7:6e:1f:93:ec:e0:
82:c9:f8:ef:bf:28:c3:cc:7d:33:58:8b:90:8e:0f:0d:58:1b:
a3:92:8e:bd:09:f0:de:c6:b9:ec:db:db:b3:cc:05:e2:ba:7c:
59:4d:cd:c0:0c:94:71:e0:51:47:fb:2a:5c:5c:33:fe:e4:6d:
2e:2c:9a:b8:bb:8d:d0:51:d4:0d:bb:11:04:cd:d0:6d:81:ba:
77:81:d6:47:12:5f:42:e8:77:73:bf:49:0b:81:16:55:a6:22:
9c:6e:f3:e9:14:23:75:00:05:85:7f:0f:a2:ce:6a:c7:03:b1:
4b:1f:66:2b:a9:c3:41:b8:c4:85:2b:e5:fd:c5:b7:ac:c8:8e:
bc:da:86:ae:1e:e4:bd:08:29:57:20:2a:f2:4e:37:bb:26:1b:
53:ed:44:89:a2:a3:0e:d6:55:3f:63:52:53:6c:dd:c6:6c:68:
29:21:e3:57:6b:9b:1e:d8:55:8a:d6:8a:43:50:ea:06:7b:64:
af:8c:ac:15:24:85:52:7b:0f:7f:3f:d8:fc:60:0e:07:6c:85:
26:cd:43:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:44 2024 by rpki-client on console-fra.rpki-client.org