Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/f8a97c14-5add-3b22-acaf-bec12f0bc0bb.roa
File: f8a97c14-5add-3b22-acaf-bec12f0bc0bb.roa (raw, json)
Hash identifier: RBFrjSThZForL9vg8IpP8D3nz+KpdYmCXRyMZit6/+g=
Subject key identifier: 9B:12:AB:F3:65:F3:DF:8A:2E:5E:95:D8:AB:18:89:20:F1:81:B3:68
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F43285843D4D8E583185281F75142D780
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/f8a97c14-5add-3b22-acaf-bec12f0bc0bb.roa
Signing time: Thu 09 Nov 2023 14:00:20 +0000
ROA not before: Thu 09 Nov 2023 14:00:20 +0000
ROA not after: Wed 07 Feb 2024 14:00:20 +0000
asID: 55293
IP address blocks: 162.249.0.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d4:d8:e5:83:18:52:81:f7:51:42:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Nov 9 14:00:20 2023 GMT
Not After : Feb 7 14:00:20 2024 GMT
Subject: CN=0e3cc442-0844-49cc-9e26-4359443f9229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:14:e2:f7:7c:5c:3e:9f:ea:03:93:35:b1:66:
91:be:a1:a3:62:3f:23:8d:91:61:48:e3:33:fa:3c:
54:19:fc:98:9e:4d:ea:59:c3:3d:51:3a:70:42:b3:
98:4f:cc:75:eb:90:00:75:89:b2:8b:d3:b5:6d:74:
74:9c:a9:87:75:55:98:4a:3d:50:7c:19:c2:aa:9e:
29:61:7b:3e:36:a4:7e:1c:00:52:bd:3b:39:78:06:
06:1f:e8:cc:f8:59:7c:80:ec:b5:18:9c:39:77:e7:
87:55:49:95:19:c5:01:b4:0d:e3:4c:36:89:b0:8e:
d9:4c:97:69:a7:ab:24:58:53:26:9e:a8:95:6b:97:
56:9d:a9:53:dc:06:57:da:68:bc:5f:1a:5f:a7:7e:
23:e6:35:61:12:a2:8e:44:95:15:c7:ff:e9:9f:3b:
b0:96:b2:87:39:55:64:85:07:0c:57:0e:a1:f0:5d:
bc:9d:93:1a:81:07:3d:39:1a:74:95:ca:a2:78:35:
d4:74:32:52:7e:42:16:19:18:45:63:73:96:5d:4b:
b4:59:62:53:8d:dd:56:50:e0:71:e3:ae:48:8e:d0:
82:d6:38:1b:ef:d5:9a:6a:94:13:1f:79:ec:b2:73:
41:b5:30:53:7c:95:0c:0c:d5:41:ff:8e:5c:c1:71:
a5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:12:AB:F3:65:F3:DF:8A:2E:5E:95:D8:AB:18:89:20:F1:81:B3:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/f8a97c14-5add-3b22-acaf-bec12f0bc0bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
162.249.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:23:4c:0f:b7:8b:23:66:2f:60:b6:b0:68:fb:2c:37:82:61:
0a:77:25:cd:75:4a:6d:a0:8a:87:91:ae:bc:66:11:8f:6b:70:
3b:7a:2c:44:6f:08:a8:17:ca:65:8b:ac:12:f0:97:a1:22:4d:
e3:cc:b1:d3:90:83:fb:bc:92:c5:f6:7c:ce:fb:fc:af:c7:d7:
9f:ed:fb:c5:74:b7:ee:8a:e1:ed:2d:2f:1f:b3:3f:1c:79:95:
d1:fc:c3:45:8f:81:51:da:91:48:6b:8b:07:df:1e:d3:97:56:
be:f4:94:ca:95:aa:26:5c:ef:4d:4f:3d:c1:a2:28:56:f0:9e:
4f:d8:67:05:ef:75:20:9c:7f:29:33:09:5b:ca:b9:86:c8:bb:
58:88:e4:93:39:48:5f:65:9a:61:92:35:f3:bb:7b:e4:46:fb:
36:b5:3e:30:2e:68:95:8e:6c:5a:4d:47:11:d4:15:38:68:f4:
96:15:dd:38:07:ba:6d:b5:97:0d:24:d7:63:7d:b3:89:f7:8c:
32:99:95:21:ad:7a:1a:82:2e:78:3e:d8:71:a9:7d:82:91:f4:
89:d7:1c:42:69:bc:7e:7b:06:5e:c0:84:fd:ee:80:dc:13:fa:
cf:55:d7:1d:81:ae:35:07:84:ec:77:d2:ab:b6:70:25:0f:7d:
b3:14:8e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:17 2024 by rpki-client on console-ams.rpki-client.org