Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/84e889ef-8719-36b5-8aa8-d166db0a1668.roa
File: 84e889ef-8719-36b5-8aa8-d166db0a1668.roa (raw, json)
Hash identifier: 1rP8WOyDl4IbHFL7H8YGwpq0I5LLKAQY6R2oNEmit+8=
Subject key identifier: 1C:5B:77:3E:56:EE:9B:A5:6B:52:5C:B9:00:F3:96:08:DF:22:84:96
Certificate issuer: /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial: 010D0C9F4328584441F3E85CE87F0F7246A3A200
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/84e889ef-8719-36b5-8aa8-d166db0a1668.roa
Signing time: Mon 18 Dec 2023 15:58:07 +0000
ROA not before: Mon 18 Dec 2023 15:58:07 +0000
ROA not after: Sun 17 Mar 2024 14:58:07 +0000
asID: 397606
IP address blocks: 170.39.208.0/22 maxlen: 22
64.52.102.0/23 maxlen: 23
216.152.68.0/23 maxlen: 23
207.174.68.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:41:f3:e8:5c:e8:7f:0f:72:46:a3:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
Validity
Not Before: Dec 18 15:58:07 2023 GMT
Not After : Mar 17 14:58:07 2024 GMT
Subject: CN=a40d4341-d9c2-4352-a69b-52b20f356653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:85:05:39:38:bc:12:5b:09:b7:04:cf:68:
84:42:e9:c5:3c:16:54:c5:28:1e:15:6f:72:21:b8:
39:4d:21:c5:0c:07:40:a3:64:e5:77:85:8d:11:bb:
4c:33:30:da:93:36:52:59:c9:3f:49:e5:03:2b:08:
87:32:ac:bc:6b:4b:af:cd:b2:bb:27:55:91:21:24:
86:7a:6f:11:7f:a4:d2:c2:82:9f:ab:cc:a8:f0:09:
2b:cd:36:af:4c:cc:52:f4:78:91:eb:3e:7b:e4:e6:
5d:88:65:b1:53:89:f1:bd:cf:bd:34:3d:e9:54:38:
4d:48:87:bc:1e:87:c4:e9:3b:86:d2:b3:51:81:7f:
6f:2a:c5:25:e4:40:e0:8b:78:4e:bd:4b:49:bf:9d:
a9:8d:1a:54:1c:20:a5:60:79:3a:1c:44:cf:2a:67:
98:f4:8e:ae:a0:df:b1:11:29:4b:ae:6f:db:68:a8:
d1:41:45:96:ff:0a:df:c7:78:f4:ec:4d:91:68:8e:
df:a5:91:c4:c6:58:03:ab:3c:8a:28:e0:5b:ca:6d:
a4:0b:b8:63:3e:03:0a:d4:45:82:19:78:17:3a:36:
a7:38:0a:34:bd:c1:94:3f:5f:c4:a1:0d:97:10:cb:
99:c9:b8:be:92:e9:ff:27:62:86:80:22:f7:a6:0f:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5B:77:3E:56:EE:9B:A5:6B:52:5C:B9:00:F3:96:08:DF:22:84:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/84e889ef-8719-36b5-8aa8-d166db0a1668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
X509v3 Authority Key Identifier:
keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
sbgp-ipAddrBlock: critical
IPv4:
64.52.102.0/23
170.39.208.0/22
207.174.68.0/22
216.152.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:9b:88:8a:e8:5c:a3:57:9d:8a:a6:88:c4:ad:3f:6b:e1:cc:
cc:ed:0a:4a:c0:bf:96:64:b5:ff:df:5e:ac:66:cb:1b:6b:df:
4f:72:29:da:55:93:58:cc:89:c6:0b:70:e1:cb:b9:5e:87:07:
ac:fe:c4:ab:47:e5:36:8b:6b:f8:b8:9a:6e:97:db:1f:07:d8:
81:8e:99:a0:f3:b8:d3:18:79:82:6f:85:a4:ba:0e:ed:87:b8:
32:81:63:6c:87:bb:33:ae:c3:d3:94:9e:5f:d8:57:e9:4f:8b:
54:3c:c4:15:ab:2b:90:fe:25:86:a2:86:7f:34:fa:07:92:12:
a0:ea:82:2c:60:1b:93:e4:f2:0f:64:12:35:6f:ba:f8:71:11:
36:e9:2e:ed:7c:26:38:81:55:c1:1e:cf:2f:ce:cd:3e:b9:b7:
8c:55:6b:e4:c2:1f:ae:45:db:50:23:82:94:95:24:08:97:a0:
ce:3a:b1:45:a8:00:75:2d:56:b9:ac:0c:fb:32:b1:60:67:df:
b0:47:73:bc:7a:0f:4e:8b:19:c7:61:2c:7d:75:7c:a8:ac:fd:
2f:96:f2:bf:a6:43:e5:26:1e:e0:30:a9:50:b9:a6:fe:ea:47:
38:9e:7d:7a:56:ad:ef:f1:87:db:56:97:20:48:bb:ba:76:50:
19:e4:55:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 17:47:43 2023 by rpki-client on console-ams.rpki-client.org