Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/8a310d8c-e4c1-3cd7-ac3c-740c144efa7c.roa
File: 8a310d8c-e4c1-3cd7-ac3c-740c144efa7c.roa (raw, json)
Hash identifier: Zg7u412msBU19mWBz4pjeJOI7fvxLrMMZVGIakitDBs=
Subject key identifier: 3E:EF:8F:50:02:3C:46:EE:5C:EA:13:9E:7B:6C:A7:D9:35:33:7C:77
Certificate issuer: /CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71
Certificate serial: 010D0C9F43285843F06A084A9B0C19E1C76A25C0
Authority key identifier: 6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/8a310d8c-e4c1-3cd7-ac3c-740c144efa7c.roa
Signing time: Sun 19 Nov 2023 10:59:51 +0000
ROA not before: Sun 19 Nov 2023 10:59:51 +0000
ROA not after: Sat 17 Feb 2024 10:59:51 +0000
asID: 2637
IP address blocks: 128.61.0.0/16 maxlen: 24
143.215.0.0/16 maxlen: 24
130.207.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f0:6a:08:4a:9b:0c:19:e1:c7:6a:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71
Validity
Not Before: Nov 19 10:59:51 2023 GMT
Not After : Feb 17 10:59:51 2024 GMT
Subject: CN=4ba9508a-9a86-4e06-8a82-24127c64b6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:c8:f2:70:51:76:c0:c8:2f:e0:ef:7e:66:
1e:57:81:b5:b0:56:28:09:5e:a8:d7:ac:fd:ea:0b:
1a:18:45:92:45:a3:46:ab:64:d9:04:5b:78:ab:0b:
13:f6:d2:31:ae:f2:a6:b5:b9:73:49:0d:cf:cf:38:
83:b4:26:62:22:91:30:31:4d:6c:78:0e:29:8f:cd:
e9:ae:39:2c:8b:11:66:9e:66:a9:f9:85:26:61:16:
a9:10:95:35:34:b7:94:f7:ff:42:59:e6:4c:f2:e5:
62:8f:b1:f8:81:ba:4f:bd:aa:62:db:4b:54:a6:e3:
72:85:df:fa:2a:32:73:51:ac:02:c4:3e:83:d6:99:
1c:ee:82:67:bd:60:8c:73:43:da:9d:1b:b7:e3:8f:
6c:f1:bf:b2:90:fd:a9:f9:d2:88:90:cd:c3:11:65:
a8:59:fe:ca:5e:f4:e6:69:eb:aa:3e:98:99:8e:b5:
82:34:b0:94:1e:21:90:5c:63:4b:90:48:f9:1c:ed:
0c:32:21:c4:a2:61:da:e3:90:9b:67:2b:06:e5:88:
9b:f8:f6:d2:0e:34:a9:63:3a:35:21:f2:8b:d4:ff:
6f:46:cf:28:69:56:58:77:a4:69:28:4c:11:2b:4d:
91:bf:d9:dd:3a:f3:96:16:94:e2:e6:51:b7:3d:8d:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EF:8F:50:02:3C:46:EE:5C:EA:13:9E:7B:6C:A7:D9:35:33:7C:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/8a310d8c-e4c1-3cd7-ac3c-740c144efa7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl
X509v3 Authority Key Identifier:
keyid:6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
sbgp-ipAddrBlock: critical
IPv4:
128.61.0.0/16
130.207.0.0/16
143.215.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:ed:c9:cf:7a:d7:ad:8f:18:fe:cf:21:18:98:17:5f:ff:7f:
53:18:c0:01:a7:ed:2d:bd:fe:79:f7:87:83:60:33:63:96:4c:
44:0d:6b:8b:5d:42:4f:6f:21:af:85:a0:1a:d1:85:c5:1a:fb:
a2:38:69:20:16:87:86:d8:ea:fd:bf:30:6c:08:b3:39:a1:79:
eb:77:9d:8e:14:e8:a4:54:97:93:e6:7f:2d:91:63:a2:f1:cf:
51:3b:2c:01:ff:35:23:1f:0e:74:95:77:cd:02:45:f9:3e:26:
78:3c:e8:31:fb:92:98:63:b3:a2:f8:6c:91:11:7c:f3:7c:ca:
78:70:f5:1b:73:48:71:53:1a:2b:87:29:29:90:e4:81:5f:03:
9b:56:13:f6:e3:ae:5e:fc:d2:87:3d:c9:1b:0a:65:b9:aa:94:
fa:12:fe:6e:5a:8d:f3:83:c3:ec:f7:e1:e1:c8:87:ec:d9:5e:
6f:a7:47:02:ef:aa:b9:f0:02:1c:f1:84:dd:a4:27:f0:d8:8f:
d7:03:16:0c:8d:72:c8:a7:e5:be:e7:4b:d7:1d:31:08:ca:fb:
be:62:88:4f:c1:70:3f:0d:6f:d8:be:a8:9b:a8:29:da:16:4f:
20:fa:7e:3a:a8:48:e4:a8:9f:94:66:52:51:d1:73:6d:ab:f0:
a2:87:d3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 19 14:31:13 2023 by rpki-client on console-ams.rpki-client.org