Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/623a3dae-4708-33fb-a162-c7722c6e55f5.roa
File: 623a3dae-4708-33fb-a162-c7722c6e55f5.roa (raw, json)
Hash identifier: c2YILmtReA7/Zaca/UYVuTaGr0FZ46d6ZL4FJzRMVZM=
Subject key identifier: AC:F7:CB:7C:43:68:DA:BF:E3:A3:7C:31:17:91:DA:7D:F5:E5:C7:AE
Certificate issuer: /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial: 010D0C9F43285845410D4CD33F9C1208415C2040
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/623a3dae-4708-33fb-a162-c7722c6e55f5.roa
Signing time: Tue 19 Mar 2024 01:00:24 +0000
ROA not before: Tue 19 Mar 2024 01:00:24 +0000
ROA not after: Mon 17 Jun 2024 01:00:24 +0000
asID: 2650
IP address blocks: 204.68.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 16:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:41:0d:4c:d3:3f:9c:12:08:41:5c:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
Validity
Not Before: Mar 19 01:00:24 2024 GMT
Not After : Jun 17 01:00:24 2024 GMT
Subject: CN=c8d9417d-4624-4e98-b2ac-31c2faea167c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c8:21:d2:5d:f0:2b:64:22:b6:15:97:aa:b8:
da:98:e3:be:9d:0e:c6:64:0e:a9:13:3b:94:6e:9b:
b1:bf:39:e0:c7:ce:d7:0e:c6:f7:ef:f5:23:f0:9c:
59:0e:b2:d5:5c:53:11:b3:28:b8:aa:52:13:f0:e5:
67:e5:4d:7b:54:3c:93:33:6f:93:1d:c7:74:37:12:
4a:4b:79:f0:62:56:16:a0:49:18:da:a0:58:e8:5d:
53:1a:46:b6:b3:70:b0:9c:7a:5f:20:64:54:08:9b:
ee:e4:11:e4:46:59:9e:1b:b4:2c:a4:fb:db:18:60:
b5:e7:c9:a9:70:b0:51:1f:30:0a:9e:28:ce:a6:5a:
db:ea:e3:dd:f1:d9:d0:c6:72:38:98:87:7d:16:64:
3b:34:99:f9:1c:06:65:2f:f2:82:56:e4:d0:9c:17:
8f:a0:d3:b9:50:8a:1c:7d:45:82:3c:26:ef:2a:68:
ce:e0:fc:01:20:05:37:8e:3b:8f:a8:49:95:b9:cc:
d6:e4:e6:24:1f:6b:d7:2a:b9:15:67:94:84:5e:ef:
80:7d:2a:36:c0:f5:b0:d3:9b:82:48:39:20:6a:7c:
8f:6c:bf:2e:ca:bc:ba:60:8e:e5:4e:3c:9e:06:7a:
5b:52:cb:05:ef:dd:67:b6:cd:df:40:fb:a6:7e:82:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F7:CB:7C:43:68:DA:BF:E3:A3:7C:31:17:91:DA:7D:F5:E5:C7:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/623a3dae-4708-33fb-a162-c7722c6e55f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
X509v3 Authority Key Identifier:
keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
sbgp-ipAddrBlock: critical
IPv4:
204.68.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:b0:64:1f:e3:6a:4e:ce:61:83:49:3a:07:27:1f:85:dd:4e:
a2:d7:fe:90:10:d9:28:d8:24:11:2d:5e:fb:c1:8a:82:e5:25:
5c:c2:8b:24:40:39:b3:de:3d:72:82:6b:cb:fd:b2:46:98:46:
7d:b4:dc:bc:d3:26:47:2c:3e:b4:d7:33:aa:5e:ab:5b:2f:5b:
c1:1c:d5:34:f6:2b:8b:34:fe:88:6a:76:a4:26:74:16:30:6a:
3d:a6:a7:40:0c:c5:94:32:d8:42:37:0e:ac:ab:f2:85:38:91:
97:de:79:26:7a:7c:78:0e:3d:3f:9c:ba:4c:26:71:d5:37:ea:
b2:fd:e9:24:34:45:92:39:95:23:61:c2:71:25:ee:4f:0a:a0:
7e:96:ae:6e:d3:91:78:1f:f7:60:f6:ef:0a:f6:e2:65:64:99:
45:68:b9:31:b5:17:b1:23:28:53:cd:c1:9b:93:4a:b2:0e:8f:
4d:53:35:3d:78:86:6d:d1:bb:89:f2:1c:0b:61:01:9a:4e:12:
74:be:2d:b5:28:93:a1:02:fa:63:d7:aa:82:48:76:62:8c:eb:
af:f2:ad:5f:d0:28:f1:8a:eb:35:54:a9:50:3b:03:22:76:90:
96:e4:b4:e9:2f:5c:38:96:53:d5:30:97:13:1d:fd:5f:c4:fd:
1d:e1:2a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:11:52 2024 by rpki-client on console-ams.rpki-client.org