Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2/fd5dbe6b-d240-3ffe-89c2-ba87cf18a79b.roa
File: fd5dbe6b-d240-3ffe-89c2-ba87cf18a79b.roa (raw, json)
Hash identifier: QHg0tI1L5ymnOlqgXRhZDZpJrp/fAYZn/e3ibknop7Y=
Subject key identifier: 99:DA:1C:21:CD:41:1D:04:12:E6:E8:AC:55:15:24:57:25:2C:94:EB
Certificate issuer: /CN=a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2
Certificate serial: 010D0C9F4328584604793CB26850EA516AB97400
Authority key identifier: 99:EB:BB:7C:51:64:A0:B3:0F:3E:1B:08:53:94:79:52:DD:C5:AE:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2/fd5dbe6b-d240-3ffe-89c2-ba87cf18a79b.roa
Signing time: Tue 28 May 2024 01:00:25 +0000
ROA not before: Tue 28 May 2024 01:00:25 +0000
ROA not after: Mon 26 Aug 2024 01:00:25 +0000
asID: 393577
IP address blocks: 23.168.24.0/24 maxlen: 24
2602:f9ba::/36 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Jun 2024 07:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:04:79:3c:b2:68:50:ea:51:6a:b9:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2
Validity
Not Before: May 28 01:00:25 2024 GMT
Not After : Aug 26 01:00:25 2024 GMT
Subject: CN=45b3712f-3984-4fb3-bc0e-b984bc1a8e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dc:2e:f9:d9:17:de:9c:f8:62:43:f7:9c:95:
96:ae:c7:64:a7:d7:af:1d:14:6f:b4:52:71:57:c7:
4e:ad:71:ad:be:9a:6a:16:28:16:c6:0b:74:91:c3:
ee:8f:32:c8:12:d3:36:2b:d3:71:3a:55:25:a7:86:
25:bb:6b:3b:a1:e2:af:29:7c:25:f7:23:3f:f6:6a:
62:9e:49:7a:ec:96:64:64:2b:71:68:e3:8c:3a:ff:
7a:3d:97:d1:8b:d8:2c:18:df:84:1c:e0:f3:86:85:
17:db:9d:f5:5f:fb:f3:c0:25:c7:2c:f8:3c:7f:d2:
6e:29:4a:6c:20:73:f9:d0:d4:4e:4f:6a:e1:ce:25:
19:a6:e2:7b:d0:c8:23:3e:05:dc:e9:9b:f5:bf:bd:
e2:cb:95:07:47:47:ce:a0:f3:61:5f:33:0c:66:3f:
0e:cf:96:ce:c1:fb:c5:54:da:71:bf:d2:6a:a9:14:
4a:86:d1:af:6f:d5:4f:fc:6d:f7:00:ff:b9:d9:e6:
24:6e:af:54:e5:10:43:d0:2e:a9:79:8c:c9:4e:83:
26:43:23:ba:5b:fc:92:8e:de:bd:2f:80:d5:2f:83:
8e:07:84:c9:3f:61:4c:de:12:31:e9:d2:23:43:be:
fe:5a:96:fc:e6:d5:12:ef:29:cb:7f:c2:e0:51:30:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DA:1C:21:CD:41:1D:04:12:E6:E8:AC:55:15:24:57:25:2C:94:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2/fd5dbe6b-d240-3ffe-89c2-ba87cf18a79b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2.crl
X509v3 Authority Key Identifier:
keyid:99:EB:BB:7C:51:64:A0:B3:0F:3E:1B:08:53:94:79:52:DD:C5:AE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.168.24.0/24
IPv6:
2602:f9ba::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:ee:53:61:aa:12:33:a8:69:e1:69:20:16:78:fc:77:c7:fe:
6c:36:c4:97:71:23:31:aa:ec:2c:82:59:84:dc:df:b0:56:cc:
dc:27:6c:19:a6:e4:8d:cd:85:c9:46:c6:5c:34:ba:96:55:9a:
28:85:40:f6:4b:fd:4b:78:2b:63:dd:bd:cd:65:5c:97:f1:b0:
b6:d1:78:6d:4c:17:d6:6e:a3:29:9d:db:2e:d7:db:a7:07:6b:
af:a6:13:b1:1f:b5:2a:47:d5:2b:2d:62:71:4b:88:d1:13:08:
a4:83:d3:53:c6:2c:29:b2:9a:5c:1c:ea:b9:8c:d0:37:2f:51:
71:f3:c0:f6:61:a1:2a:ee:c3:96:13:78:24:61:92:e6:6e:f0:
25:5f:5b:d7:5f:f5:23:ae:02:74:ae:bd:be:ea:5a:ff:68:25:
98:67:f3:0d:29:8a:04:40:cb:7c:a4:dd:5f:01:43:ac:4b:29:
71:94:0a:c3:61:24:25:d6:a8:b1:2f:df:02:bb:53:48:c2:c1:
a4:95:f5:86:8c:23:9c:a5:bd:2d:49:d2:ab:e2:d1:83:1b:00:
e9:8f:cc:7f:90:21:a6:b4:74:9f:f9:b9:fe:a0:78:b8:f2:57:
5b:ec:96:85:45:99:dd:47:8a:cd:64:2d:64:66:b4:3e:04:d5:
72:b9:5f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 13:09:03 2024 by rpki-client on console-ams.rpki-client.org