Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/1afd2062-1f69-3e81-acb2-0bbd99359274.roa
File: 1afd2062-1f69-3e81-acb2-0bbd99359274.roa (raw, json)
Hash identifier: QBh9Do8zOJFWWHuDteAQKOhmI1GeJDuc5jF5HqWSvm0=
Subject key identifier: 1F:D2:47:26:FD:E8:E2:EB:6E:7A:A3:75:F2:CF:32:1B:A9:84:1F:7C
Certificate issuer: /CN=d037641d-aa90-4eab-864e-a73e03e24cfa
Certificate serial: 010D0C9F43285844337A70D248A845E55DEF0A00
Authority key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/1afd2062-1f69-3e81-acb2-0bbd99359274.roa
Signing time: Wed 13 Dec 2023 11:32:04 +0000
ROA not before: Wed 13 Dec 2023 11:32:04 +0000
ROA not after: Tue 12 Mar 2024 10:32:04 +0000
asID: 398759
IP address blocks: 23.165.120.0/24 maxlen: 24
2602:f9eb::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 12 Jan 2024 00:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:33:7a:70:d2:48:a8:45:e5:5d:ef:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d037641d-aa90-4eab-864e-a73e03e24cfa
Validity
Not Before: Dec 13 11:32:04 2023 GMT
Not After : Mar 12 10:32:04 2024 GMT
Subject: CN=962c14ed-7a16-40fc-8195-14934e5a8b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:01:8d:28:5d:3a:20:02:de:30:20:83:16:
fe:cf:e0:ac:c5:d0:e2:bb:48:68:68:12:b0:06:5a:
78:00:93:2b:7d:fb:b7:73:cf:5b:81:24:3d:1c:b0:
62:2d:61:41:bc:de:6e:13:e4:3a:e1:4c:41:24:3e:
88:c5:1c:23:a6:c4:b9:77:eb:12:6c:ff:b3:0a:50:
67:0a:14:bc:df:36:6a:64:8e:68:63:c4:64:88:e4:
3d:ad:bd:14:5b:ba:2a:70:7f:a4:99:a3:69:ca:31:
b8:16:56:a5:74:6a:6f:63:a5:25:93:1f:a4:ea:98:
a8:64:40:f7:ff:50:05:20:5f:a7:59:c3:f5:4b:5e:
72:5d:a6:d0:75:41:4e:07:fe:45:96:bf:63:8f:7b:
34:72:92:4c:9f:2b:6a:b0:43:d3:d7:31:16:a8:d2:
6a:af:8c:eb:83:a3:65:38:6c:15:c3:b8:81:e2:e5:
b0:47:99:37:99:53:d4:60:2c:c6:be:86:7e:18:63:
d9:4a:28:f8:45:27:e8:e5:87:da:da:60:98:e2:85:
18:4e:ac:27:55:d9:53:ec:90:38:1c:47:96:25:46:
40:2b:61:bb:9e:65:8c:3a:f0:6f:14:43:a7:67:bb:
33:2c:f5:90:c7:27:7d:bc:0c:13:a0:22:f6:d2:7d:
42:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D2:47:26:FD:E8:E2:EB:6E:7A:A3:75:F2:CF:32:1B:A9:84:1F:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/1afd2062-1f69-3e81-acb2-0bbd99359274.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl
X509v3 Authority Key Identifier:
keyid:B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.120.0/24
IPv6:
2602:f9eb::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:cc:ba:10:92:ab:06:c5:eb:b0:30:8f:a3:10:4a:bf:06:bf:
35:8c:1a:3c:34:3c:28:e2:af:17:e4:17:49:12:d1:5e:52:10:
4a:b9:c9:02:55:4b:92:75:22:47:05:69:32:ad:af:3d:51:30:
8b:ef:df:ce:f7:1f:a2:b7:43:aa:15:18:37:8f:e6:cd:25:e6:
76:cd:6c:58:a3:45:3f:d0:43:c5:09:eb:2b:85:85:c9:1c:35:
de:3a:0c:fc:4f:fb:21:be:ed:0d:9e:0a:db:c4:55:89:3b:b8:
46:f5:f7:47:de:54:61:68:f1:cc:f4:fc:d3:e8:3b:ca:51:95:
b6:90:81:b5:fd:f0:e0:21:2f:4f:37:f6:4f:17:44:e9:0b:fc:
33:95:11:56:e9:76:95:a1:8a:c5:0b:5a:91:8a:50:31:33:3d:
e7:3a:f0:24:d4:65:d4:05:1e:f9:ec:1a:ba:ac:18:04:93:17:
bc:7d:78:81:9e:fb:40:27:9a:02:75:78:48:c4:da:b7:4c:50:
b9:d1:58:07:40:82:ee:f4:7d:1c:5e:cd:9e:fe:4d:fc:82:97:
61:10:d5:f9:39:55:61:d0:8d:01:5d:9c:ef:a2:41:32:f2:e8:
5c:91:1a:0b:2d:ee:80:1b:61:f6:e3:4a:df:63:a7:4c:ce:b0:
7f:de:9f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 01:52:16 2024 by rpki-client on console-ams.rpki-client.org