Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/5a4ebdbe-1c46-3982-a3ee-c24ef4f7c057.roa
File: 5a4ebdbe-1c46-3982-a3ee-c24ef4f7c057.roa (raw, json)
Hash identifier: d5kYKh2mggd+NSqUUY1wo55FRBSc+jRwYnWnPW0jIGA=
Subject key identifier: FE:1F:90:B2:C1:98:3C:AC:69:F9:B7:D3:33:7E:AC:06:15:55:FA:EB
Certificate issuer: /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial: 010D0C9F43285846BB5542C28E624FFC026CA440
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/5a4ebdbe-1c46-3982-a3ee-c24ef4f7c057.roa
Signing time: Thu 01 Aug 2024 13:00:37 +0000
ROA not before: Thu 01 Aug 2024 13:00:37 +0000
ROA not after: Wed 30 Oct 2024 13:00:37 +0000
asID: 204958
IP address blocks: 208.65.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 20:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:bb:55:42:c2:8e:62:4f:fc:02:6c:a4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
Validity
Not Before: Aug 1 13:00:37 2024 GMT
Not After : Oct 30 13:00:37 2024 GMT
Subject: CN=912c7c15-c437-48eb-84e1-53b7d199a83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:6f:28:65:d1:d1:c6:5d:6f:e8:f8:ed:48:
75:ad:70:08:03:30:54:a5:0f:a7:e6:4b:32:69:07:
df:e8:71:3a:35:4b:9e:88:b6:1f:50:56:23:d1:9c:
d2:0b:79:83:5a:b2:a2:4b:12:d2:b8:48:f9:27:be:
d7:e1:54:ed:3e:2d:82:72:bc:5c:1d:4b:0e:88:70:
5f:21:f7:ab:68:16:da:65:0a:1a:93:d6:8f:ac:bf:
11:03:e5:25:cc:c2:3e:48:17:d7:45:da:8d:11:a3:
66:8e:74:41:70:49:ea:9b:9c:34:78:46:91:77:ef:
4c:5c:c3:cf:bb:1c:83:18:bb:5e:dd:2b:5b:46:8e:
71:3b:18:5e:a9:d1:96:a6:8f:e9:c9:c3:64:1b:d7:
cb:58:b8:14:5e:ec:0a:bc:38:b1:53:14:84:9c:5b:
6c:fb:64:b8:8a:35:04:75:da:69:ae:b1:43:d1:55:
1e:66:de:88:68:a2:d4:93:38:7e:76:2d:a9:8f:27:
27:43:36:c1:41:01:29:67:0b:39:6c:a3:6c:ef:04:
1c:e6:12:ca:04:f1:c4:db:31:cc:70:81:f0:f4:56:
8e:e7:7b:37:ba:ba:fb:f4:8d:f7:98:bb:3c:a5:f6:
78:c3:46:b2:b3:da:9a:e9:bb:77:62:ed:cd:1e:0e:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1F:90:B2:C1:98:3C:AC:69:F9:B7:D3:33:7E:AC:06:15:55:FA:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/5a4ebdbe-1c46-3982-a3ee-c24ef4f7c057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
X509v3 Authority Key Identifier:
keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
sbgp-ipAddrBlock: critical
IPv4:
208.65.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:20:ed:e6:6d:97:12:44:e8:3e:9b:25:d7:2d:25:07:b1:22:
32:a9:0b:7c:88:29:31:4b:8d:b7:2b:9d:98:8e:e2:e0:53:9e:
64:76:13:ce:69:28:ee:df:e1:ca:5b:8b:a1:80:cd:92:0d:84:
7e:c6:08:27:04:46:20:eb:85:48:20:7a:ea:99:5b:dc:62:92:
6a:53:a3:6c:1b:ec:f1:0f:da:6c:e0:db:9e:74:33:5c:ac:31:
5d:e9:32:0b:42:30:12:8f:52:c7:06:bc:6c:bc:be:0f:7e:ee:
9a:f0:4d:3c:f4:14:90:c3:be:c3:c7:46:01:30:84:40:cc:cd:
38:bf:59:8a:bf:2a:57:24:ae:c4:96:b4:a9:34:29:56:b0:2e:
41:6d:d1:b2:81:3c:3b:2e:00:e4:9e:84:d7:fe:01:92:f5:71:
32:0c:bc:60:77:36:6d:42:ad:06:40:3d:b2:29:1e:bf:f4:ce:
a4:ff:91:f6:38:77:bf:d5:1c:e6:08:c8:39:a5:1b:5f:44:15:
54:2f:2f:f5:ec:ae:a7:9c:32:a1:69:e2:16:75:3f:84:8a:64:
66:e9:05:57:ad:61:9f:5b:40:87:3d:dd:d3:be:1c:9e:37:d0:
df:d6:fe:78:cf:e4:b0:75:e4:fc:7e:60:04:1b:d7:1e:67:b7:
b3:48:31:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 22:18:33 2024 by rpki-client on console-fra.rpki-client.org