Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/af873720-bed6-364c-8037-944246a16004.roa
File: af873720-bed6-364c-8037-944246a16004.roa (raw, json)
Hash identifier: Ju1nSepnDacjGgnuAJw/w7b4AS0GP9X2fiigoEPXVzs=
Subject key identifier: EE:9C:38:80:6A:A9:21:8C:89:D6:D8:F9:21:DD:6D:78:44:BB:5F:99
Certificate issuer: /CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
Certificate serial: 010D0C9F4328584161070CD0807AAB95A19D42C0
Authority key identifier: CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/af873720-bed6-364c-8037-944246a16004.roa
Signing time: Tue 28 Mar 2023 20:35:59 +0000
ROA not before: Tue 28 Mar 2023 20:35:59 +0000
ROA not after: Mon 30 Jun 2025 04:00:00 +0000
asID: 16509
IP address blocks: 199.73.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Mar 2023 17:44:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:61:07:0c:d0:80:7a:ab:95:a1:9d:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
Validity
Not Before: Mar 28 20:35:59 2023 GMT
Not After : Jun 30 04:00:00 2025 GMT
Subject: CN=08114664-1b97-49bf-be45-5cfd638d0433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:3f:4a:94:af:7c:fa:2c:75:d0:12:1c:dc:
47:6c:3d:81:6a:96:bd:ab:94:40:20:88:26:38:3c:
cb:a6:d1:ef:60:30:12:c8:f2:fb:cd:f5:2d:25:d7:
45:0a:cb:a6:30:36:4e:77:8a:9d:fc:67:af:68:b6:
ad:a1:1b:4c:70:39:7b:56:aa:3b:8b:29:7a:a6:80:
93:a6:39:15:81:61:f9:90:68:f7:53:49:ea:8b:74:
5a:17:c2:5f:31:06:8f:2d:8e:12:14:dd:9f:73:5c:
ad:2b:4a:2a:9b:9e:fe:2c:60:6e:20:4b:8a:f3:f3:
46:fe:40:9b:25:d8:3e:5e:46:94:27:fe:bd:c1:93:
38:7a:7c:dd:4b:ea:6b:e1:be:ad:df:86:31:c6:13:
8b:65:eb:2b:36:24:5b:c1:ea:1a:17:7f:05:76:74:
21:98:f5:e4:5a:d7:c4:cd:94:06:79:31:f9:b6:ec:
30:db:07:17:20:44:93:10:d6:d8:41:23:5f:6a:87:
2f:7b:83:00:04:d9:d4:1b:88:ac:c1:04:54:43:c7:
79:1e:bc:18:02:72:d2:4c:db:40:fe:62:aa:a1:58:
72:51:ae:64:61:2b:13:91:af:36:66:2e:82:d3:b3:
6b:b9:31:c3:e0:a7:75:9c:cf:81:e3:0b:85:45:cb:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9C:38:80:6A:A9:21:8C:89:D6:D8:F9:21:DD:6D:78:44:BB:5F:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/af873720-bed6-364c-8037-944246a16004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl
X509v3 Authority Key Identifier:
keyid:CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.73.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:43:71:53:5f:71:84:ec:01:f1:32:15:b5:db:0e:7e:fb:81:
4b:e4:32:9c:20:8c:df:31:31:2d:64:ba:f6:49:97:cf:da:c7:
04:88:5b:b1:f8:8f:e2:39:ea:bb:a8:12:63:14:52:84:99:a3:
bb:6f:2b:07:c6:af:b3:73:6c:f2:ee:2f:ac:46:f4:38:e9:78:
fe:c4:f1:e9:67:d7:df:e0:78:37:74:b8:be:e3:e4:bf:0f:de:
21:01:b5:47:f0:df:be:dd:84:33:cf:37:81:eb:ea:6e:99:9b:
af:e0:df:b9:35:49:d8:09:50:cd:cc:73:48:60:a2:f8:53:24:
ea:51:5b:dd:da:9a:86:87:bd:d5:13:8e:4c:a4:d0:6f:71:02:
a1:15:dd:da:d1:22:37:5d:b0:07:d2:88:75:17:1f:44:31:66:
0d:bb:61:23:70:00:4d:5b:a3:4e:2e:d6:31:ea:f3:d4:f7:53:
45:13:1a:f2:4f:07:88:d3:db:9f:b7:d5:23:2d:3f:5c:0d:63:
ec:b4:25:4f:ce:8a:e9:fa:5e:02:f7:68:ee:fe:a2:fb:3f:bc:
8a:92:a1:41:7a:a7:ea:20:0d:2e:5b:63:63:ad:e3:d9:a5:cc:
c5:52:9a:20:f0:c3:e3:d7:a8:23:fa:4d:77:c4:8f:70:47:6b:
a8:00:c2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:40 2024 by rpki-client on console-ams.rpki-client.org