Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/25068104-9e92-374c-ac4c-9775cb64b771.roa
File: 25068104-9e92-374c-ac4c-9775cb64b771.roa (raw, json)
Hash identifier: kGxGaQSOQAddSGmoZjPLEu43fglXVPVcVAHk1jcLZ44=
Subject key identifier: 98:FC:DE:29:8D:58:96:A1:BC:BA:95:A0:02:2C:ED:47:7B:1F:03:43
Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1
Certificate serial: 010D0C9F432858419BC8FBE98C19C71F255EBA80
Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/25068104-9e92-374c-ac4c-9775cb64b771.roa
Signing time: Wed 19 Apr 2023 16:47:44 +0000
ROA not before: Wed 19 Apr 2023 16:47:44 +0000
ROA not after: Tue 22 Jul 2025 04:00:00 +0000
asID: 15169
IP address blocks: 152.86.64.0/19 maxlen: 19
198.52.192.0/19 maxlen: 19
2604:f6c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 19 Apr 2023 18:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:9b:c8:fb:e9:8c:19:c7:1f:25:5e:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1
Validity
Not Before: Apr 19 16:47:44 2023 GMT
Not After : Jul 22 04:00:00 2025 GMT
Subject: CN=9a07a481-9761-4c5d-a087-46280ef0a90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cc:02:72:77:91:40:1b:8b:e9:74:c0:08:64:
c9:78:40:12:1c:5e:e7:67:47:7e:19:c4:a0:93:b3:
9b:6c:07:6c:f3:99:bf:7c:08:a1:33:27:47:67:9b:
1b:fa:48:6b:87:2c:b8:39:f8:77:af:45:9d:3b:e2:
7f:a3:6a:ee:2d:cf:ad:31:eb:b0:8c:f1:53:32:c0:
6a:9e:d6:c1:50:be:c8:44:fe:1e:69:0f:ac:f2:ec:
5b:3e:98:d4:fe:ce:54:08:64:c3:de:7e:d5:d7:53:
4a:cc:db:52:4e:85:9b:6f:1e:ce:bd:67:6d:9a:69:
eb:92:5e:24:c2:24:a8:48:d7:62:26:d7:6a:54:34:
6f:68:81:73:31:cc:a1:9d:92:d5:50:87:c3:f0:ee:
db:9c:ef:9e:f7:f8:14:28:63:14:8f:09:73:65:c5:
3a:6f:b9:ed:15:a5:b6:d9:8f:51:f9:73:00:1e:ae:
0c:59:24:67:2b:62:cb:99:08:ff:b7:2d:4a:a1:ba:
a0:52:09:91:a6:2d:0b:4f:9d:70:55:dd:df:6f:1c:
3a:82:67:a2:d3:95:a6:ed:84:64:15:5c:dd:19:5f:
c1:93:bf:67:e1:8c:3d:fc:eb:0e:75:42:31:cc:75:
51:87:8b:13:66:e3:df:ee:d2:4d:81:30:27:7e:f9:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FC:DE:29:8D:58:96:A1:BC:BA:95:A0:02:2C:ED:47:7B:1F:03:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/25068104-9e92-374c-ac4c-9775cb64b771.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl
X509v3 Authority Key Identifier:
keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer
sbgp-ipAddrBlock: critical
IPv4:
152.86.64.0/19
198.52.192.0/19
IPv6:
2604:f6c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:be:24:15:73:7b:99:c2:ed:08:28:6b:68:33:99:26:06:1b:
38:99:b5:a2:cd:b8:dd:c4:1b:0f:54:06:05:e2:c5:0a:ea:2e:
bd:a9:0a:80:36:a2:3d:3f:6a:20:a0:36:b5:44:8e:d2:66:34:
c8:13:41:37:7b:78:17:b2:11:4e:94:d3:3c:02:15:6b:75:22:
e9:84:88:64:41:f1:e8:43:df:32:4f:bd:3d:83:d9:31:ba:9d:
24:e8:12:2a:b2:c4:7a:e0:a9:4b:4b:1c:d1:71:88:1d:4f:02:
83:0a:71:03:30:91:f1:47:53:cb:de:62:70:fa:d3:13:88:f7:
db:a6:de:80:07:0e:d8:95:77:62:1c:95:91:a2:14:ff:44:3a:
c9:bb:d0:5f:31:36:76:fb:60:88:1b:68:2e:ae:05:7b:3d:99:
43:ad:23:31:87:77:d3:76:f4:10:28:b4:66:9b:ad:68:20:fb:
9f:66:64:01:22:ac:5a:86:7c:c2:a3:e4:31:53:35:fd:eb:b4:
cf:a4:62:1d:c2:4d:30:16:aa:75:4a:f6:a9:b6:39:f3:47:8d:
c3:5a:6e:d4:48:c1:bf:97:40:a4:63:b4:ce:66:4b:04:58:b9:
13:9c:fb:d7:3c:89:99:38:e8:1c:7f:f5:74:d4:b1:a0:b3:8c:
be:8a:68:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:40 2024 by rpki-client on console-ams.rpki-client.org