Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046/b5008e14-cbb0-361a-bd60-e61625306fc2.roa
File: b5008e14-cbb0-361a-bd60-e61625306fc2.roa (raw, json)
Hash identifier: 2y0jp6+yAVstyn3x1QBcb4/dv2JXZdpdUbIffslSyno=
Subject key identifier: 61:16:95:11:E1:FC:86:ED:10:EB:FF:2B:B8:C2:A0:90:7D:BA:AF:09
Certificate issuer: /CN=b68f393e-4233-4428-ad05-67691bf3e046
Certificate serial: 010D0C9F43285845F0EE69E186CEE053922A6FC0
Authority key identifier: C2:67:C5:4C:37:AF:89:48:5B:07:7A:50:7A:80:2C:11:DD:D7:FF:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046/b5008e14-cbb0-361a-bd60-e61625306fc2.roa
Signing time: Tue 21 May 2024 01:00:25 +0000
ROA not before: Tue 21 May 2024 01:00:25 +0000
ROA not after: Mon 19 Aug 2024 01:00:25 +0000
asID: 53316
IP address blocks: 207.251.96.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 17 Jun 2024 23:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f0:ee:69:e1:86:ce:e0:53:92:2a:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f393e-4233-4428-ad05-67691bf3e046
Validity
Not Before: May 21 01:00:25 2024 GMT
Not After : Aug 19 01:00:25 2024 GMT
Subject: CN=faafb222-cb51-427f-9bfc-b5566d393e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e8:a6:b1:99:d3:3b:46:49:0c:74:5e:d7:a2:
84:d6:b9:a7:dc:9f:ed:18:be:16:7e:ab:3c:c1:56:
f0:2d:04:fa:a2:61:f5:e1:fa:78:ce:ae:fd:91:a9:
47:ed:79:ac:4f:e7:71:91:35:5e:f1:50:53:c6:71:
a5:d1:b9:0a:86:94:4c:b1:2c:e7:b8:67:28:78:2d:
9f:f0:d8:de:89:ed:5f:b9:46:80:82:0b:5f:58:f1:
4a:2a:73:3e:ab:0e:de:31:f0:3b:45:01:93:24:b1:
4f:1d:0e:a4:dd:76:03:ee:5d:1f:36:e2:b8:1b:35:
ab:25:90:96:da:d6:3c:e1:77:94:14:21:44:0e:d0:
1f:91:54:22:bb:db:31:1d:86:d9:c2:7f:34:63:54:
42:55:fa:56:81:8e:52:c3:f3:fb:f7:78:5b:8e:6f:
f4:f5:8e:78:72:5d:86:3b:5e:29:2b:f4:4d:8d:71:
e4:1b:4d:de:9e:98:fe:a3:c9:fd:78:b8:80:cd:25:
53:1b:3b:d4:86:61:8b:7a:22:1f:15:3e:0e:97:bc:
92:a9:e0:08:90:75:e3:e2:97:28:8b:f2:85:e3:c7:
ca:60:a5:6a:16:85:9f:06:2c:a3:c3:ca:b4:3b:11:
0a:ba:d9:8b:0f:c8:df:b2:c3:34:08:0b:9c:fb:94:
9b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:16:95:11:E1:FC:86:ED:10:EB:FF:2B:B8:C2:A0:90:7D:BA:AF:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046/b5008e14-cbb0-361a-bd60-e61625306fc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046/b68f393e-4233-4428-ad05-67691bf3e046.crl
X509v3 Authority Key Identifier:
keyid:C2:67:C5:4C:37:AF:89:48:5B:07:7A:50:7A:80:2C:11:DD:D7:FF:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046.cer
sbgp-ipAddrBlock: critical
IPv4:
207.251.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:58:73:cf:67:24:51:6b:f6:8f:af:77:cd:54:58:31:7e:90:
72:1c:be:74:19:37:f3:a7:f3:de:d1:82:fb:23:c6:9a:d9:76:
d2:c0:1d:1f:a4:ed:17:31:e9:7a:46:62:05:c5:85:b9:13:98:
64:be:a9:c3:14:f7:21:6d:d5:8b:29:a8:c3:4f:a2:96:1f:07:
6f:bb:1d:e4:9c:85:36:0e:64:c2:1e:3b:c9:41:77:3d:c4:0c:
f7:39:74:77:8c:a4:48:1b:65:f6:22:3b:89:c3:b8:1c:28:7a:
30:09:f1:5c:75:2e:56:32:77:fb:1f:76:ac:44:3d:b1:f1:e1:
0f:c5:05:5b:bf:90:35:d8:67:ad:7a:9f:fa:21:ed:9c:7f:a1:
bd:f2:da:36:3a:f4:99:2c:30:30:94:42:77:37:ee:f6:0a:2b:
35:0b:a6:e5:b3:fa:7e:75:9c:21:f3:34:a0:0c:f5:73:36:cf:
28:b5:02:3f:03:a1:e4:73:c4:23:c0:93:03:aa:1e:55:38:f7:
63:5a:8b:28:42:de:17:63:3f:68:2a:d2:ad:75:d7:27:f4:ad:
e5:52:30:57:9a:f8:d5:87:03:8c:39:c2:18:e8:1e:17:64:e2:
a4:77:19:7c:c7:f7:aa:13:ff:5c:8c:2d:5e:c3:9f:e3:cb:70:
8a:d9:4a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 01:14:11 2024 by rpki-client on console-fra.rpki-client.org