Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6be1171f-964c-3d41-a46d-ba6f6dc10215.roa
File: 6be1171f-964c-3d41-a46d-ba6f6dc10215.roa (raw, json)
Hash identifier: yY9aOSCBLAdSoRePVXZ7k2s5tGuqzQ41gi1Zpd1J+0E=
Subject key identifier: 1D:B5:44:53:15:95:11:C6:8A:81:7F:FB:FE:0F:3A:7E:DA:8B:62:6C
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F4328584659EBDAAD67E4D2A0EDC81040
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6be1171f-964c-3d41-a46d-ba6f6dc10215.roa
Signing time: Thu 27 Jun 2024 15:35:10 +0000
ROA not before: Thu 27 Jun 2024 15:35:10 +0000
ROA not after: Wed 25 Sep 2024 15:35:10 +0000
asID: 12189
IP address blocks: 209.51.128.0/24 maxlen: 24
209.51.134.0/24 maxlen: 24
209.51.152.0/24 maxlen: 24
209.51.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 19:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:59:eb:da:ad:67:e4:d2:a0:ed:c8:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Jun 27 15:35:10 2024 GMT
Not After : Sep 25 15:35:10 2024 GMT
Subject: CN=f01c7ca6-af4c-42ee-99b8-b9f609c31068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:be:ce:fa:33:0c:40:0c:d5:1f:5c:f5:d4:85:
b2:8c:52:97:4c:38:24:df:3e:f5:b7:d1:57:57:e4:
81:b0:14:79:d3:09:ba:53:56:2b:dc:67:ff:3e:5e:
37:8b:48:c3:46:77:14:ae:a7:3b:03:56:bc:68:45:
13:b7:33:5e:36:72:81:39:c8:11:38:62:56:5d:5f:
a5:1f:5e:a1:4f:44:62:ff:b6:48:41:b0:5e:8f:db:
4b:5a:0a:7e:83:2d:d4:e4:40:f1:1d:32:63:bb:e1:
78:4b:ad:1b:76:b3:11:1b:a5:12:1c:8f:ef:7d:ef:
6f:bf:5d:ea:c5:cd:81:21:f8:44:b4:58:42:46:6a:
1a:0a:3b:84:82:76:4b:0e:82:c7:da:f5:57:28:83:
05:47:bd:ca:f0:c9:80:ad:d8:11:53:91:bc:80:58:
0b:b4:46:bf:af:24:ad:32:96:5b:2c:ce:cd:0f:5d:
8b:fb:17:33:1e:f7:37:d6:26:a1:48:20:f7:e9:c3:
48:8c:33:df:e5:66:58:a3:8f:db:1b:01:1e:6c:6b:
c4:6f:86:16:ed:db:0e:d9:e6:04:3f:38:2e:6f:cf:
5e:18:99:ff:0e:6c:c2:d0:27:b2:6b:3d:1f:cd:a7:
c4:9b:74:23:ea:0e:1e:98:1a:b6:2b:0e:1c:b8:94:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B5:44:53:15:95:11:C6:8A:81:7F:FB:FE:0F:3A:7E:DA:8B:62:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6be1171f-964c-3d41-a46d-ba6f6dc10215.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.128.0/24
209.51.134.0/24
209.51.152.0/24
209.51.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:ec:3d:8d:db:80:4a:41:8c:b6:68:ed:5c:fc:0d:ca:06:49:
b6:8a:40:be:42:52:97:85:e9:92:41:ae:9a:7e:1c:05:de:f3:
05:33:7b:37:89:64:99:51:d3:11:94:44:d8:ff:27:d4:cc:bb:
e9:af:3b:bc:9a:78:9c:d1:9c:8b:4d:e6:ca:73:2e:a1:9e:c9:
d3:a3:ac:85:59:3b:bf:39:93:2d:9a:d1:81:d1:f7:34:a3:2b:
03:e3:eb:af:d4:26:65:fc:a8:82:4a:a3:6e:e9:2e:4f:c5:56:
f8:69:dd:ee:9c:4c:c1:27:80:0c:7b:15:c9:78:d4:c1:0c:13:
9a:54:a1:6c:47:77:9d:cf:d0:27:5f:d4:bf:b7:c3:1b:9f:af:
d8:b1:48:75:6d:b2:17:b7:ff:78:62:5a:d3:01:2b:9d:4e:56:
e2:97:b8:6c:d5:b1:1c:c8:15:b3:d3:f9:9b:12:a0:dc:0e:69:
e7:92:0d:c7:79:45:ac:00:87:a2:7b:c4:f6:7a:1c:f4:8f:2e:
c0:2b:21:a7:94:ec:a0:7f:b0:2f:66:19:2a:f7:90:56:05:4c:
eb:a2:00:6d:19:97:b3:ce:cb:47:73:7b:ef:27:85:05:31:03:
aa:bf:50:cf:88:78:d6:00:55:d9:eb:9e:2e:94:c6:d4:51:84:
17:7e:d0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 20:56:00 2024 by rpki-client on console-fra.rpki-client.org