Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/0452626c-b350-3c64-9853-0aa9b7b8b10e.roa
File: 0452626c-b350-3c64-9853-0aa9b7b8b10e.roa (raw, json)
Hash identifier: wvO78nA+wkIeuLuyNAftsNkS+5UR1GWfDZGJ5dnxemE=
Subject key identifier: B3:AD:46:BF:A9:1F:48:17:4B:13:D9:0C:8C:FE:28:BA:FC:99:84:A1
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B6574419AFB5F95A9DF81D0
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/0452626c-b350-3c64-9853-0aa9b7b8b10e.roa
Signing time: Thu 05 Dec 2024 15:38:08 +0000
ROA not before: Thu 05 Dec 2024 15:38:08 +0000
ROA not after: Wed 05 Mar 2025 15:38:08 +0000
asID: 376
IP address blocks: 132.213.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:65:74:41:9a:fb:5f:95:a9:df:81:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:38:08 2024 GMT
Not After : Mar 5 15:38:08 2025 GMT
Subject: CN=0390e1df-7209-4075-a9ef-a4c525fa2469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:92:d3:ee:a7:3a:b2:cc:47:fc:5c:78:10:
d0:e4:a9:af:d4:e4:ce:fd:93:8c:35:3a:66:e4:a4:
e7:f1:5c:d6:67:27:7d:75:a1:2e:97:7e:e9:1c:eb:
b7:9e:bc:42:d1:38:5f:89:1c:0d:1b:b7:8d:66:ef:
84:e9:46:41:62:b1:93:16:b1:e9:02:42:cf:31:67:
53:a9:cc:44:6e:59:e6:a9:a9:92:c7:06:ef:2c:fb:
03:35:a8:32:e0:9d:9e:95:73:99:7e:c9:f5:69:06:
d3:27:b6:78:a5:3a:39:19:14:7a:92:5a:70:97:69:
d5:44:22:ad:32:c5:fe:44:de:81:85:36:15:73:64:
03:f4:90:38:5e:6b:e9:2c:bc:b0:6f:86:be:2f:29:
4b:de:e4:84:88:f4:3d:d2:7b:7d:db:be:0e:f0:de:
bf:7a:43:b0:ca:39:21:20:7e:3a:83:1f:77:44:c7:
d9:e3:93:58:73:45:a1:a2:c5:95:bd:0a:fd:c3:7a:
67:ce:4f:10:7d:13:22:32:5f:91:9f:7a:b4:80:bb:
db:1b:73:a1:87:20:f6:c4:7e:36:45:83:0d:4f:7b:
11:da:23:b8:57:5e:00:29:15:4b:9e:b0:46:4a:9b:
cd:5c:e8:27:7b:65:dc:77:79:06:e5:0b:2c:d5:1f:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AD:46:BF:A9:1F:48:17:4B:13:D9:0C:8C:FE:28:BA:FC:99:84:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/0452626c-b350-3c64-9853-0aa9b7b8b10e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:3a:9d:a6:ea:99:1b:5d:bb:f7:67:cf:ae:6c:fc:38:a2:ad:
8f:ba:4b:a1:98:20:a4:f6:63:43:fd:be:a8:08:77:8d:d4:48:
54:d3:f9:12:dc:9e:9a:9c:f9:ca:0a:c1:6d:86:70:ba:f6:23:
82:b9:ea:b6:ab:fc:82:26:85:7f:50:11:bb:51:c8:fa:2b:f5:
9b:97:31:aa:aa:1a:b0:83:a6:e6:1e:93:ad:1d:cc:fa:0c:1e:
6b:6a:8a:cb:81:57:cf:56:34:1f:c1:12:0b:d7:6e:13:e8:04:
7d:89:04:1e:0a:8d:9c:de:43:af:6e:53:7d:25:2d:28:c9:32:
68:ca:db:f1:33:55:fe:11:8e:c1:e0:e1:b7:68:f9:ac:1c:c5:
0e:81:de:56:59:af:6e:6c:05:3a:95:42:ba:a6:43:98:ae:bd:
99:e0:ee:dd:bb:40:aa:82:71:49:0c:12:9b:b6:2a:48:39:c5:
5a:de:14:c7:c2:04:c9:d7:40:9d:09:86:ac:05:91:97:6a:9a:
6a:68:95:92:f9:a3:7b:04:05:86:a6:4d:98:a6:96:ab:0d:86:
18:a1:e4:a4:66:1e:f2:55:25:24:e0:03:b7:f0:f4:39:30:db:
73:c7:85:a0:b9:0f:32:aa:6c:46:6a:0b:a2:66:79:62:74:2e:
0b:60:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:32:43 2024 by rpki-client on console-fra.rpki-client.org