Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/13faeb6f-7187-3094-b35d-e57ac573abcc.roa
File: 13faeb6f-7187-3094-b35d-e57ac573abcc.roa (raw, json)
Hash identifier: cxnrlBb+by3KTTUf3y6e8Gwps7IXEduVjgh5l5qNCq4=
Subject key identifier: 10:2E:64:83:87:BF:90:CB:12:FB:32:2A:37:E2:B9:13:0B:D0:8D:44
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B7196FEC8917D1112719EF0
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/13faeb6f-7187-3094-b35d-e57ac573abcc.roa
Signing time: Thu 05 Dec 2024 16:02:35 +0000
ROA not before: Thu 05 Dec 2024 16:02:35 +0000
ROA not after: Wed 05 Mar 2025 16:02:35 +0000
asID: 376
IP address blocks: 132.213.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:71:96:fe:c8:91:7d:11:12:71:9e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 16:02:35 2024 GMT
Not After : Mar 5 16:02:35 2025 GMT
Subject: CN=6bec086e-6ea3-40ad-9b1e-0fc0e89c623b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:d9:1a:84:23:b6:d6:e1:3a:e5:0f:e3:30:
b9:9f:64:e7:41:22:bf:a8:02:19:3e:c4:6a:63:62:
53:80:57:4f:38:3d:3e:d3:da:80:21:35:8a:db:09:
50:46:f7:f6:b9:28:89:d2:45:7a:4d:f5:17:60:60:
b6:0e:fe:8b:a8:90:a9:77:fc:6c:47:6d:77:81:2e:
43:ac:a8:4a:a5:d0:c4:0a:69:dc:b4:c3:19:f2:eb:
4f:1a:70:01:80:90:77:db:0e:18:04:a2:dc:c4:a3:
83:f7:9d:25:2b:5f:81:42:2e:aa:9f:5c:dc:d8:36:
9c:6f:f7:dd:a1:11:9c:cd:d3:97:60:a2:6b:f2:be:
ec:da:2d:b2:d2:6c:45:48:f9:2b:75:d6:e7:94:22:
69:8c:d9:6a:1f:a7:61:4d:a8:15:86:ff:c9:a1:c3:
bb:d5:a8:9b:a4:4d:93:a9:02:ac:92:d0:fe:f8:92:
bc:fe:c9:ae:f6:00:b1:60:84:04:2a:44:96:2b:20:
9a:27:77:66:8f:52:0f:15:1a:44:f1:69:57:cb:38:
a1:21:55:29:80:93:18:06:a0:67:a8:a4:f4:e9:22:
df:b8:08:a9:a8:ae:2a:87:fb:6a:cd:76:1e:d2:77:
f4:9c:a5:08:ea:9d:dd:65:63:82:9e:2d:78:25:c2:
69:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:64:83:87:BF:90:CB:12:FB:32:2A:37:E2:B9:13:0B:D0:8D:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/13faeb6f-7187-3094-b35d-e57ac573abcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:2b:e0:62:7c:51:99:8b:7a:85:15:bb:8e:17:fc:cb:d8:43:
47:d5:13:9b:6f:23:21:64:e7:2f:c0:50:bf:c1:3e:8d:ae:2d:
99:e4:30:ef:95:56:ba:09:60:3a:92:c7:ce:06:54:1c:34:4e:
bc:39:d5:f7:9a:03:42:da:e3:5c:a3:4e:2c:08:3b:66:87:7b:
c9:a1:1e:4d:3c:f6:d5:92:c2:ca:bb:8f:81:f0:fb:6b:cd:ec:
70:59:f5:82:8a:1b:ae:86:02:eb:9b:d2:bf:24:40:e0:19:cf:
64:29:c5:18:c9:04:13:87:27:58:1e:b5:8f:11:c0:3e:a5:d2:
ec:1a:7a:ec:32:2b:66:32:3f:5d:7d:3f:92:79:14:2c:dd:6e:
03:51:18:2d:d8:0e:ee:2f:24:6f:75:37:ee:75:95:17:b2:71:
7f:af:19:1e:d0:c1:08:28:d0:8f:b8:a5:1d:f4:ab:1b:86:f8:
02:5b:e3:23:15:ba:42:82:71:d7:d1:55:15:bd:c7:55:f6:49:
42:39:94:01:4f:1f:a8:15:13:da:e1:33:18:21:c0:0c:2f:82:
ea:d2:a5:1e:b4:0f:15:fd:80:79:07:3c:05:25:11:04:36:64:
74:07:3d:d8:3a:d2:32:77:0d:46:7b:cc:d3:1f:ec:68:09:7f:
e9:a5:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:12 2024 by rpki-client on console-ams.rpki-client.org