Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/2e77b4f1-bf45-3a70-a5ee-f8d1922b8165.roa
File: 2e77b4f1-bf45-3a70-a5ee-f8d1922b8165.roa (raw, json)
Hash identifier: ubKaYEHCoF8Tf7mDT3q1fl9eMyJk4/IeK4vsLcpRYkE=
Subject key identifier: EE:5C:60:29:B7:24:8A:D7:DB:AB:C0:97:57:01:A6:40:77:79:C7:D4
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B658DCFB475F54CAECDC7C0
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/2e77b4f1-bf45-3a70-a5ee-f8d1922b8165.roa
Signing time: Thu 05 Dec 2024 15:38:20 +0000
ROA not before: Thu 05 Dec 2024 15:38:20 +0000
ROA not after: Wed 05 Mar 2025 15:38:20 +0000
asID: 376
IP address blocks: 132.213.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:65:8d:cf:b4:75:f5:4c:ae:cd:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:38:20 2024 GMT
Not After : Mar 5 15:38:20 2025 GMT
Subject: CN=517ebd27-cfc3-4dbd-b46a-07dddbeb9093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:a1:21:93:d3:10:f6:94:cb:c7:ee:43:e8:
dd:fb:8b:21:29:07:78:a0:9e:22:ab:97:77:ee:c1:
8b:4a:a3:42:08:2d:b5:b7:20:87:6e:80:fd:d3:d6:
c0:79:db:8f:43:2d:10:e6:da:29:d8:27:70:72:21:
0b:1a:ab:53:76:c7:a5:06:8c:dd:a1:32:7f:89:2e:
c6:0e:7f:6c:07:3f:52:4c:fd:bd:9e:3e:8c:18:31:
c7:98:3b:e5:5e:ff:84:86:bd:e6:c9:1c:fb:c9:da:
96:d4:2c:ac:9c:ef:2d:f3:c0:23:cb:e0:a8:42:9d:
93:22:91:8a:b5:98:20:69:b7:1d:a0:8f:a0:3a:21:
9e:44:ff:23:28:bc:da:d0:69:ff:ab:c2:da:6f:8e:
1b:19:2f:40:1b:4d:08:ba:1a:b8:0f:38:af:cb:37:
da:ca:86:50:c2:65:9c:66:42:df:5d:6d:a6:6f:73:
23:f7:73:8d:9a:4d:eb:f0:1e:5f:3b:a7:46:d4:de:
2a:97:c0:5e:84:02:9b:40:e5:7f:59:30:88:f1:74:
72:df:4f:70:cb:52:fe:e8:b9:85:69:a1:d1:ed:7e:
43:4b:bc:c3:76:09:55:a1:be:24:27:43:7a:21:84:
e2:8e:f6:bb:97:97:f7:9c:e3:0d:fd:19:dd:de:1f:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5C:60:29:B7:24:8A:D7:DB:AB:C0:97:57:01:A6:40:77:79:C7:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/2e77b4f1-bf45-3a70-a5ee-f8d1922b8165.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:42:89:ba:9a:31:b2:ed:35:da:77:e8:78:15:97:8c:53:bd:
98:96:32:94:20:74:b2:1c:e9:77:ea:a9:e9:3d:0a:26:f7:ea:
aa:0e:0f:9a:a4:dd:dc:ec:7c:97:42:ee:0b:13:24:ff:3f:56:
9a:a6:47:e6:df:08:d8:72:93:0a:7b:f0:91:a8:1d:e4:a2:16:
a3:f7:83:d4:e8:32:73:80:2d:c3:38:fc:eb:d5:47:9b:5a:64:
63:f9:67:0c:2b:b0:53:7e:13:38:5c:96:67:6f:de:54:5b:13:
f9:57:e0:9a:44:7b:0e:3f:da:39:7e:7f:45:9e:0c:b0:5c:69:
7b:27:49:eb:c4:e4:36:87:22:8e:c0:43:2e:a0:e6:9c:7e:03:
02:d6:a7:63:56:cb:cb:93:ba:50:1b:f3:2e:41:6b:94:40:0c:
72:92:d6:85:c4:48:b5:14:c6:7e:ef:a9:02:ba:46:1b:7f:2e:
c1:33:ff:e3:f5:f2:2d:c3:80:32:c1:5b:91:39:42:2a:9a:5c:
2d:9a:e9:1d:fc:83:80:a9:f6:c0:c8:12:24:3d:4f:70:b6:a2:
34:36:44:4f:1d:25:53:c8:be:ab:c6:e8:46:66:48:c4:b5:68:
14:31:e8:35:6b:46:c3:f2:fa:80:e0:5c:5d:6e:94:b4:45:11:
2f:4e:53:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:12 2024 by rpki-client on console-ams.rpki-client.org