Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/3848df5f-a237-30cf-a77b-4a45a5841c22.roa
File: 3848df5f-a237-30cf-a77b-4a45a5841c22.roa (raw, json)
Hash identifier: thyTnJucHtp49y9c/nlcO+rQYuGr9QOAPOHaXTNEb0o=
Subject key identifier: 05:FA:50:5A:3B:EA:CF:B6:67:EA:93:99:D2:28:08:F1:F6:C7:5B:61
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B689B775523D14217CEDA00
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/3848df5f-a237-30cf-a77b-4a45a5841c22.roa
Signing time: Thu 05 Dec 2024 15:44:29 +0000
ROA not before: Thu 05 Dec 2024 15:44:29 +0000
ROA not after: Wed 05 Mar 2025 15:44:29 +0000
asID: 376
IP address blocks: 132.213.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:68:9b:77:55:23:d1:42:17:ce:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:44:29 2024 GMT
Not After : Mar 5 15:44:29 2025 GMT
Subject: CN=b11d8be8-3eed-48b8-8809-81c2719647f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cf:8c:33:5d:da:77:72:72:34:f8:da:c3:63:
b2:68:cf:1d:8b:85:07:cf:58:33:4b:2b:83:df:d5:
62:6c:72:3a:13:e5:98:41:b7:0b:0a:bd:f4:9f:e3:
ae:81:a7:e6:b3:44:49:81:3b:d9:51:00:55:c9:2a:
f3:a7:da:94:33:7b:43:9f:8e:70:de:3f:dd:bf:2a:
67:05:91:bb:2a:10:4f:e2:15:14:0e:fe:c8:b0:e7:
6f:e3:bd:07:e1:16:cc:40:41:18:84:7d:55:78:00:
e9:06:7c:9e:17:ab:c9:ad:fb:3e:66:8e:4d:a2:a8:
53:b7:f2:e1:fb:37:d5:12:40:7c:f2:8c:07:c0:3b:
91:5b:bd:9f:1f:8a:2a:9a:5e:56:13:66:42:73:4f:
15:57:5e:1d:25:4c:cf:5d:a0:d9:29:d6:99:2e:52:
c7:ac:5d:4f:a7:84:9a:3a:3a:c1:0c:f6:0f:39:c9:
57:40:93:07:43:1b:38:1e:c4:8b:16:45:6e:e2:6d:
16:d8:e7:d5:2e:12:89:2b:8b:f8:62:28:36:84:8c:
e1:9d:86:b3:3d:26:11:1c:73:57:77:47:81:67:62:
57:0e:53:45:59:53:fa:84:dd:1f:69:b8:96:c0:d6:
00:d3:96:cf:54:14:68:84:ae:2d:ea:31:c7:ca:d3:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FA:50:5A:3B:EA:CF:B6:67:EA:93:99:D2:28:08:F1:F6:C7:5B:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/3848df5f-a237-30cf-a77b-4a45a5841c22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:2d:d5:96:2f:ec:79:46:21:11:fa:88:44:36:0a:9f:72:b4:
91:fe:99:0b:4e:73:08:71:85:ea:95:e1:ef:fa:7b:cd:07:d7:
a4:66:d7:8b:98:5c:0f:cd:e3:89:26:34:14:11:64:bf:fa:38:
65:bf:2f:0c:51:d1:15:c6:0a:a1:74:2e:97:55:1f:f3:f7:42:
60:3b:f4:6a:2b:de:c6:9e:7f:ad:c1:44:4e:26:ae:c2:a2:b7:
80:21:ee:7a:07:60:74:e9:29:75:27:e5:0b:62:a6:d5:7a:63:
d1:88:c3:65:d7:2a:29:cb:37:04:02:5d:7b:f2:cb:80:90:8f:
cd:ce:1b:99:12:46:b5:1a:08:3a:ef:29:fc:52:0e:bf:3b:ba:
54:02:00:34:27:e9:4d:55:4b:dc:93:ba:34:b4:23:2a:03:1e:
7a:21:20:e2:b8:af:0c:6f:36:45:19:a3:76:2b:b3:6c:88:85:
78:2d:66:35:7c:ef:db:f2:82:16:89:63:12:22:7c:7a:7a:3c:
df:af:16:33:c3:d9:b1:e8:43:72:99:92:0e:74:59:d7:cc:c8:
c7:1d:19:3e:97:8a:16:dc:30:46:65:30:d7:38:54:57:00:7c:
ce:e9:8b:a2:d0:d2:66:71:92:25:ee:1f:b5:95:c8:e4:f6:ab:
3a:1f:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:32:43 2024 by rpki-client on console-fra.rpki-client.org