Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/3868df1c-c5d1-35d6-943c-d7b9859ef997.roa
File: 3868df1c-c5d1-35d6-943c-d7b9859ef997.roa (raw, json)
Hash identifier: aPebpECND+Pts7QW8Bh+GaDKtKeIQTydNklgFw2Fp8E=
Subject key identifier: 31:EC:5D:4B:DA:27:FC:24:62:21:C1:C5:5E:D2:8C:28:64:29:5D:95
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B6D4C7E4201F734BB8E4C00
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/3868df1c-c5d1-35d6-943c-d7b9859ef997.roa
Signing time: Thu 05 Dec 2024 15:53:56 +0000
ROA not before: Thu 05 Dec 2024 15:53:56 +0000
ROA not after: Wed 05 Mar 2025 15:53:56 +0000
asID: 376
IP address blocks: 132.213.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:6d:4c:7e:42:01:f7:34:bb:8e:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:53:56 2024 GMT
Not After : Mar 5 15:53:56 2025 GMT
Subject: CN=bdd2f065-9315-49e2-9099-a51029274936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:91:52:b8:e4:6a:ae:59:df:83:19:3f:06:
2c:f0:dc:31:10:f8:00:c1:80:e2:6e:64:ea:3a:0c:
85:35:9d:17:6a:18:cd:19:6f:28:a6:3e:4c:f0:0d:
48:19:b6:e4:9a:63:9c:d2:2f:fc:bb:13:6f:54:ed:
96:22:f4:59:ed:43:d7:bd:d1:75:bc:bb:9b:68:b0:
ad:cd:85:83:06:8d:c5:be:6a:df:6d:06:f9:af:a3:
08:dd:3d:1c:78:cf:38:d5:57:af:c2:d7:00:31:af:
b9:98:5a:0e:03:b2:de:0d:d8:6e:0b:58:70:18:f0:
e1:5b:b9:73:14:cd:b5:ce:25:9e:be:8e:58:6a:1a:
3f:ac:43:97:6f:62:81:d3:e0:81:04:d7:24:64:cf:
3a:ff:a6:5c:fc:69:e6:c3:05:36:39:31:4a:eb:26:
6b:12:53:7b:b9:f0:c1:c9:e3:73:91:c0:6c:58:b1:
c7:70:9b:ee:34:99:b4:28:cc:b8:47:62:e4:23:58:
6f:e9:a8:da:42:71:0f:c5:2c:1e:b1:ba:03:07:30:
61:bd:51:b4:de:7b:90:44:2f:af:c2:23:ff:52:64:
44:27:94:cf:61:ce:e9:39:f9:ab:27:99:b3:6c:4a:
91:2f:f9:27:dd:f3:4a:48:52:69:60:ad:98:03:55:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EC:5D:4B:DA:27:FC:24:62:21:C1:C5:5E:D2:8C:28:64:29:5D:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/3868df1c-c5d1-35d6-943c-d7b9859ef997.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:01:cd:02:33:d2:d5:eb:97:bf:2f:64:e9:3f:fa:2d:48:51:
23:65:16:1b:5d:4a:4a:42:c3:bd:fd:c3:3f:7c:29:11:90:82:
75:37:ae:79:1e:e3:41:06:b9:d5:9e:cb:47:aa:1b:ab:05:4c:
74:00:01:58:ab:8a:9e:49:40:7e:0d:ef:bd:9e:5e:24:6a:a8:
83:69:73:56:b4:ad:f4:32:ae:c1:e6:79:28:d4:68:99:52:77:
d6:ab:f8:b8:18:26:e5:8b:e4:9f:6d:60:10:f5:c7:51:a2:1e:
b2:66:d1:26:8d:78:90:ac:6f:d9:0b:a5:ba:16:70:ee:da:54:
9c:93:bd:77:b3:d8:28:a1:82:a4:de:2c:66:61:78:f7:81:c9:
11:33:71:5d:49:aa:07:e0:9d:3b:20:c9:54:06:03:f2:97:20:
7b:e4:aa:62:bb:93:2a:d6:1e:5f:37:c0:32:39:f1:74:06:a7:
9f:7b:5a:2e:18:07:ec:c1:21:d7:23:da:38:ad:e5:8e:fd:4e:
a3:6d:03:da:d8:a1:5b:3e:ae:61:d9:d6:32:71:8b:5e:63:e6:
5a:bb:36:a7:a7:b2:cc:28:7e:93:76:0e:d4:d3:d9:d4:ed:59:
8b:c3:a4:80:18:27:64:6a:35:24:fe:6f:d7:85:28:f9:b9:a1:
03:f8:64:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:12 2024 by rpki-client on console-ams.rpki-client.org