Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/39d33c19-be4a-3153-83d0-8f28af891a90.roa
File: 39d33c19-be4a-3153-83d0-8f28af891a90.roa (raw, json)
Hash identifier: 2T8eHTwU8egog6MO3ixz+Y4h8Ow6gKyU4ZFuT41jDEE=
Subject key identifier: 80:F8:44:13:16:BE:06:B8:FD:BA:84:78:CD:74:76:23:D1:36:10:91
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B67D5644716AF4D958A5100
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/39d33c19-be4a-3153-83d0-8f28af891a90.roa
Signing time: Thu 05 Dec 2024 15:42:55 +0000
ROA not before: Thu 05 Dec 2024 15:42:55 +0000
ROA not after: Wed 05 Mar 2025 15:42:55 +0000
asID: 376
IP address blocks: 132.213.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:67:d5:64:47:16:af:4d:95:8a:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:42:55 2024 GMT
Not After : Mar 5 15:42:55 2025 GMT
Subject: CN=cdee5218-b9fb-4f02-9114-8bb3f30d2258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:be:98:e5:8a:dc:51:71:0d:db:b4:1c:ad:73:
cc:b5:ae:0a:8f:20:eb:62:a1:d3:c7:a5:c1:67:1a:
07:1c:ca:b0:51:0b:cc:9c:79:1e:5b:98:ed:82:4b:
a6:77:34:48:c5:4c:a5:ec:9e:d5:d8:5d:91:18:55:
44:61:23:6b:f0:1d:22:c4:d5:6a:e6:24:7f:de:c6:
ac:3b:55:55:35:8b:c1:63:29:08:5e:ae:ee:f1:0f:
a6:ad:30:f2:98:da:4a:9a:45:9d:53:2e:ae:42:40:
a4:0c:40:04:29:65:fb:8d:b9:6b:dd:6c:d1:64:8c:
b1:7c:94:ab:9f:f2:a0:09:5f:57:0c:e3:fc:34:c5:
8d:47:02:3a:db:3f:9f:6c:3e:f3:bb:5b:c5:28:93:
a1:c9:52:cb:46:a0:b4:6f:da:19:c0:7e:01:6e:91:
f7:c5:9e:d3:ea:02:67:b2:a2:83:24:1e:c2:e4:a9:
07:0e:7e:e3:9b:e2:60:fd:87:cd:80:ef:5d:a5:03:
d7:ff:e7:81:63:ff:84:c5:ac:62:e4:5c:bd:31:f7:
8b:bf:8f:16:92:db:df:59:54:4c:20:90:79:f8:b8:
c2:84:30:02:3f:02:8b:80:9e:a4:86:9c:03:15:00:
8a:6f:e0:64:e8:35:fe:3d:2e:8e:1d:57:f4:e1:ba:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F8:44:13:16:BE:06:B8:FD:BA:84:78:CD:74:76:23:D1:36:10:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/39d33c19-be4a-3153-83d0-8f28af891a90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:2c:78:3a:c4:57:75:71:26:b4:8c:f7:45:c6:16:49:94:4d:
43:69:b4:61:04:b1:74:6e:6e:85:46:48:08:b2:81:e4:27:2f:
37:1a:35:b4:c9:e0:f9:3a:22:51:53:91:b8:74:00:1b:d5:a5:
fd:0e:06:a9:44:b6:af:74:07:f1:16:b8:14:2e:8e:8e:95:ea:
14:57:d3:83:d9:93:ed:ab:ea:82:6e:04:44:12:77:c7:c3:c7:
72:6b:07:c3:6d:86:73:91:a1:1b:29:a6:1f:fb:4a:ee:08:16:
d4:2c:15:86:eb:5d:b0:58:7b:5a:4d:ff:6c:59:27:f4:4c:a2:
30:71:43:fa:b7:9c:dc:61:2d:c2:e9:fd:5a:2e:69:01:5c:aa:
fc:c5:28:07:64:99:09:e4:9d:57:9e:29:81:82:8d:5a:1f:3b:
8b:6a:28:1a:3f:16:96:0b:e5:5a:f6:14:f7:bb:29:93:02:38:
59:67:e9:bc:85:52:d6:a8:84:b0:7a:f5:ab:59:32:c4:6e:a9:
a2:68:83:4c:a0:88:90:86:f8:2a:5e:ef:42:07:72:cd:5a:e5:
f5:47:08:e5:48:ba:ec:e2:e8:a5:d1:3f:40:21:7f:a3:36:05:
9d:a8:34:5f:b6:17:d0:f0:88:4a:e5:d9:0a:a0:d4:05:81:81:
94:47:0e:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgbZ9VkRxavTZWKUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdlYzQ0N2EtOTE3MC00ZTExLWJhODAtMWFhY2E3NmZj
ZDQyMB4XDTI0MTIwNTE1NDI1NVoXDTI1MDMwNTE1NDI1NVowLzEtMCsGA1UEAxMk
Y2RlZTUyMTgtYjlmYi00ZjAyLTkxMTQtOGJiM2YzMGQyMjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb6Y5YrcUXEN27QcrXPMta4KjyDrYqHTx6XB
ZxoHHMqwUQvMnHkeW5jtgkumdzRIxUyl7J7V2F2RGFVEYSNr8B0ixNVq5iR/3sas
O1VVNYvBYykIXq7u8Q+mrTDymNpKmkWdUy6uQkCkDEAEKWX7jblr3WzRZIyxfJSr
n/KgCV9XDOP8NMWNRwI62z+fbD7zu1vFKJOhyVLLRqC0b9oZwH4BbpH3xZ7T6gJn
sqKDJB7C5KkHDn7jm+Jg/YfNgO9dpQPX/+eBY/+Exaxi5Fy9MfeLv48WktvfWVRM
IJB5+LjChDACPwKLgJ6khpwDFQCKb+Bk6DX+PS6OHVf04brM6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFID4RBMWvga4/bqEeM10diPRNhCRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82N2Vj
NDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFjYTc2ZmNkNDIvMzlkMzNjMTktYmU0YS0z
MTUzLTgzZDAtOGYyOGFmODkxYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjdlYzQ0N2EtOTE3MC00ZTExLWJh
ODAtMWFhY2E3NmZjZDQyLzY3ZWM0NDdhLTkxNzAtNGUxMS1iYTgwLTFhYWNhNzZm
Y2Q0Mi5jcmwwHwYDVR0jBBgwFoAU1/68eoDiDVphTAxi6PSMkDn+TL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82N2VjNDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFj
YTc2ZmNkNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhNWEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUseDrEV3VxJrSM90XGFkmUTUNptGEEsXRuboVGSAiygeQnLzcaNbTJ
4Pk6IlFTkbh0ABvVpf0OBqlEtq90B/EWuBQujo6V6hRX04PZk+2r6oJuBEQSd8fD
x3JrB8NthnORoRspph/7Su4IFtQsFYbrXbBYe1pN/2xZJ/RMojBxQ/q3nNxhLcLp
/VouaQFcqvzFKAdkmQnknVeeKYGCjVofO4tqKBo/FpYL5Vr2FPe7KZMCOFln6byF
UtaohLB69atZMsRuqaJog0ygiJCG+Cpe70IHcs1a5fVHCOVIuuzi6KXRP0Ahf6M2
BZ2oNF+2F9DwiErl2Qqg1AWBgZRHDu8=
-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:12 2024 by rpki-client on console-ams.rpki-client.org