Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/3dfbfc16-1de7-3964-8644-5929c9b67953.roa
File: 3dfbfc16-1de7-3964-8644-5929c9b67953.roa (raw, json)
Hash identifier: yXG6OgqCiGA/eQXOEpJhPdYZ0LwOtI+D6USkcKujSIQ=
Subject key identifier: 4C:AA:CA:01:10:36:3F:5A:EC:CB:EB:C1:E6:F5:75:72:B8:78:3D:7C
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B580BB4CCC2811262D87100
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/3dfbfc16-1de7-3964-8644-5929c9b67953.roa
Signing time: Thu 05 Dec 2024 15:11:07 +0000
ROA not before: Thu 05 Dec 2024 15:11:07 +0000
ROA not after: Wed 05 Mar 2025 15:11:07 +0000
asID: 376
IP address blocks: 132.213.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:58:0b:b4:cc:c2:81:12:62:d8:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:11:07 2024 GMT
Not After : Mar 5 15:11:07 2025 GMT
Subject: CN=4b63122b-f8d5-4089-864e-3e13123b7f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:a2:98:be:20:4a:96:42:25:a1:79:92:d5:
50:d2:f7:4f:d2:ab:62:39:0d:32:ba:10:98:58:0f:
e2:98:42:08:b0:40:af:a6:01:4e:97:be:19:51:ac:
e1:45:5a:48:9b:59:53:29:1f:d7:f1:a5:7e:27:76:
0f:90:4c:73:6b:a4:d4:60:82:b7:bf:d9:c3:c1:7c:
70:2e:ac:54:24:3c:e4:f3:37:4c:bd:99:97:5f:ea:
a8:30:e3:07:82:f8:c5:d1:6c:fd:cb:d2:18:f3:d5:
ff:f5:5b:17:96:ed:1f:8a:3e:0a:b1:d8:35:34:d1:
cf:21:dc:cf:f6:75:43:37:01:ae:2c:4e:e0:ca:41:
5a:77:07:19:8f:1e:d2:69:94:7b:45:54:86:9f:d0:
83:61:f3:5b:ae:24:ac:ff:ff:ef:be:f6:89:f2:70:
6f:1e:bc:00:03:93:ff:52:4d:3a:8c:92:5c:f8:21:
1d:59:05:ed:34:a8:15:4d:70:f8:a3:b8:cc:10:97:
57:fe:6e:4a:57:fd:0f:e0:39:22:32:dd:c5:34:ee:
b8:4f:ac:9f:71:ca:e0:ca:d3:21:d0:b9:15:a5:22:
e5:3b:48:c9:5f:8a:25:5f:be:2c:f0:a6:22:a9:5a:
bf:2e:43:89:98:4f:69:4b:fe:21:fc:04:91:b4:72:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:CA:01:10:36:3F:5A:EC:CB:EB:C1:E6:F5:75:72:B8:78:3D:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/3dfbfc16-1de7-3964-8644-5929c9b67953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:9d:4e:82:ea:b6:82:b1:ea:c8:a0:c4:3e:be:26:d5:78:b8:
d2:cc:f5:cc:00:4a:4e:00:71:f6:f7:f8:a9:43:b6:1c:6b:c3:
61:5b:73:56:53:71:a3:9d:71:02:b9:5d:90:25:83:f4:39:f5:
67:69:fb:9c:a6:91:ba:e7:d9:f2:3c:e9:ef:83:a6:81:a9:27:
a1:23:f0:79:f1:20:66:df:55:a3:8f:a4:09:76:17:06:ff:43:
60:7f:26:92:b4:1a:9b:2e:4a:b3:3d:12:c7:f5:0c:dd:43:e4:
8a:2e:f1:d2:7c:ec:e7:84:df:d3:c1:62:03:6c:07:b5:2a:56:
76:f9:43:fb:37:32:8d:25:ce:8b:49:24:f7:34:fe:e0:0f:a8:
e3:ce:22:a3:fd:d3:6c:13:c9:43:be:dd:cc:66:e2:a0:7b:bf:
04:de:fa:f2:29:84:e0:c4:f8:ec:65:5e:09:13:af:ec:db:2f:
38:18:0e:0c:8f:c8:1a:08:5b:3f:41:5f:49:92:a1:94:78:5d:
fa:57:a8:d6:d1:1d:cb:47:4b:5d:4d:9c:1a:0a:94:0a:a8:92:
73:8d:69:65:d5:b0:22:e1:c9:3e:2e:67:fd:b5:6f:a0:bd:ca:
eb:81:5b:ed:6d:7b:ab:8b:5a:f1:3c:85:d4:2c:27:ca:0b:9e:
30:28:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:12 2024 by rpki-client on console-ams.rpki-client.org