Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/41862a16-675c-3a27-bac3-88f6e11f8a9d.roa
File: 41862a16-675c-3a27-bac3-88f6e11f8a9d.roa (raw, json)
Hash identifier: MtA35SHYLOG9F80HjcZMo0G5Jmv8F3I7yX/k1PwvOjE=
Subject key identifier: EE:B3:DF:90:AD:9E:62:DA:7D:C0:88:7D:E5:DA:20:53:08:FA:09:8A
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B6939C4188C09C24A09B680
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/41862a16-675c-3a27-bac3-88f6e11f8a9d.roa
Signing time: Thu 05 Dec 2024 15:45:44 +0000
ROA not before: Thu 05 Dec 2024 15:45:44 +0000
ROA not after: Wed 05 Mar 2025 15:45:44 +0000
asID: 376
IP address blocks: 132.213.148.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:69:39:c4:18:8c:09:c2:4a:09:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:45:44 2024 GMT
Not After : Mar 5 15:45:44 2025 GMT
Subject: CN=82357f83-bca4-4ce3-86ec-d0a7dd40120a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:2e:68:23:b7:82:1e:50:13:30:70:ba:8e:
5c:a0:12:b3:70:cb:3d:c0:47:14:19:b8:5c:e2:56:
05:d4:60:3d:f7:90:d0:2d:ae:81:27:9d:92:d0:d6:
9b:15:28:ce:b4:68:d3:52:1f:45:1a:f0:40:b5:3d:
35:a1:03:17:86:d5:72:ba:57:ac:b2:35:b7:33:05:
c2:8e:c9:94:90:8c:6a:25:24:5c:a8:76:fe:46:5b:
f6:2a:46:84:c9:65:15:99:bb:67:a1:b4:62:f7:a6:
12:a4:2e:10:2e:72:80:f4:1c:fe:dc:ee:e4:c4:9f:
6c:88:7d:28:9d:b1:f8:cf:94:5e:53:c4:27:01:64:
28:dd:6f:a8:0a:50:8e:1c:d5:dc:94:9c:a6:ad:c9:
17:3d:ca:42:da:5b:96:f9:58:5a:ca:14:7a:fa:a6:
84:31:16:a7:2b:93:13:ad:ce:ac:7f:5d:34:34:af:
e4:0b:6f:24:06:43:74:a6:40:bf:04:c3:12:2c:2b:
70:46:1e:61:6b:35:79:ab:6a:2c:fc:ad:ab:27:ba:
5b:2f:14:8b:0f:68:e0:ed:d8:38:34:2a:04:5e:f5:
d1:2b:87:83:9c:41:5f:b8:f7:bb:07:20:0c:7d:18:
b6:4e:d2:e6:f7:89:3e:33:32:d7:47:a3:91:98:12:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B3:DF:90:AD:9E:62:DA:7D:C0:88:7D:E5:DA:20:53:08:FA:09:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/41862a16-675c-3a27-bac3-88f6e11f8a9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:77:38:a9:a2:b7:dc:55:76:71:dd:b4:af:90:fd:35:a9:6e:
bc:e5:46:37:ea:fd:d0:e1:70:a0:40:5d:56:79:9b:e8:33:5b:
ad:98:79:7b:b6:8e:12:a7:8c:bd:f0:e4:a9:43:d4:36:8d:b6:
3c:a1:3f:83:48:94:b9:51:9b:00:a9:5d:5b:3c:9d:db:b4:77:
ba:41:b1:19:9b:ae:01:d6:64:f8:f1:93:da:de:51:c2:9d:72:
86:21:c6:0a:06:2e:94:a0:37:39:2b:61:9c:e1:bc:f0:56:9c:
3a:c0:57:30:62:2b:0a:92:8f:f1:3d:e4:33:11:7e:b4:0f:ef:
ed:b2:8f:7a:4c:a8:a3:d2:b7:cd:a2:7f:17:8a:8a:a4:ca:2a:
9c:18:1c:e5:36:cf:49:5b:2d:4a:75:b1:41:10:17:10:57:cb:
fd:c7:ba:da:fb:58:00:c3:eb:33:f2:f8:5f:dd:83:51:05:a6:
18:65:ae:7a:d4:18:39:22:73:03:f6:b8:f1:c5:74:5f:f2:08:
29:57:85:f8:d5:b4:0b:4f:3f:4b:d8:a3:f1:f0:f6:83:b6:58:
8d:a7:36:71:11:74:87:c3:c5:64:2b:98:00:35:21:16:ff:51:
86:8c:9e:b1:d0:5d:ba:d3:b0:6e:f4:91:22:e0:51:9b:88:67:
c2:a4:54:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:32:43 2024 by rpki-client on console-fra.rpki-client.org