Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/41956375-afdf-3b59-b80f-489a21aaece6.roa
File: 41956375-afdf-3b59-b80f-489a21aaece6.roa (raw, json)
Hash identifier: F7/NLndOpTLXoZjRH3IA+nxbhiRCcOVeDAK7+BofM5o=
Subject key identifier: B1:EA:15:75:8B:47:97:89:E9:A8:97:E5:BE:2B:BC:40:81:78:C4:5D
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B5D48FA874A3CFD79A6B100
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/41956375-afdf-3b59-b80f-489a21aaece6.roa
Signing time: Thu 05 Dec 2024 15:21:40 +0000
ROA not before: Thu 05 Dec 2024 15:21:40 +0000
ROA not after: Wed 05 Mar 2025 15:21:40 +0000
asID: 376
IP address blocks: 132.213.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:5d:48:fa:87:4a:3c:fd:79:a6:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:21:40 2024 GMT
Not After : Mar 5 15:21:40 2025 GMT
Subject: CN=42a4de98-3dde-4c64-a91f-68f316af3a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:3a:bb:81:14:5b:53:20:59:f9:08:7a:74:
dc:72:5c:7a:4c:60:7a:46:55:60:c4:3e:d4:ea:43:
11:e5:ef:a6:c0:65:6d:98:11:24:69:e9:13:be:45:
45:ee:b5:ad:ae:71:5d:23:b3:13:f7:9e:09:3b:41:
6e:6b:37:71:98:89:f0:62:c8:c7:00:fc:b3:74:96:
33:43:0b:72:54:77:d1:06:44:a5:5f:db:1d:3f:7a:
9e:69:01:47:a4:de:99:8e:d6:12:c5:35:40:1e:f1:
7a:d8:8b:06:42:ee:59:e8:d6:38:c2:92:bc:94:af:
fe:52:43:70:d6:75:cf:24:cb:5e:db:2c:19:c2:6a:
8b:28:f1:18:09:3e:f2:1d:43:0b:d0:40:67:2d:bf:
4d:a8:22:49:a9:a2:e9:94:81:4e:ce:d8:87:dc:19:
54:dd:f2:26:ea:75:56:e6:ab:ca:f6:f2:d0:37:b2:
13:c0:77:3d:4c:3b:03:20:91:78:c1:29:57:5a:fb:
6f:2b:5b:39:67:8e:01:43:e3:9a:7c:cc:bb:ad:3f:
ff:97:af:cd:27:07:4c:23:ad:e5:c6:58:4c:ba:cd:
93:5d:40:81:f7:0d:d0:08:52:e1:2a:b8:94:c5:f1:
04:cd:bb:0b:b3:6e:5b:ea:1a:96:ea:f8:61:62:62:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EA:15:75:8B:47:97:89:E9:A8:97:E5:BE:2B:BC:40:81:78:C4:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/41956375-afdf-3b59-b80f-489a21aaece6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:d4:0a:65:96:70:49:ba:f1:91:d4:13:3e:6e:df:b3:36:51:
60:f7:b3:28:60:d5:7b:91:9d:4a:e3:73:36:46:ad:41:87:d8:
22:72:90:f1:3e:93:23:90:0d:6e:75:93:75:2c:4d:55:d5:76:
f1:bf:46:13:30:c1:91:e0:44:38:f2:1c:51:02:8a:ff:af:bd:
db:22:24:e5:bb:9c:51:32:46:7c:c3:f3:17:45:f3:28:c7:2c:
41:9d:fa:67:58:73:14:fd:9a:27:2f:bc:bb:49:e9:6f:35:05:
f8:6c:b3:24:b9:a7:5d:1d:50:a6:81:38:23:2b:b1:2e:4a:73:
3f:c7:10:02:af:37:55:7d:99:ee:95:8c:ad:67:9f:13:27:ca:
2e:0b:74:a0:42:95:55:ce:ba:76:fa:a9:7c:18:33:28:77:4b:
80:2d:de:47:96:17:e5:4b:fc:43:d5:b1:5e:da:8e:d0:8c:96:
e5:d5:b9:fa:fe:11:ee:14:67:75:7a:cc:80:2a:ab:4c:26:60:
65:82:2c:a4:a7:4a:a0:6d:bc:98:7c:33:89:18:46:7f:54:10:
4d:5b:0d:55:1b:1f:44:37:d1:05:95:fa:28:bf:0e:cd:fb:72:
5f:94:3c:0a:38:09:86:af:fe:95:16:5e:b5:c1:51:2c:f1:d5:
03:33:9b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:13 2024 by rpki-client on console-ams.rpki-client.org