Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/5daff700-8143-3919-824d-a4df031f427e.roa
File: 5daff700-8143-3919-824d-a4df031f427e.roa (raw, json)
Hash identifier: 9dJNDvWzFYPlbuI//DtdiCR6kHQtGvylZvcJqcob5kw=
Subject key identifier: 4D:52:86:FB:90:4F:C5:EA:00:9B:6B:E4:F2:DD:97:EA:D7:3D:9B:9A
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B6B0DDC9CEE1031CA4D7D80
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/5daff700-8143-3919-824d-a4df031f427e.roa
Signing time: Thu 05 Dec 2024 15:49:25 +0000
ROA not before: Thu 05 Dec 2024 15:49:25 +0000
ROA not after: Wed 05 Mar 2025 15:49:25 +0000
asID: 376
IP address blocks: 132.213.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:6b:0d:dc:9c:ee:10:31:ca:4d:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:49:25 2024 GMT
Not After : Mar 5 15:49:25 2025 GMT
Subject: CN=ef97bbdf-d3e2-47cd-9c02-75bbc09f59ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f1:79:b9:ec:4f:ee:32:3e:95:d5:70:ab:f8:
82:2e:e8:c8:a5:50:9c:f0:87:f5:2f:d1:1b:e5:be:
5c:bb:24:59:b7:b1:a3:f8:46:ad:93:85:20:d2:58:
ed:45:84:cc:5c:12:64:3e:d9:e2:3b:52:bd:2a:5b:
d7:37:b9:64:9c:dd:4c:7f:f3:77:0b:c2:50:2a:b1:
35:cc:c9:98:68:9f:f2:38:43:c0:ba:d0:79:58:50:
22:e8:af:8b:22:3d:87:2b:48:cf:dd:42:23:7c:b9:
4c:a6:83:40:f7:7c:7d:cf:cc:a1:fe:25:3d:8b:72:
a0:1f:cd:f7:1d:8c:ad:8f:09:6b:9e:75:7b:ab:52:
f3:03:d6:ea:58:23:f1:c7:d5:30:b0:83:53:65:4c:
3a:a7:2b:c0:73:c9:cb:a8:66:46:30:09:e2:e7:04:
04:40:47:b8:47:9b:c9:64:fc:d7:cd:f5:e6:8e:18:
b9:19:d1:8c:1f:2b:f9:7f:aa:92:c6:ea:80:b0:02:
b2:85:55:16:e6:ba:8b:30:4b:9c:0f:de:a3:a8:b3:
4c:88:7a:48:af:ce:09:0d:54:37:d3:1c:8d:4d:e7:
aa:47:af:77:25:e6:e4:ae:e5:83:c0:a1:d3:7f:5b:
16:ad:9f:6b:3c:cd:eb:34:3e:01:60:b7:93:7c:84:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:52:86:FB:90:4F:C5:EA:00:9B:6B:E4:F2:DD:97:EA:D7:3D:9B:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/5daff700-8143-3919-824d-a4df031f427e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:1f:5c:d8:98:23:f3:7f:2a:54:c4:e5:27:bd:ad:3f:f2:22:
6b:8c:a3:e4:ae:16:a7:9a:28:0d:0d:b1:1a:f2:ea:10:a6:03:
88:4e:25:8e:37:b5:62:27:b5:bb:15:aa:33:85:d6:7f:21:50:
26:87:4e:79:1e:b3:fc:d2:8a:b5:c5:62:99:bd:2a:fd:51:f7:
ec:0e:ab:65:1c:6b:93:79:da:dd:32:dc:02:a1:c8:35:3d:07:
e7:0b:cb:17:74:6a:41:fe:b7:f1:d0:3c:46:86:b4:49:30:3e:
22:f8:35:6c:0c:0a:e1:86:f8:6c:33:ec:2c:66:ed:91:f7:aa:
85:05:28:9d:11:c3:09:6a:20:e7:9c:6c:0a:01:b6:b1:d2:9d:
13:1a:39:67:59:78:6b:5c:a4:a2:43:47:da:29:8c:c9:96:0e:
ac:6a:b1:4c:6a:02:79:94:eb:9b:b3:93:9f:e4:b3:c2:d2:ea:
fb:ab:b4:af:31:9c:bf:fa:8e:92:d3:83:f7:99:2d:9f:53:f9:
63:7f:09:a0:e9:f7:88:70:dc:09:b0:28:0c:6f:2d:c7:e9:7f:
85:8e:6b:7d:dd:19:a2:cb:e3:87:fd:98:3e:0b:c5:6d:7b:7a:
73:02:50:4d:c4:7d:10:c7:54:2e:bb:cc:6b:4c:84:a4:4c:71:
f4:10:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:32:43 2024 by rpki-client on console-fra.rpki-client.org