Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/6cc1cf9b-6cdc-3bca-bde9-482b325433dc.roa
File: 6cc1cf9b-6cdc-3bca-bde9-482b325433dc.roa (raw, json)
Hash identifier: X9HISKebOqGaWu4f9S/8voTluXTUJOOb8dUtnZrcOPY=
Subject key identifier: 74:3E:F7:A8:3B:D2:68:A9:01:E7:37:12:AF:80:2B:BB:DF:76:E7:E7
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B5B6DA6B6D9BDD76C74EE40
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/6cc1cf9b-6cdc-3bca-bde9-482b325433dc.roa
Signing time: Thu 05 Dec 2024 15:17:56 +0000
ROA not before: Thu 05 Dec 2024 15:17:56 +0000
ROA not after: Wed 05 Mar 2025 15:17:56 +0000
asID: 376
IP address blocks: 132.213.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:5b:6d:a6:b6:d9:bd:d7:6c:74:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:17:56 2024 GMT
Not After : Mar 5 15:17:56 2025 GMT
Subject: CN=ae9615ab-4385-44e1-9e4f-0774298dc806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:88:90:4a:d1:89:55:7e:12:82:47:5a:22:58:
ac:3a:74:bb:56:05:be:06:a7:0e:d3:e8:81:eb:c3:
5e:e8:7f:3c:db:40:36:0b:fe:b1:39:7a:54:40:da:
a0:ae:98:37:29:ac:54:b7:63:e7:da:a5:6a:ed:0e:
19:cb:ef:ae:e1:04:b3:f1:b4:bb:50:bc:b0:df:53:
a7:69:da:5a:1e:b2:03:5d:99:fd:0d:33:65:a4:00:
01:32:d5:32:96:b7:e4:0f:1b:a9:31:11:04:d6:1e:
40:7d:8c:f3:3e:2f:0b:e4:17:40:a6:c0:94:9a:f9:
75:43:98:a1:4c:21:5c:31:eb:10:61:9d:02:c5:dd:
2e:e9:48:b3:23:46:99:95:30:51:91:a1:f1:f5:17:
92:59:46:95:14:5b:9f:3b:19:2b:ee:ea:14:fd:bb:
03:ab:6f:f1:23:0a:f5:fe:2a:9c:f2:f0:cc:fe:c2:
dd:b3:2c:ad:b8:46:63:d6:3a:2d:b8:a5:0c:17:80:
1f:aa:ff:11:08:38:ac:4e:2e:0c:ae:97:42:01:ea:
45:fd:c2:20:8e:39:19:6b:16:7b:39:28:46:1d:b9:
6c:0f:c0:2e:9a:bb:db:9f:6b:91:45:ab:c7:a4:4a:
e4:e0:0f:69:4a:21:05:5e:4e:23:07:44:b9:35:13:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3E:F7:A8:3B:D2:68:A9:01:E7:37:12:AF:80:2B:BB:DF:76:E7:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/6cc1cf9b-6cdc-3bca-bde9-482b325433dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:90:30:6a:ca:4c:3b:28:36:c7:0a:ab:31:6d:2e:66:9c:8f:
92:ca:3e:b5:35:1a:18:29:c8:df:86:a6:a2:8f:62:b9:35:79:
e2:83:38:21:81:92:38:03:e5:af:b1:c7:9b:f9:d3:30:c4:b6:
d8:9c:07:01:51:0c:09:c3:dd:40:c0:ac:12:6b:10:7a:e6:81:
cf:67:85:bf:d2:9e:c4:9c:50:99:ed:d4:e1:96:64:ce:70:1b:
4e:53:ab:21:68:75:1d:08:69:34:01:e2:08:37:7b:da:cb:1d:
0d:e9:15:7f:a0:7f:c7:90:46:91:dd:20:d0:bf:75:02:6e:10:
53:ac:4a:a6:6c:eb:9a:88:67:f5:7b:a0:7b:24:5e:2c:7a:3a:
99:69:e6:e9:8b:b0:a1:b0:2e:07:87:06:05:87:c4:5a:c1:61:
01:71:20:20:28:18:75:fd:cd:f2:ac:5b:03:f9:b6:ef:3b:bf:
12:d4:83:6a:db:6e:d1:a0:84:81:0a:2e:29:68:55:1b:5e:48:
d0:fc:ef:a4:71:b6:29:03:51:55:ad:32:f9:b3:b0:9f:db:b9:
bb:55:1a:c8:65:10:c0:1b:63:0b:33:9a:c5:b8:0b:0b:d6:37:
04:ba:cb:c7:85:05:0d:59:8b:d7:23:8f:66:79:cd:c2:bf:dd:
e9:ad:83:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:32:43 2024 by rpki-client on console-fra.rpki-client.org