Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/9f7c4957-60b8-35a9-a7e9-d9be0a87e682.roa
File: 9f7c4957-60b8-35a9-a7e9-d9be0a87e682.roa (raw, json)
Hash identifier: VtFIXcl9vYVQfveXv/bU3cg2HNdBu0CAPuJjElJfNHw=
Subject key identifier: 64:FE:5F:73:DA:95:55:AD:48:96:E0:3B:51:5B:27:27:70:12:5E:C8
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B69F1353AA8517148050F00
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/9f7c4957-60b8-35a9-a7e9-d9be0a87e682.roa
Signing time: Thu 05 Dec 2024 15:47:09 +0000
ROA not before: Thu 05 Dec 2024 15:47:09 +0000
ROA not after: Wed 05 Mar 2025 15:47:09 +0000
asID: 376
IP address blocks: 132.213.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:69:f1:35:3a:a8:51:71:48:05:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:47:09 2024 GMT
Not After : Mar 5 15:47:09 2025 GMT
Subject: CN=86609177-8b13-4ae2-a872-114a9b741939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:6b:5c:d5:ce:bb:e6:de:6f:5b:e7:8b:25:
ad:ce:a4:15:a9:53:9e:18:61:25:2b:83:be:cd:2f:
83:0a:ee:45:4c:ed:a5:d4:5d:bf:09:78:f9:7d:2b:
5c:35:f8:68:2f:83:ee:75:61:84:5c:a4:33:36:51:
6b:83:66:40:19:7b:61:40:0e:2d:e5:20:1c:50:65:
0a:1d:6b:87:d0:9e:b2:43:71:97:a7:87:27:3e:e8:
dc:d1:18:c2:91:16:49:2a:5a:12:30:63:b4:25:1b:
f3:63:90:29:44:bb:32:4f:46:6e:d1:50:8d:af:fa:
8e:2a:6d:81:63:3b:02:d8:0c:86:b3:fb:84:1b:86:
60:0b:d1:48:38:28:7f:38:9a:a7:5d:56:0b:b4:0c:
26:fa:cb:7a:ba:65:e0:1d:c2:9b:5c:d6:8d:49:e0:
33:54:a8:e9:c7:0f:01:29:52:f6:2a:13:14:69:26:
1a:99:fe:1f:c6:f0:45:16:f8:fa:bb:d9:aa:2b:04:
13:10:de:69:b2:51:9d:b8:5c:fe:d6:1c:fb:69:96:
bf:87:20:fe:ed:27:2b:33:a2:cb:d2:d0:d3:2a:f9:
72:64:66:fc:b1:36:33:f5:30:60:bd:67:9d:dc:47:
f7:cc:ee:2b:5a:7a:77:41:c2:e8:5e:2d:01:68:00:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FE:5F:73:DA:95:55:AD:48:96:E0:3B:51:5B:27:27:70:12:5E:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/9f7c4957-60b8-35a9-a7e9-d9be0a87e682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:25:c1:e9:32:f8:a2:76:53:10:52:80:be:56:b5:76:85:6e:
ac:86:ae:25:2a:d2:b1:63:45:ac:d4:74:f7:62:6b:a5:4e:cb:
1c:8f:ac:4e:82:96:4d:c1:6e:5a:5b:f4:82:ef:52:c9:4e:ba:
a5:23:12:ca:4a:2c:5b:f9:66:62:64:5d:c3:c5:de:92:90:43:
9d:fd:fe:a5:b6:cd:e0:f0:18:d2:0c:53:6d:d7:24:9c:61:55:
d0:48:76:c9:fb:41:db:53:df:ed:11:1e:7a:0b:97:ad:68:bb:
d3:21:53:97:a7:7f:6c:ee:9d:01:ae:7f:c4:1c:b2:7e:6a:e3:
74:2e:74:71:f2:1c:2e:ca:8c:83:c1:3b:08:84:6f:fc:e4:66:
a5:48:21:99:03:8f:4c:ef:8d:aa:18:b9:ad:39:bb:c8:c4:e6:
4d:9b:c6:bf:e1:42:1e:24:73:cf:3c:e0:e8:ad:86:4e:6c:43:
77:34:9d:3d:9e:d8:d8:92:5a:d3:14:e1:49:52:ff:74:99:6d:
7f:f1:52:a7:af:6a:e2:7d:b1:3d:0c:f5:32:5c:9d:29:c9:b1:
04:ad:c5:5c:2a:c4:f5:44:78:79:8e:06:dd:90:28:aa:52:05:
5d:07:b8:2c:2a:81:61:23:49:10:78:17:e5:f6:e9:32:38:8d:
c7:04:bb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:32:43 2024 by rpki-client on console-fra.rpki-client.org