Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/b9021207-830f-3443-8512-d0f9f11c3e77.roa
File: b9021207-830f-3443-8512-d0f9f11c3e77.roa (raw, json)
Hash identifier: JFjmDANWImLYbMe1L6px610blKjouGNO4rXLGgufw9o=
Subject key identifier: E0:62:85:B8:57:0B:6E:91:DD:95:A8:91:36:D5:01:9D:7C:C7:C1:45
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B6C3B906E088E9BEE957FB3
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/b9021207-830f-3443-8512-d0f9f11c3e77.roa
Signing time: Thu 05 Dec 2024 15:51:47 +0000
ROA not before: Thu 05 Dec 2024 15:51:47 +0000
ROA not after: Wed 05 Mar 2025 15:51:47 +0000
asID: 376
IP address blocks: 132.213.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:6c:3b:90:6e:08:8e:9b:ee:95:7f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:51:47 2024 GMT
Not After : Mar 5 15:51:47 2025 GMT
Subject: CN=b73ca776-bd9a-4bfd-80cf-37da3c4c9935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b9:0f:50:99:28:78:b8:4e:f1:a3:e2:66:d2:
79:86:9d:61:e4:1b:8f:a2:29:7a:6a:9c:e2:21:46:
ff:b9:29:19:5a:37:60:99:d3:a5:a1:f8:15:27:45:
58:d3:8b:3e:ce:9f:7f:f2:18:ac:50:09:ec:a8:80:
84:29:11:d3:5d:7a:1c:c2:31:d1:ed:ab:9d:e8:1c:
5e:4f:d0:1b:9c:cd:51:0a:26:99:bc:90:31:c7:35:
fc:3e:93:ed:fe:bf:88:ca:0f:0b:e6:40:14:10:de:
c8:11:86:ed:c3:e5:58:b8:36:49:ad:89:6e:84:ee:
52:d7:d6:70:34:6c:b3:1b:a9:7b:3a:f6:e4:02:69:
4a:5d:cf:61:df:44:82:9a:2b:dd:d8:fe:11:a0:4c:
fc:c9:0e:a0:f8:8c:b5:d6:5d:8f:13:63:dc:56:7e:
6f:97:a4:17:7d:4f:97:96:7b:8b:cb:75:80:41:96:
6f:65:70:6a:c8:8c:75:4d:96:85:71:19:ca:30:a7:
da:84:4f:e6:40:9f:32:9c:f9:2a:7f:bf:63:fa:07:
82:ce:0f:95:d6:fc:da:72:a1:ad:a1:14:f3:6d:5a:
5d:7c:9f:de:30:75:a8:2a:0d:4b:99:e4:ed:ba:f9:
ac:6b:ef:e5:fd:43:5b:dc:93:c8:41:cb:d1:be:5a:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:62:85:B8:57:0B:6E:91:DD:95:A8:91:36:D5:01:9D:7C:C7:C1:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/b9021207-830f-3443-8512-d0f9f11c3e77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:59:41:2b:6b:18:49:24:1a:34:90:9b:bf:b8:78:c0:a0:cb:
d3:62:43:e7:9b:7a:70:3b:55:65:ed:f8:5a:f4:bf:27:fb:94:
e5:56:26:39:59:61:db:03:b3:fc:43:d7:7b:eb:00:a8:23:97:
92:24:7d:62:28:c9:3a:3c:be:8c:fa:e3:09:e6:dd:80:e4:86:
3d:6e:04:fd:26:f9:e7:bd:e2:93:9e:08:4c:34:a8:e4:b7:35:
ea:eb:e4:4b:9b:d2:77:90:35:ac:ed:c1:f8:8d:e0:bb:2f:87:
65:9f:ae:dc:d0:97:07:06:67:30:17:ac:3f:b1:d2:a8:d9:7e:
4b:4d:e0:95:58:4f:c3:f3:3e:b7:8b:57:f5:6a:fb:99:e8:9f:
53:bd:60:8f:ec:c9:d9:3b:68:b3:cc:a8:63:b3:22:59:46:26:
7c:e2:70:66:dc:7b:ea:a6:7f:41:88:8d:e4:12:17:a6:cd:42:
19:23:c0:23:0f:a5:4f:6a:f5:41:75:a2:85:62:81:47:db:9f:
50:93:82:de:3d:c0:26:4e:6a:27:d4:17:34:e2:5a:56:07:84:
e6:ca:02:b3:47:ff:b6:33:55:c1:df:82:4e:9b:77:1e:37:2a:
3a:82:03:aa:39:92:44:9c:e0:82:d7:a7:b4:bb:2a:41:ab:cf:
31:61:5f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:32:43 2024 by rpki-client on console-fra.rpki-client.org