Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/c5f52ada-2e34-360a-b8dd-a71de705cae2.roa
File: c5f52ada-2e34-360a-b8dd-a71de705cae2.roa (raw, json)
Hash identifier: Gn7VsxZurer1twVhAHwfvCd+3Z9RwlkT7Z5Q7hXU+Sg=
Subject key identifier: 9B:B5:D5:8E:A0:9D:A1:2A:69:79:26:6D:0B:A2:65:94:80:12:D2:65
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B6914A02954A87449DCBC80
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/c5f52ada-2e34-360a-b8dd-a71de705cae2.roa
Signing time: Thu 05 Dec 2024 15:45:26 +0000
ROA not before: Thu 05 Dec 2024 15:45:26 +0000
ROA not after: Wed 05 Mar 2025 15:45:26 +0000
asID: 376
IP address blocks: 132.213.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:69:14:a0:29:54:a8:74:49:dc:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:45:26 2024 GMT
Not After : Mar 5 15:45:26 2025 GMT
Subject: CN=4408ab08-4d8b-4cee-80a4-ad9c89cc7f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:25:28:00:25:4a:a7:5c:82:35:ee:05:83:
e4:fa:85:37:6f:c3:df:3b:19:f5:1c:61:17:08:8f:
ee:d9:16:b0:1e:fe:96:8f:05:a4:43:f5:55:17:dd:
74:b7:19:48:02:f7:5d:59:6a:26:4c:81:80:74:7c:
86:c7:fe:c7:33:46:09:0e:99:42:80:47:57:a0:6e:
db:9c:8e:65:84:a4:5b:12:7a:03:eb:c5:dd:15:4c:
f4:d5:df:1c:a1:0a:49:91:3b:a9:1b:c7:3e:b9:0c:
c7:21:83:1f:2f:75:7f:58:ac:2c:e7:6e:a8:cb:9f:
90:3c:8f:ab:b4:f0:6d:02:4a:48:60:77:14:4b:72:
ac:07:78:a8:df:00:56:34:81:8d:0a:4e:14:f4:41:
a3:55:7c:d6:99:6b:f4:99:d7:b9:24:68:0c:84:53:
80:e6:ce:71:eb:2d:25:68:ab:43:50:9f:76:44:fd:
5b:2f:d3:50:f2:d5:91:09:2f:89:cb:cd:78:e6:56:
63:ff:79:7f:4c:46:15:f4:14:43:7d:03:b3:a0:af:
49:b0:dc:b1:5c:30:a6:db:29:02:69:47:38:ee:96:
72:4f:fd:fc:46:d4:97:57:41:34:00:1f:1c:16:57:
98:ab:cf:e3:3b:73:07:cb:99:8b:94:3f:22:23:cf:
2d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B5:D5:8E:A0:9D:A1:2A:69:79:26:6D:0B:A2:65:94:80:12:D2:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/c5f52ada-2e34-360a-b8dd-a71de705cae2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:5d:78:b1:a7:ce:05:5c:4b:d0:4d:09:a2:22:1a:d6:fd:7c:
a2:65:e3:05:f1:ca:b4:82:45:74:e8:ee:1c:78:b7:d2:dd:e5:
86:41:9e:40:ba:f6:73:33:01:59:8b:61:68:22:28:71:86:05:
00:7f:1f:c0:b1:f5:96:c4:15:7d:bf:9c:1b:5b:ae:13:a5:5f:
bf:88:55:59:3a:fe:f3:0b:a1:eb:f2:3e:1a:53:a5:53:17:07:
b2:c1:5a:a3:35:75:cd:1b:03:ee:d3:88:8f:b3:97:30:39:bd:
ab:e9:64:8d:cd:5a:93:26:8e:fd:8c:a4:6a:f1:b8:6f:3c:89:
dc:c2:b2:74:a2:6c:2e:d0:64:01:41:36:34:72:01:c2:3b:27:
4f:7f:88:36:dd:2a:11:4b:ce:59:4c:e3:42:cc:ac:f9:9f:16:
81:fa:36:a8:ee:ee:6c:ee:c6:c7:9c:30:14:23:40:61:5f:65:
71:bb:14:b5:c9:2a:b0:90:e6:85:44:7b:57:11:b1:2f:bb:02:
92:05:cd:5c:b4:31:15:e1:21:42:84:37:c1:5f:b7:4b:90:63:
45:7e:43:5a:47:ea:31:df:88:55:cd:cb:76:a5:5c:cf:d8:28:
4e:17:70:4b:1a:66:89:6f:88:34:04:de:de:ff:8f:30:4e:57:
11:8b:82:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:13 2024 by rpki-client on console-ams.rpki-client.org