Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d7343c83-956a-3638-a05d-2a8c6aa5a38f.roa
File: d7343c83-956a-3638-a05d-2a8c6aa5a38f.roa (raw, json)
Hash identifier: AQd08FN3lqfgh/lfrDZd1Bb+kzRk0uQXC9xV1h7o/94=
Subject key identifier: 76:F2:7C:34:9D:CF:34:84:50:BE:81:AE:D0:41:FF:16:88:07:61:42
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B667D1D77F8ECD342193C00
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d7343c83-956a-3638-a05d-2a8c6aa5a38f.roa
Signing time: Thu 05 Dec 2024 15:40:13 +0000
ROA not before: Thu 05 Dec 2024 15:40:13 +0000
ROA not after: Wed 05 Mar 2025 15:40:13 +0000
asID: 376
IP address blocks: 132.213.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:66:7d:1d:77:f8:ec:d3:42:19:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:40:13 2024 GMT
Not After : Mar 5 15:40:13 2025 GMT
Subject: CN=4bc83511-0465-46d4-8570-582b59b59f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:b2:da:c6:ad:94:35:38:cd:ef:13:37:8e:
94:c5:a3:98:ad:8e:51:26:da:b0:92:a6:ea:ec:2c:
63:45:71:3b:f8:3b:26:b2:3f:7d:0d:dd:01:26:40:
33:3e:55:fd:e9:70:5e:9d:a9:73:e6:06:ff:e6:a3:
b3:73:84:db:26:4c:9f:2f:28:71:25:27:b1:e4:d0:
90:91:11:44:7f:bc:4d:65:6e:bc:1c:9e:ce:79:d6:
75:a5:40:e7:1f:62:b0:7f:89:78:21:ff:32:ca:82:
15:43:9c:16:0c:d2:c2:dc:fa:e6:d6:2b:11:95:ad:
a1:20:62:aa:0d:73:17:26:08:d6:32:74:ce:bb:61:
1e:8b:27:78:6b:52:e1:5b:fc:c2:7e:4c:ef:95:3a:
d3:7a:35:e5:e9:15:c6:bf:7f:ee:61:31:e8:bb:2c:
8f:f0:4c:bf:f6:69:91:eb:b4:d6:9d:df:37:6f:8f:
f2:ec:cd:ce:ba:80:37:9a:99:d5:09:80:84:0e:ee:
4f:aa:62:1b:b8:ed:69:55:97:4d:f9:d0:ca:02:bd:
a3:75:95:31:39:29:84:63:b7:4a:ef:85:9f:c6:9c:
c6:ca:53:a4:27:54:6c:4e:1b:b0:ac:be:7c:f0:74:
f5:6c:93:fd:7e:f8:e9:9f:45:49:49:d7:1d:fe:c8:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F2:7C:34:9D:CF:34:84:50:BE:81:AE:D0:41:FF:16:88:07:61:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d7343c83-956a-3638-a05d-2a8c6aa5a38f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:d9:65:27:fa:63:d8:26:fc:1b:6a:1d:ec:0f:6b:af:5a:38:
42:25:0d:67:6f:98:94:0c:7d:4a:11:a2:80:60:67:43:b9:a8:
23:d2:a0:6c:16:4c:eb:29:2d:44:b3:c3:a5:15:f3:36:d2:9d:
9b:fe:0c:f6:3d:7b:62:79:39:af:a9:33:ec:1f:25:94:c8:aa:
ca:22:18:78:f8:e8:1b:cb:18:62:66:3a:a7:af:28:9d:3b:6c:
c3:d0:dd:df:37:3c:97:e9:36:bc:5e:dd:a6:81:59:55:27:f2:
93:36:71:04:29:d2:56:4a:b0:0b:4e:94:8c:2f:7d:e4:b4:21:
3f:e0:64:8d:2c:d2:7c:57:e0:93:7d:2c:80:b2:c8:87:ac:2b:
1a:56:10:5c:0c:49:db:6f:19:3c:df:4a:75:6f:c2:61:05:37:
72:81:50:9b:92:3f:26:05:d4:94:99:ee:1d:50:fe:5b:6f:c0:
9e:6f:42:d2:8d:5b:44:f7:46:b5:8a:2b:5f:c2:fa:02:ae:2d:
f0:05:a4:14:40:a9:1a:0c:55:fb:ed:ec:6a:fc:c3:9e:72:4a:
35:55:30:9a:0d:10:c4:23:78:d4:cb:42:bb:0b:28:f6:35:43:
7e:f2:91:34:fc:a7:0e:4f:c8:a0:db:a7:25:0e:15:25:e1:52:
f4:19:06:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:13 2024 by rpki-client on console-ams.rpki-client.org