Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/de083130-f98e-3dd8-93ef-3659c5168e0e.roa
File: de083130-f98e-3dd8-93ef-3659c5168e0e.roa (raw, json)
Hash identifier: mASnMz2VU4rMBu8EWRA7KzFQj+BvYHq4E2caVAjUzgU=
Subject key identifier: 66:B2:60:DC:2F:D1:C9:4C:46:C2:C1:38:32:E8:91:28:52:02:57:32
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B6BDD87F0005F1A5A4BB180
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/de083130-f98e-3dd8-93ef-3659c5168e0e.roa
Signing time: Thu 05 Dec 2024 15:51:03 +0000
ROA not before: Thu 05 Dec 2024 15:51:03 +0000
ROA not after: Wed 05 Mar 2025 15:51:03 +0000
asID: 376
IP address blocks: 132.213.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:6b:dd:87:f0:00:5f:1a:5a:4b:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:51:03 2024 GMT
Not After : Mar 5 15:51:03 2025 GMT
Subject: CN=7269a4d8-1eff-4ecb-a968-9d514aa263bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:c2:f0:e6:83:d0:6a:89:11:ee:cb:77:fe:
c7:2b:04:f8:ae:7c:fe:97:3b:1a:47:ed:7c:af:8e:
23:c3:9a:0c:94:d8:81:95:54:4e:42:9a:e1:ac:e2:
1d:89:82:9b:70:79:4a:32:78:41:2d:66:4a:96:22:
e2:a8:6f:3e:8b:30:b7:17:15:ce:05:ec:41:fb:9b:
3b:e2:56:ac:03:51:f4:a9:2b:b2:8e:47:71:cd:58:
61:07:4a:88:ce:f9:64:9d:88:8f:8b:9d:9f:09:31:
77:b1:c6:aa:7a:38:8d:d6:22:d0:ee:a8:de:b7:64:
d4:3e:61:65:b5:12:32:a4:cd:4c:c7:a1:d0:6b:62:
d8:a3:92:c2:1c:4e:3a:2d:a2:2c:b8:d3:c7:27:98:
3e:ea:77:4a:02:7c:6c:4c:b6:92:bf:95:0c:1d:cf:
e0:bb:de:a0:d1:08:cc:f9:0e:3f:ef:4c:34:cf:db:
37:d9:54:5f:97:4f:a5:07:f8:2a:f4:22:43:e7:7a:
44:75:02:a9:59:57:b3:8c:20:a9:c4:9a:a6:cc:09:
f3:3b:23:2b:7d:8a:3c:63:80:12:20:4b:4a:fb:ca:
77:9a:c2:5b:c0:7f:4f:36:35:51:1b:b5:b8:84:ec:
0a:8b:a9:14:ee:f8:5a:1b:45:44:0c:68:37:1e:7d:
7c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B2:60:DC:2F:D1:C9:4C:46:C2:C1:38:32:E8:91:28:52:02:57:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/de083130-f98e-3dd8-93ef-3659c5168e0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:84:85:1c:c9:32:c9:0b:93:66:5c:ec:24:ca:41:5a:59:20:
a9:85:58:2b:ae:32:25:d8:57:7d:97:7b:80:85:9f:6a:9b:04:
d4:c3:64:b8:4b:4f:b9:64:b7:bd:de:b8:d0:6b:77:ef:85:97:
ed:5b:81:7d:d2:7c:5a:cd:a4:e4:56:ee:d9:c4:98:1f:cf:94:
0c:f3:da:a0:e8:4a:4c:e7:73:2f:38:ac:c8:de:6e:05:69:5a:
dd:30:01:11:7f:ee:8e:7d:55:03:66:79:3c:b2:bc:f2:39:61:
bc:51:04:06:b6:a9:98:4a:6d:6d:58:36:5a:9e:cd:53:e5:32:
99:2d:b9:76:ee:16:5a:11:c3:d9:61:ca:18:3f:c6:dd:c6:eb:
d5:d7:f2:53:03:5a:30:6a:b7:e1:a1:72:e1:fa:20:71:3b:2d:
b9:12:40:e8:05:e1:36:a7:f5:0c:f9:85:ff:bf:78:86:fb:42:
8e:67:e5:ae:f9:99:4e:6b:17:e7:67:ca:07:81:84:17:09:7c:
7e:8f:40:af:12:5f:c8:b4:82:fb:d6:51:32:bb:b4:18:c9:84:
e0:a6:ff:32:8b:fb:4d:fb:13:26:b8:ac:2c:68:48:4e:54:cb:
3a:52:8a:27:8a:4e:c0:de:82:fe:02:00:3c:d2:ba:b5:f7:06:
78:a8:c5:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgba92H8ABfGlpLsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdlYzQ0N2EtOTE3MC00ZTExLWJhODAtMWFhY2E3NmZj
ZDQyMB4XDTI0MTIwNTE1NTEwM1oXDTI1MDMwNTE1NTEwM1owLzEtMCsGA1UEAxMk
NzI2OWE0ZDgtMWVmZi00ZWNiLWE5NjgtOWQ1MTRhYTI2M2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSjC8OaD0GqJEe7Ld/7HKwT4rnz+lzsaR+18
r44jw5oMlNiBlVROQprhrOIdiYKbcHlKMnhBLWZKliLiqG8+izC3FxXOBexB+5s7
4lasA1H0qSuyjkdxzVhhB0qIzvlknYiPi52fCTF3scaqejiN1iLQ7qjet2TUPmFl
tRIypM1Mx6HQa2LYo5LCHE46LaIsuNPHJ5g+6ndKAnxsTLaSv5UMHc/gu96g0QjM
+Q4/70w0z9s32VRfl0+lB/gq9CJD53pEdQKpWVezjCCpxJqmzAnzOyMrfYo8Y4AS
IEtK+8p3msJbwH9PNjVRG7W4hOwKi6kU7vhaG0VEDGg3Hn18kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGayYNwv0clMRsLBODLokShSAlcyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82N2Vj
NDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFjYTc2ZmNkNDIvZGUwODMxMzAtZjk4ZS0z
ZGQ4LTkzZWYtMzY1OWM1MTY4ZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjdlYzQ0N2EtOTE3MC00ZTExLWJh
ODAtMWFhY2E3NmZjZDQyLzY3ZWM0NDdhLTkxNzAtNGUxMS1iYTgwLTFhYWNhNzZm
Y2Q0Mi5jcmwwHwYDVR0jBBgwFoAU1/68eoDiDVphTAxi6PSMkDn+TL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82N2VjNDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFj
YTc2ZmNkNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhNXKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAaEhRzJMskLk2Zc7CTKQVpZIKmFWCuuMiXYV32Xe4CFn2qbBNTDZLhL
T7lkt73euNBrd++Fl+1bgX3SfFrNpORW7tnEmB/PlAzz2qDoSkzncy84rMjebgVp
Wt0wARF/7o59VQNmeTyyvPI5YbxRBAa2qZhKbW1YNlqezVPlMpktuXbuFloRw9lh
yhg/xt3G69XX8lMDWjBqt+GhcuH6IHE7LbkSQOgF4Tan9Qz5hf+/eIb7Qo5n5a75
mU5rF+dnygeBhBcJfH6PQK8SX8i0gvvWUTK7tBjJhOCm/zKL+037Eya4rCxoSE5U
yzpSiieKTsDegv4CADzSurX3BnioxZA=
-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:13 2024 by rpki-client on console-ams.rpki-client.org