Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/f6415f69-8db0-3cd9-85f4-0cba2a6e611c.roa
File: f6415f69-8db0-3cd9-85f4-0cba2a6e611c.roa (raw, json)
Hash identifier: YhZGjJsWBnw4f8X3q9ud/j65DnklFKe3Ax2+B8pquuI=
Subject key identifier: 69:C7:FB:C2:8C:0B:B0:8F:F2:48:08:56:3C:A3:02:0E:36:4A:31:10
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B61AEC7DABC0E16FBC89340
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/f6415f69-8db0-3cd9-85f4-0cba2a6e611c.roa
Signing time: Thu 05 Dec 2024 15:30:32 +0000
ROA not before: Thu 05 Dec 2024 15:30:32 +0000
ROA not after: Wed 05 Mar 2025 15:30:32 +0000
asID: 376
IP address blocks: 132.213.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:61:ae:c7:da:bc:0e:16:fb:c8:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:30:32 2024 GMT
Not After : Mar 5 15:30:32 2025 GMT
Subject: CN=d5c5425c-69af-4659-95dc-ad9f176854af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:02:ab:75:63:f9:d0:e1:b2:6d:ce:fc:eb:
12:4e:30:32:0e:fa:c7:b2:68:d9:f6:39:6f:93:c8:
75:fd:ad:ef:6a:54:a1:f7:ad:f7:f6:8b:e9:b3:18:
56:c5:7f:46:c7:4b:e5:f5:00:54:c2:ca:31:fa:54:
da:a5:fe:c9:77:81:04:9a:06:6f:aa:67:19:a6:cf:
c0:a4:be:39:5c:3f:2d:5c:16:c7:8c:42:0d:95:31:
8c:61:ec:49:4d:b0:6d:31:13:04:63:3c:de:0e:88:
2f:88:af:19:ee:6a:36:f1:60:c7:ef:41:50:30:f6:
24:8e:1c:7b:89:bb:f8:4b:d3:31:5f:1c:27:cb:f6:
37:36:96:d3:a1:0e:24:d9:62:33:0c:f8:4e:ce:63:
19:a2:0c:05:bd:c5:7c:bf:2d:12:ac:4b:7a:32:03:
82:6c:36:81:c9:f7:05:d6:43:61:1a:a3:7c:d6:88:
9e:2b:03:b0:c7:80:83:45:46:67:94:94:66:5f:93:
3a:15:1c:8c:f4:c0:1a:bb:66:ae:c9:bd:5a:d4:18:
c8:e4:38:a4:d7:d7:5a:45:fd:02:a6:2f:17:41:a4:
14:79:6c:f8:a5:0c:a3:41:6e:a7:04:54:83:58:70:
91:16:94:b9:3a:4e:21:31:ab:85:78:f8:57:61:ab:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C7:FB:C2:8C:0B:B0:8F:F2:48:08:56:3C:A3:02:0E:36:4A:31:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/f6415f69-8db0-3cd9-85f4-0cba2a6e611c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:89:12:23:35:31:7b:bb:aa:e2:d1:8e:7e:b6:ee:35:90:43:
89:7c:40:5a:af:0d:86:13:ba:32:1a:da:9c:a5:18:2b:fd:45:
ea:ef:22:4d:2c:aa:fc:fb:4b:14:71:15:91:1f:39:d4:f5:b2:
37:ca:1e:6f:af:41:46:42:50:43:20:c2:ee:80:82:83:39:3a:
3d:7b:0c:fc:dd:89:1b:c1:31:fd:26:1c:3e:38:14:7c:fa:03:
73:2d:fc:90:e3:4e:da:d3:3f:1f:bc:18:e3:11:d9:69:10:87:
b5:76:39:9d:c2:be:e0:37:c3:ac:c3:40:39:4c:59:fc:fd:2a:
d4:b4:d8:dc:e5:1c:29:76:f0:21:dd:a9:c0:45:42:83:c8:ab:
02:d3:e9:0a:63:33:b0:1e:24:a2:f3:0a:be:4b:8f:33:33:00:
9a:f1:b3:03:6e:5e:55:63:d9:7c:63:de:8f:df:b5:75:7c:87:
70:c9:4f:a2:fc:40:44:c1:53:ef:ba:8d:13:52:70:7f:e7:0d:
17:cd:2f:ac:7c:fd:b4:a1:2c:71:39:2e:5a:e9:ab:3e:1e:c6:
18:54:a7:e1:72:99:4d:c1:03:c9:2d:22:4b:1c:68:2d:66:e9:
12:b7:38:75:31:c3:b1:b9:87:49:0f:f3:cf:ad:3f:54:a5:54:
09:9b:b4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:32:43 2024 by rpki-client on console-fra.rpki-client.org