Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/f837e2bc-9c03-3d63-9374-aca861709e6a.roa
File: f837e2bc-9c03-3d63-9374-aca861709e6a.roa (raw, json)
Hash identifier: YtG8BWBReWemMjEF9wXhN8YCZ4zEl+wC9gY9ZVnTn0c=
Subject key identifier: 3A:8E:49:58:BD:BA:1C:A7:19:A0:8E:F1:41:27:EE:41:35:DE:16:4F
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B6652E964A5DF9AC7DAC200
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/f837e2bc-9c03-3d63-9374-aca861709e6a.roa
Signing time: Thu 05 Dec 2024 15:39:53 +0000
ROA not before: Thu 05 Dec 2024 15:39:53 +0000
ROA not after: Wed 05 Mar 2025 15:39:53 +0000
asID: 376
IP address blocks: 132.213.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:66:52:e9:64:a5:df:9a:c7:da:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:39:53 2024 GMT
Not After : Mar 5 15:39:53 2025 GMT
Subject: CN=12e28b5c-7499-489f-b1c3-86cf639927cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:43:b9:e7:fe:32:21:56:0c:71:ef:6a:99:
d2:7f:fa:ed:05:7d:08:dc:14:2f:5b:69:4f:16:71:
1e:65:11:cd:64:ef:27:6a:b5:8b:15:54:28:ac:fe:
95:04:c4:b0:50:16:3a:49:1d:24:8e:3e:26:f6:db:
e9:80:f1:23:60:a6:11:1c:55:56:79:41:52:46:1a:
a6:0e:9d:a7:65:1c:ca:60:79:fb:e8:98:d9:fc:b9:
b1:eb:86:90:80:ca:d0:0c:eb:83:63:55:8c:26:9e:
fa:aa:0f:f5:ef:32:84:ba:22:de:97:3b:88:db:2a:
d5:56:28:26:e2:07:00:c5:d1:89:87:49:a0:1c:46:
bf:35:e3:88:16:83:0b:48:c4:d0:e9:f5:0c:be:8c:
82:5d:21:fb:6a:be:82:c2:98:03:2c:9d:2f:8c:a3:
e1:15:b9:3c:f0:39:02:d0:0d:3b:fe:e3:00:fc:58:
2e:dd:35:3f:e8:86:dc:3b:e1:f2:6f:29:ca:eb:38:
a5:64:1f:f6:1e:2c:be:35:5f:94:71:4d:c3:a0:c3:
fc:7d:e1:61:8d:38:a3:c3:6f:c3:2b:ca:29:f1:43:
3d:fc:90:52:50:ba:09:b0:96:5c:6b:68:d7:8c:c3:
de:fd:0e:a4:52:b0:66:91:0a:bd:54:51:e8:bc:4d:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8E:49:58:BD:BA:1C:A7:19:A0:8E:F1:41:27:EE:41:35:DE:16:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/f837e2bc-9c03-3d63-9374-aca861709e6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:8c:b2:c4:86:f8:cf:1e:9a:6e:0c:7e:0f:be:e3:3d:e1:33:
af:d8:b5:c5:29:1c:32:88:d7:cc:98:d6:6a:21:c9:71:b5:eb:
e8:14:de:cd:e4:3a:a2:38:c0:9d:a5:0c:d5:f4:e5:c9:6a:db:
1f:86:5a:0e:c9:c8:48:33:72:9d:3b:ae:a9:e2:f7:f8:1f:9f:
22:02:e5:66:1f:8c:88:2c:22:e4:23:ef:6f:c0:0d:5b:c3:1e:
08:cb:4e:e0:fe:d1:f9:68:92:7d:ef:0f:f8:2a:72:58:7d:7c:
50:c3:7a:cb:9f:fa:08:ef:be:12:ad:b7:12:80:44:f4:63:e2:
eb:09:03:56:ba:28:ef:80:ae:02:0e:56:b1:68:1d:3a:1c:1f:
b7:94:b9:f1:b6:e1:a4:7d:5d:62:fe:d9:4e:68:13:81:48:0b:
9c:dc:29:84:85:01:e5:66:45:ad:cd:b5:d9:b3:5b:a3:36:fb:
82:85:40:40:ba:82:d2:ef:4a:b1:30:58:58:ef:f3:54:6e:d3:
50:65:04:41:67:a8:63:22:a6:8e:ab:6b:9e:69:02:5c:3b:a0:
37:49:b5:7a:96:0b:b0:fb:c4:bc:9b:41:b4:9b:6b:4f:27:2b:
f5:31:ca:be:fc:ce:a8:bb:67:43:e9:ca:0e:eb:ab:6f:39:0b:
85:bf:0d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:13 2024 by rpki-client on console-ams.rpki-client.org