Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/f89d03b3-aa69-3cd8-9f17-a978605708d6.roa
File: f89d03b3-aa69-3cd8-9f17-a978605708d6.roa (raw, json)
Hash identifier: p07NjupTgxBMtQSHmdBQ87dYCq2DZEF5gL9ZlAjc7KQ=
Subject key identifier: 89:D0:76:B5:BD:4E:91:21:1A:4E:AD:82:81:7B:CE:76:79:C3:59:71
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B6D7239EB4ED5D2FD0EB860
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/f89d03b3-aa69-3cd8-9f17-a978605708d6.roa
Signing time: Thu 05 Dec 2024 15:54:14 +0000
ROA not before: Thu 05 Dec 2024 15:54:14 +0000
ROA not after: Wed 05 Mar 2025 15:54:14 +0000
asID: 376
IP address blocks: 132.213.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 14:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:6d:72:39:eb:4e:d5:d2:fd:0e:b8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:54:14 2024 GMT
Not After : Mar 5 15:54:14 2025 GMT
Subject: CN=7790c0e2-1295-43fa-ab3a-55b7ab428c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:27:08:a0:53:a8:9a:cd:3c:51:6f:60:bf:
bc:38:0a:37:1f:eb:31:04:38:92:db:13:95:c2:4b:
f0:92:24:cd:91:dd:49:82:4d:6b:d1:78:0d:39:27:
8c:0b:29:a1:38:48:44:8f:79:0d:fb:fa:d9:2e:54:
e3:04:71:c6:4d:c3:d8:02:ab:1e:14:c9:9b:54:d9:
52:f2:bc:c8:c3:e7:a9:18:c2:c8:50:7e:32:4f:74:
b1:90:3a:95:fd:45:8f:a2:94:70:2e:4c:2c:b3:0a:
5d:52:9e:a9:a2:5a:c8:0e:f0:f8:c4:56:57:6f:02:
fd:bb:f6:b9:d3:2a:d3:6d:07:90:df:4b:b7:54:36:
70:8d:0a:3d:0d:eb:35:f1:6b:1a:9d:47:00:fc:49:
65:4e:71:54:8b:0b:b9:da:f1:36:eb:4a:d4:32:0b:
35:94:00:d5:19:50:05:08:fd:10:52:ca:82:10:7e:
cb:83:62:88:30:f7:f5:34:f2:46:72:bc:06:00:4a:
7e:83:79:4f:e4:c5:f6:0f:47:32:6f:a8:53:15:da:
f0:12:7c:e2:25:8e:86:85:d7:64:55:3c:85:d1:cf:
0e:95:4f:d8:31:39:9a:f5:1a:18:05:a4:6b:59:c4:
ce:65:8b:1d:bf:b1:cf:34:02:98:33:c4:e4:d1:f0:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D0:76:B5:BD:4E:91:21:1A:4E:AD:82:81:7B:CE:76:79:C3:59:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/f89d03b3-aa69-3cd8-9f17-a978605708d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:04:e6:e5:1b:0d:b0:a4:a2:40:5c:79:b8:e0:2a:1f:6c:ed:
93:81:eb:8d:8c:2c:29:c8:af:2f:69:a5:c0:73:b8:8d:ad:97:
c8:c5:ea:70:08:ee:a5:a4:73:f3:84:21:59:f9:c0:72:ac:27:
27:2a:0c:a8:12:fc:8b:f7:40:6e:f8:8a:97:1c:7e:dc:50:ce:
37:55:d8:03:e7:32:d6:33:20:b1:6c:44:52:26:fb:57:49:dd:
1a:45:e9:11:b2:5f:10:35:bf:e8:1e:7c:97:0f:08:99:c4:95:
6a:69:6c:f7:75:4d:e0:cb:87:77:6d:78:0e:45:c4:82:a1:e3:
7c:06:ab:b2:2a:1b:a3:6c:95:46:f0:ff:2a:d3:78:32:a1:c8:
08:72:50:b3:73:5c:03:84:1a:39:b4:65:b3:8b:e1:d8:f6:0e:
d8:18:0c:00:c6:d5:af:11:0e:8b:e4:52:ed:81:ed:39:30:25:
8a:7a:51:f4:aa:74:6b:70:36:ca:e9:36:f5:ad:30:9c:4c:db:
2d:7b:86:3d:0f:1b:46:90:0f:25:51:ac:3f:19:8b:59:8d:d2:
e3:bc:d6:4a:38:57:5b:8a:f9:c0:d1:c3:8c:55:29:ce:53:81:
92:29:a3:f8:4e:e9:24:89:df:16:95:d1:5e:7a:e9:b8:e9:76:
87:b9:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:13 2024 by rpki-client on console-ams.rpki-client.org