Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/8a4e6586-51df-32d5-9a53-353b99bf231a.roa
File: 8a4e6586-51df-32d5-9a53-353b99bf231a.roa (raw, json)
Hash identifier: SOAD+E1ofsPMTNqmKVO6zMP7WHRjvs7m13/TMtcfLGU=
Subject key identifier: D9:A3:B6:AE:96:6D:E5:25:2E:27:91:E6:14:82:AD:A9:64:5E:43:40
Certificate issuer: /CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
Certificate serial: 010D0C9F4328584726D0859CDC87FF7DB3F21420
Authority key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/8a4e6586-51df-32d5-9a53-353b99bf231a.roa
Signing time: Mon 09 Sep 2024 01:00:31 +0000
ROA not before: Mon 09 Sep 2024 01:00:31 +0000
ROA not after: Sun 08 Dec 2024 02:00:31 +0000
asID: 12276
IP address blocks: 192.33.255.0/24 maxlen: 24
2620:11a:b000::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 10 Nov 2024 06:20:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:26:d0:85:9c:dc:87:ff:7d:b3:f2:14:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
Validity
Not Before: Sep 9 01:00:31 2024 GMT
Not After : Dec 8 02:00:31 2024 GMT
Subject: CN=6231b013-22eb-4d29-b734-ce71fce9d03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:2d:7d:e5:d5:f3:70:05:0f:fa:1f:64:71:
21:f9:e9:8b:76:34:45:1f:5e:b6:bc:b4:7e:2f:c0:
46:5f:df:15:c9:1b:db:fb:d0:db:64:9b:5c:bd:53:
78:49:8d:77:f8:0e:30:2f:53:37:34:3a:b6:16:ba:
16:5e:a8:2e:f4:e3:e4:71:2e:54:80:61:4a:3d:d2:
c8:2f:e9:54:10:f2:ed:fb:24:7b:f1:75:44:99:51:
e1:d9:2c:73:ef:c2:4b:82:f4:ef:a1:f2:26:34:8d:
a4:6e:7a:a9:e8:4f:c3:08:d7:4c:c9:3a:2e:bd:1d:
6b:6f:79:cf:19:81:b2:3a:69:73:31:da:47:03:6a:
5c:02:45:1c:0e:06:7b:63:96:a5:41:f9:9e:23:1e:
bd:bd:84:3f:ab:05:cb:f9:89:a5:14:3a:a7:42:7f:
79:cb:92:e5:9b:6d:c9:79:c1:49:5a:30:6c:a6:c7:
d5:e9:bd:d4:ca:33:dc:0f:57:f4:6e:41:14:69:28:
47:ce:93:d1:b1:66:fc:1a:72:78:cf:aa:a8:9f:95:
37:6d:3e:46:b6:b7:99:e3:1d:c7:d1:60:a1:2d:bb:
01:22:26:46:d9:56:d2:80:65:16:f5:58:7c:0c:e0:
7a:9e:56:04:80:4e:58:ea:cd:44:15:2a:a4:e2:36:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A3:B6:AE:96:6D:E5:25:2E:27:91:E6:14:82:AD:A9:64:5E:43:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/8a4e6586-51df-32d5-9a53-353b99bf231a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl
X509v3 Authority Key Identifier:
keyid:FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
sbgp-ipAddrBlock: critical
IPv4:
192.33.255.0/24
IPv6:
2620:11a:b000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:6c:a2:6e:51:e7:3f:13:42:f6:e0:3c:9b:8e:49:61:4f:68:
ba:bb:6d:84:9d:86:ac:1f:8c:b5:61:0d:db:32:3c:d0:44:ff:
69:f7:42:02:20:84:f0:4a:42:df:a2:18:6d:17:d3:4c:73:e3:
56:c5:23:b0:08:34:81:6c:06:ad:a1:01:02:3d:9b:52:d8:36:
72:a7:4b:04:c2:5b:5e:5e:81:47:0d:61:d0:15:b9:b1:ae:37:
e1:28:94:77:03:f0:53:f7:46:77:8d:63:c3:1a:7d:b8:88:56:
8f:7e:bd:af:64:7e:06:f6:6f:93:97:4f:67:31:a6:9e:ff:bb:
e4:a4:5f:f3:91:76:fc:a2:75:63:b0:86:33:5b:d3:92:4b:7b:
93:c6:a6:77:a5:e1:73:4c:6f:44:05:bf:75:cf:d7:b0:43:01:
79:6c:5d:a5:fc:db:65:ff:91:b6:79:9a:c4:3b:81:77:c6:b4:
85:d3:91:b2:c1:28:ea:0d:71:be:f2:c0:f9:1a:9c:d1:cd:f8:
18:cb:78:4c:7a:e6:de:d2:e5:9e:5d:0e:18:2d:69:2c:4d:a2:
23:eb:fc:23:9e:7e:2a:e8:44:c2:4b:64:28:33:a8:d7:17:c4:
eb:ad:ce:cc:48:f3:da:68:8d:33:8e:d3:df:56:28:c2:a1:0c:
f5:a7:80:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 09:36:25 2024 by rpki-client on console-fra.rpki-client.org