Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/67768f93-d050-3142-9577-aa902f72a821.roa
File: 67768f93-d050-3142-9577-aa902f72a821.roa (raw, json)
Hash identifier: 2juumAvMjavvrcLc1NE/waQCQG5EFQj3Ad2M4vNAEJM=
Subject key identifier: 8A:AE:6E:3A:53:2D:40:1A:1B:41:85:B7:A2:4B:92:D0:52:99:49:FF
Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial: 010D0C9F4328583E56440BDBCFAA0E016CA31600
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/67768f93-d050-3142-9577-aa902f72a821.roa
Signing time: Wed 22 Jun 2022 12:00:00 +0000
ROA not before: Wed 22 Jun 2022 12:00:00 +0000
ROA not after: Wed 04 Apr 2029 04:00:00 +0000
asID: 5645
IP address blocks: 206.248.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Thu 05 Sep 2024 19:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:56:44:0b:db:cf:aa:0e:01:6c:a3:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
Validity
Not Before: Jun 22 12:00:00 2022 GMT
Not After : Apr 4 04:00:00 2029 GMT
Subject: CN=a9ae5e86-b206-4f37-8e96-0c16ccf6661d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:3c:0e:66:eb:2d:a6:85:7f:31:d1:92:2f:
4f:6d:28:8d:7a:1d:1f:03:93:f1:8f:04:3f:7a:a6:
dd:9a:54:fc:0b:c9:cb:a4:2f:46:bd:84:af:0d:7d:
99:21:ad:ab:0a:87:72:ed:c8:31:01:4e:2d:52:7a:
9b:e1:c8:3b:87:a4:4d:85:1d:ed:68:3b:e1:e6:b1:
9e:20:28:c6:65:94:fe:25:c8:e3:47:4e:ce:8f:9a:
6f:29:89:ac:cc:94:2d:41:c2:cd:d3:49:7c:bc:67:
ce:13:9f:79:0a:e4:92:8e:ba:69:d5:cf:0e:9b:b1:
41:13:78:9c:9a:31:b2:cd:38:50:b6:06:f3:29:67:
6a:61:a4:a2:e7:b8:56:4d:a8:ad:b2:83:5b:72:de:
c4:2f:d2:c6:d2:f7:81:aa:ff:81:b3:6d:80:09:8a:
49:08:01:b8:8a:1a:94:76:8b:4c:09:ea:0f:30:23:
e6:45:e8:45:36:53:2d:52:04:e8:38:9c:53:1e:fa:
a1:fc:d0:75:41:93:84:3e:3d:7a:3c:44:7a:55:9b:
0a:65:39:d6:1a:80:70:43:1a:41:a8:e5:35:af:95:
ea:74:15:dc:ed:9a:b3:78:2e:cb:5b:34:94:53:12:
3a:e5:66:20:93:49:07:66:bb:57:41:51:f6:d8:39:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AE:6E:3A:53:2D:40:1A:1B:41:85:B7:A2:4B:92:D0:52:99:49:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/67768f93-d050-3142-9577-aa902f72a821.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
X509v3 Authority Key Identifier:
keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
sbgp-ipAddrBlock: critical
IPv4:
206.248.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:06:79:16:1c:53:44:fb:aa:49:86:ae:13:ac:84:f0:be:bc:
c4:8e:0a:f9:8c:b4:d2:55:78:8c:96:ac:15:d2:2f:dd:06:b5:
81:d8:44:e4:5c:ac:1c:21:e8:42:54:49:3a:1f:6d:28:8b:36:
88:55:63:60:66:6c:93:91:c8:5e:b6:8e:a3:2d:1c:87:e9:35:
1b:3e:57:06:ba:a7:36:fc:5f:35:b2:77:b7:18:54:7b:df:58:
d5:8c:12:0c:dd:c1:59:bd:19:a2:a1:99:20:df:c0:6e:2f:f6:
f9:dd:eb:0d:97:62:8b:7e:9c:58:ae:64:a3:58:75:bc:fb:86:
76:21:3b:0b:bf:af:3f:05:35:7a:b9:0f:63:3f:f1:78:7c:19:
58:4f:e5:25:8c:de:50:f4:9c:9a:c4:f1:24:1c:12:ee:67:6c:
ff:4c:c5:03:be:69:f8:27:d4:9d:5d:9b:b9:af:5c:8b:18:f0:
51:4b:cc:37:f1:ab:01:cd:99:f9:ed:97:46:41:8e:10:14:82:
67:64:df:04:64:be:34:93:92:99:ec:5e:a9:ba:78:84:46:46:
e1:bb:2f:ab:77:e3:7b:a2:ed:ae:d0:d9:cd:f0:b9:5a:cf:1b:
69:7c:77:f1:ad:26:b8:0e:35:56:41:2e:a4:8e:15:93:48:85:
06:75:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 21:53:22 2024 by rpki-client on console-ams.rpki-client.org