Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/5e1b02ee-b5be-3af4-a9fd-907588f0b44a.roa
File: 5e1b02ee-b5be-3af4-a9fd-907588f0b44a.roa (raw, json)
Hash identifier: Cx/6gvBlzQB88jnKATZYUS3A8WzAuAmD8Vwuzkz3ny0=
Subject key identifier: EC:FC:B3:19:32:09:70:4F:F5:B7:28:75:C8:8B:43:42:A6:D3:4C:6C
Certificate issuer: /CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3
Certificate serial: 010D0C9F432858470AE58DB3542C4896BB43B700
Authority key identifier: 26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/5e1b02ee-b5be-3af4-a9fd-907588f0b44a.roa
Signing time: Fri 30 Aug 2024 01:00:31 +0000
ROA not before: Fri 30 Aug 2024 01:00:31 +0000
ROA not after: Thu 28 Nov 2024 02:00:31 +0000
asID: 17138
IP address blocks: 158.51.175.0/24 maxlen: 24
170.39.232.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 25 Oct 2024 15:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:0a:e5:8d:b3:54:2c:48:96:bb:43:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3
Validity
Not Before: Aug 30 01:00:31 2024 GMT
Not After : Nov 28 02:00:31 2024 GMT
Subject: CN=0024b5b2-eb19-4ea8-ae75-8bd78ebf36e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:2e:48:7e:ba:28:47:5f:f5:24:9d:19:11:
6d:db:a6:06:ca:2e:44:40:fd:2e:d5:b9:aa:02:0e:
cd:86:bf:f2:9a:84:a6:7a:de:f5:38:1b:4b:d3:f8:
a2:27:c0:65:9e:70:b3:df:91:dc:db:3a:ad:32:7f:
b9:32:18:2c:4d:93:cf:b6:19:a6:1a:ab:65:58:c7:
32:ca:d1:ca:21:9c:f7:44:c8:09:71:c1:b4:21:34:
e4:d7:18:bd:57:b7:09:10:a9:81:01:e4:70:1a:b0:
0c:df:15:25:e9:0e:c3:4e:de:7b:bc:a4:f0:d9:04:
91:58:9c:ac:32:1e:2f:87:eb:06:e3:4b:57:60:e1:
67:3e:5b:8d:97:ae:cb:88:4c:c7:8e:7e:8e:77:00:
f2:47:66:c1:a8:2a:99:fb:5b:f9:4e:0d:7b:df:2e:
1c:82:53:51:5f:70:9f:35:67:77:25:00:2e:f0:5d:
13:0c:4f:5e:57:6b:ec:37:2a:f6:38:81:85:9f:07:
b5:9f:e6:49:1e:2d:c7:8d:51:57:10:59:f1:20:50:
d0:c3:66:ef:f6:ab:5d:9c:42:68:e7:02:cf:ae:27:
35:dd:7c:15:ec:5b:e1:d3:6d:1b:67:67:16:b1:a0:
6d:9f:ce:e4:d0:ce:18:91:55:87:7f:f8:51:7e:76:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FC:B3:19:32:09:70:4F:F5:B7:28:75:C8:8B:43:42:A6:D3:4C:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/5e1b02ee-b5be-3af4-a9fd-907588f0b44a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.crl
X509v3 Authority Key Identifier:
keyid:26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.175.0/24
170.39.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:96:50:0a:a5:6e:63:1b:bd:e1:05:36:c7:65:16:09:b1:8e:
11:aa:8d:9b:54:9d:2b:27:14:c3:29:38:be:2b:5d:30:94:90:
50:60:ab:92:9f:92:93:ed:7d:1d:84:7f:3a:41:d0:5e:cd:e0:
c2:68:1e:38:82:3b:68:29:9a:6d:64:66:21:4e:fe:5a:6c:9e:
e5:f8:7a:a6:ed:c1:49:09:5f:8b:cc:fd:e2:4d:d4:b2:aa:36:
c4:87:fa:56:dd:6f:32:fe:4e:59:79:77:6b:15:bc:9f:44:0a:
4a:66:3d:ca:8d:7b:15:ca:bc:b5:48:6e:4b:e3:ef:a3:b6:d8:
18:fc:c8:17:ef:9d:5d:48:7e:29:5a:1c:10:7c:6d:54:40:0c:
f6:3f:68:a9:50:a9:4a:f5:8c:f8:63:60:a6:7f:1a:d8:c3:c1:
e8:1c:92:36:5b:ea:92:ee:40:9e:e2:7b:68:21:90:0d:e7:f9:
69:52:6c:42:b7:f3:e8:11:a9:26:ad:d9:12:60:86:ff:37:23:
06:ed:0c:db:b2:b5:4d:31:64:f9:95:c1:90:7f:9d:28:aa:d3:
21:47:45:ae:8e:98:7f:51:12:d1:9f:92:72:88:9c:e6:76:6e:
e3:23:2e:7a:fa:d0:0c:5b:99:5d:e6:d2:48:50:66:e6:08:c5:
b7:6c:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:16:27 2024 by rpki-client on console-ams.rpki-client.org