Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53f23666-7dc6-3a55-825c-e9b6c5d94f95.roa
File: 53f23666-7dc6-3a55-825c-e9b6c5d94f95.roa (raw, json)
Hash identifier: 4d2AJXfGvNH0RgfXVawxPRHvff5g1lJd5q/iMMTCi7s=
Subject key identifier: F2:42:92:0D:FA:CE:6B:A2:D1:2C:58:04:06:BC:83:CD:50:0B:A3:AC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328583E5189F2CCA339A0EF28C93F60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53f23666-7dc6-3a55-825c-e9b6c5d94f95.roa
Signing time: Tue 21 Jun 2022 12:00:00 +0000
ROA not before: Tue 21 Jun 2022 12:00:00 +0000
ROA not after: Fri 20 Jun 2025 04:00:00 +0000
asID: 701
IP address blocks: 23.29.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Oct 2023 14:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:51:89:f2:cc:a3:39:a0:ef:28:c9:3f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jun 21 12:00:00 2022 GMT
Not After : Jun 20 04:00:00 2025 GMT
Subject: CN=4fc986d2-809a-4180-8b07-9038fdbfd8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:64:c6:37:25:44:f0:31:b1:06:3c:8b:62:
ca:a2:08:4c:06:a5:aa:36:6c:22:16:cb:b5:5e:e0:
2b:2b:0c:52:26:71:1e:df:c7:13:f8:61:9b:3b:03:
fe:04:02:f9:da:53:65:9f:20:9c:74:46:9c:38:74:
da:52:2a:6e:2f:3c:9f:a1:df:c6:23:12:55:6b:7a:
9e:93:b1:55:a8:ba:4b:ad:d6:01:7b:81:c0:1a:73:
0a:0a:45:44:bf:75:eb:c7:2a:77:0c:21:a5:10:99:
ce:e2:57:ef:06:ab:d6:3d:06:75:48:94:79:a7:20:
e2:4e:4b:65:d9:20:46:d1:9d:1d:e1:44:48:ee:3d:
b0:29:8d:7c:62:e4:1d:45:30:78:7e:46:33:36:9b:
6a:cb:fe:63:2d:3d:4c:7f:d7:2b:c9:16:84:57:c8:
34:15:e1:0b:86:d4:55:66:57:72:3c:89:98:e7:5d:
f2:42:f4:6b:f4:30:90:22:65:43:a4:be:30:b2:37:
e8:10:e0:ac:55:99:22:49:56:78:ad:10:d4:30:19:
19:68:fc:9e:b4:bd:4e:5b:1e:be:23:1e:25:89:b0:
7b:6a:1c:29:38:e7:b4:b1:f0:88:c5:24:0e:87:e6:
6f:d9:d9:72:49:4d:fa:76:31:e2:ac:0e:f8:de:85:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:42:92:0D:FA:CE:6B:A2:D1:2C:58:04:06:BC:83:CD:50:0B:A3:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53f23666-7dc6-3a55-825c-e9b6c5d94f95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
23.29.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:78:a7:27:b8:b3:10:48:95:26:5f:01:15:d1:94:2f:1c:67:
e8:59:07:45:7d:05:d5:2b:cd:95:a8:76:93:ca:97:72:0b:4a:
f5:b2:ce:0d:42:a3:6e:2e:cc:16:91:77:62:fc:85:f8:40:a5:
70:1a:30:73:17:db:01:2c:d8:f3:74:ef:da:05:37:8d:ce:79:
ae:7d:68:bb:ba:85:d6:6f:78:68:f4:04:80:19:bc:3d:a8:4e:
e9:9d:cf:d0:0c:5f:51:6b:ff:1a:17:23:71:3c:04:83:19:ad:
17:8b:7e:8b:04:74:7a:fb:8d:eb:bf:41:45:58:41:17:fb:64:
b3:24:9f:a9:22:5f:34:2d:0e:73:7c:9e:4a:6d:0b:dc:be:f3:
b3:44:44:9b:11:06:ba:2f:bf:59:dd:a7:c4:0d:82:11:a3:1d:
29:6a:4e:40:3e:62:df:8d:d5:1d:5a:1e:77:fe:05:43:72:e1:
10:c7:f1:d6:74:3f:e4:83:e2:93:fe:50:de:65:6f:20:8e:1f:
ff:c2:15:ee:11:6a:fb:69:b6:33:d0:3b:6a:e7:20:81:68:76:
f7:ba:05:37:de:7d:be:6d:cb:53:a6:08:f9:cb:99:f5:4e:02:
f7:26:d8:5c:b5:cc:e1:67:9a:23:0f:af:7b:24:a6:92:7e:03:
db:fa:22:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:32 2024 by rpki-client on console-ams.rpki-client.org