Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5c2c936-a5dd-34e4-af49-a7bbfecdc459.roa
File: f5c2c936-a5dd-34e4-af49-a7bbfecdc459.roa (raw, json)
Hash identifier: wS/g+Kv8mupu9/d7GOy2ME3WTbNeHSXnjL46HR9Th3U=
Subject key identifier: 06:F3:23:83:EB:3B:98:B8:92:5D:78:E8:F7:0E:69:19:31:33:66:02
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328583DDC4743FF7210773160F99880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5c2c936-a5dd-34e4-af49-a7bbfecdc459.roa
Signing time: Tue 10 May 2022 12:00:00 +0000
ROA not before: Tue 10 May 2022 12:00:00 +0000
ROA not after: Fri 09 May 2025 04:00:00 +0000
asID: 701
IP address blocks: 70.19.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Wed 08 Nov 2023 19:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:dc:47:43:ff:72:10:77:31:60:f9:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: May 10 12:00:00 2022 GMT
Not After : May 9 04:00:00 2025 GMT
Subject: CN=f2bcd6f8-0398-4169-b445-4199e04e91cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:40:e5:1b:7a:e4:13:05:0c:b5:fc:34:a7:
55:b5:a9:ff:dc:a9:b2:27:f4:d4:de:2c:5a:f4:7f:
bb:b9:11:55:be:24:26:ec:f8:5e:c6:87:ce:5e:f0:
b7:58:f4:70:fe:b6:03:d6:ce:fb:51:97:f3:e6:9d:
ae:56:95:ff:86:eb:cb:ca:6f:75:0b:97:8d:01:ae:
f0:ae:66:fb:31:5a:2c:74:3e:10:12:81:04:19:9d:
5a:e2:04:73:1a:21:43:e2:a3:92:2a:8d:b5:fc:a1:
b0:2c:3e:00:56:98:dc:89:05:66:9c:3d:17:4d:8d:
65:d4:bf:ea:36:87:67:c7:fc:ff:40:06:21:1d:30:
d0:73:9b:2f:98:1a:9d:0a:cd:c8:f8:82:cc:e9:e6:
f2:d1:47:68:00:96:e3:42:94:2f:8c:71:21:f8:92:
e2:78:7c:ab:80:ed:c4:97:cf:14:9f:83:ff:be:26:
38:34:b4:55:be:76:0b:d4:b5:02:59:da:4a:4c:b0:
88:eb:de:eb:d9:67:44:ca:d5:30:c9:d3:39:6e:21:
82:4b:f1:90:59:1b:dc:5b:09:05:8c:9a:da:9a:24:
61:9f:82:25:a8:1b:df:94:6f:01:b5:77:88:ba:5d:
14:48:1f:29:24:1b:48:41:05:ce:3d:8c:35:bc:70:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F3:23:83:EB:3B:98:B8:92:5D:78:E8:F7:0E:69:19:31:33:66:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5c2c936-a5dd-34e4-af49-a7bbfecdc459.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.19.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:b7:f2:2d:75:8f:1b:16:cd:67:0f:65:89:ee:91:0a:dd:05:
bb:ce:96:65:a6:34:3c:df:80:27:29:f8:7f:86:51:39:94:60:
00:87:79:ba:03:b1:6f:09:02:7f:1f:44:61:02:67:9d:74:7a:
f1:31:1b:23:b5:c8:5b:41:d0:2d:a4:0c:47:1f:3d:fa:59:8d:
a7:4e:5c:49:19:24:e9:88:a7:4f:64:e9:b9:17:9f:5b:63:81:
6b:86:b8:8a:30:d4:c8:62:7c:4b:d0:e1:4f:6f:02:31:ef:40:
1a:fc:a7:19:c6:a8:f3:16:35:56:4f:e3:39:4a:e5:28:63:3c:
5a:92:16:11:86:40:58:25:f1:ac:01:b6:22:05:91:f4:cf:19:
dc:27:08:be:c7:b3:68:1c:1c:86:a1:86:c1:ac:2a:1a:0b:b0:
e3:08:c2:f3:0a:49:6b:0f:96:73:93:90:79:9e:ed:7a:38:8f:
93:01:c0:75:1d:cf:c9:a2:54:14:22:35:aa:70:4d:88:a7:c7:
02:f0:dd:44:b6:bb:12:0d:ff:b8:0c:4c:5a:89:d5:4e:2e:f2:
cd:88:62:d8:57:37:42:03:c4:29:27:6a:52:92:d1:ee:e5:b7:
10:a6:d2:fc:46:dd:e3:f6:c5:ea:da:ab:a9:7e:11:e7:ec:12:
fc:49:18:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:39 2024 by rpki-client on console-ams.rpki-client.org