Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/af967d08-df4c-3354-9617-8b8dbb42bca7.roa
File: af967d08-df4c-3354-9617-8b8dbb42bca7.roa (raw, json)
Hash identifier: T0R80+FhO6E/OS7oxn+WCddErGE1GAcXpWl3jAXCt9U=
Subject key identifier: D4:88:A7:FC:01:F2:A2:49:7C:53:95:58:D9:86:8B:EE:E2:2F:AA:BE
Certificate issuer: /CN=b450e5ef-41c2-4834-b6b3-6d1a1efe28f0
Certificate serial: 010D0C9F43285845F7E9374E9001FC45356B1F00
Authority key identifier: 44:70:52:90:13:82:B9:35:9C:3D:3F:EF:73:C2:83:91:9B:95:22:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/af967d08-df4c-3354-9617-8b8dbb42bca7.roa
Signing time: Thu 23 May 2024 13:00:34 +0000
ROA not before: Thu 23 May 2024 13:00:34 +0000
ROA not after: Wed 21 Aug 2024 13:00:34 +0000
asID: 557
IP address blocks: 209.222.192.0/19 maxlen: 19
2610:48::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 17 Jul 2024 11:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f7:e9:37:4e:90:01:fc:45:35:6b:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b450e5ef-41c2-4834-b6b3-6d1a1efe28f0
Validity
Not Before: May 23 13:00:34 2024 GMT
Not After : Aug 21 13:00:34 2024 GMT
Subject: CN=9e00be9a-3f9a-4ad1-96a7-2622cb345637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:e9:fa:25:01:48:7c:e0:ba:dc:e9:81:e1:
36:08:91:56:9a:29:88:ff:1c:d6:3b:2a:33:de:73:
38:68:af:06:b7:c0:f2:5d:cc:09:78:56:be:40:ae:
b0:81:b1:02:2a:bf:81:63:07:04:8c:89:7f:2c:91:
88:f9:84:b0:6f:d9:3b:c6:48:34:df:42:15:49:fe:
de:56:94:a4:af:a6:87:b2:6c:d9:09:a8:e4:0a:b7:
7f:b9:55:b9:0c:16:a5:cf:28:cd:23:56:71:ff:d9:
db:22:6d:f7:b9:df:8e:de:b9:a4:35:60:69:ac:f9:
72:61:52:61:f7:59:60:d9:68:93:ac:e5:3c:79:2c:
66:98:d1:34:1b:e9:d6:69:fd:60:7b:ee:9b:d5:cd:
cc:5a:54:85:a7:7f:e8:a6:c3:63:92:af:e0:64:9b:
cf:fd:b4:67:cb:de:00:ac:ca:48:32:e1:37:17:28:
63:5a:b5:bb:a9:d3:ab:12:19:ee:45:0a:fd:46:52:
30:cf:85:ad:6f:ff:fc:5a:30:bb:eb:c9:1d:a4:eb:
54:39:30:e5:63:bd:61:23:b5:8e:39:e3:ec:65:3e:
2e:1f:e0:d4:da:f7:c1:57:14:7a:20:84:b7:c4:a3:
f4:9d:f2:3d:cb:a5:6c:5c:d2:fc:71:62:ca:d0:1b:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:88:A7:FC:01:F2:A2:49:7C:53:95:58:D9:86:8B:EE:E2:2F:AA:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/af967d08-df4c-3354-9617-8b8dbb42bca7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.crl
X509v3 Authority Key Identifier:
keyid:44:70:52:90:13:82:B9:35:9C:3D:3F:EF:73:C2:83:91:9B:95:22:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.cer
sbgp-ipAddrBlock: critical
IPv4:
209.222.192.0/19
IPv6:
2610:48::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:b5:5b:0a:28:5c:71:04:57:c0:12:2c:7e:98:0b:3d:4c:c4:
3f:a9:8f:ae:bb:7a:ba:be:d3:06:af:a9:7b:74:4c:b5:a6:e4:
4d:d2:26:7e:f7:76:9b:57:a3:61:ed:18:8e:0b:5f:99:52:af:
f8:89:d9:8a:fc:1e:bb:48:0e:7a:95:cf:a5:eb:ec:17:a4:d8:
16:54:bc:3b:9b:6b:f4:3c:21:8e:9e:6e:29:09:57:7a:d9:ec:
ac:1d:5f:ca:bd:a6:24:06:94:fe:5f:88:a6:44:69:83:a4:ce:
91:6a:dd:a4:9b:5a:59:50:df:09:75:e1:ea:f2:0f:dd:85:ce:
43:e9:bc:63:60:92:f6:ae:54:7c:86:04:3f:cf:8e:ea:e0:88:
fe:53:04:a2:cf:7c:85:fa:5c:1f:d4:a2:d5:02:9e:00:17:3a:
1e:ef:03:be:5f:e1:d2:03:ae:78:67:3b:c7:46:ed:62:db:3b:
19:47:87:c8:f6:46:f3:50:aa:d0:e2:02:28:51:c9:af:b6:27:
ef:ce:6e:4a:d5:32:b0:6a:84:62:7c:c7:90:4c:74:81:ad:81:
8b:f2:3a:6f:25:c1:e8:ee:59:a2:ed:a5:1f:97:47:fb:81:26:
2b:2c:e0:2a:7a:b0:80:60:38:45:88:29:a8:b9:43:69:46:d0:
ab:b3:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 14:12:19 2024 by rpki-client on console-fra.rpki-client.org