Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/573a2754-a1ae-3d17-a4fe-bd514085d924.roa
File: 573a2754-a1ae-3d17-a4fe-bd514085d924.roa (raw, json)
Hash identifier: DLZzLxVrtQlCpOLVyrdLqZYo9x417BOoVx5rtT8Dyyg=
Subject key identifier: 53:5D:8C:B7:7C:B2:8C:68:D8:BE:75:5C:B6:65:4E:6D:C8:CA:11:2E
Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial: 010D0C9F43285845CCA0590CC04A42208E98FCC0
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/573a2754-a1ae-3d17-a4fe-bd514085d924.roa
Signing time: Wed 08 May 2024 00:54:04 +0000
ROA not before: Wed 08 May 2024 00:54:04 +0000
ROA not after: Tue 06 Aug 2024 00:54:04 +0000
asID: 0
IP address blocks: 68.69.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 11:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:cc:a0:59:0c:c0:4a:42:20:8e:98:fc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Validity
Not Before: May 8 00:54:04 2024 GMT
Not After : Aug 6 00:54:04 2024 GMT
Subject: CN=f361a1d3-46ce-4aa4-8996-550425ae1dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:53:30:42:1c:81:5f:a3:ad:c9:a6:2c:6d:
d6:de:ac:7d:23:38:c1:3e:b5:5f:0a:61:51:94:e0:
55:b5:cd:21:58:a0:76:54:93:32:9a:c1:db:0e:01:
fe:83:b6:4d:62:9e:3b:04:77:93:06:43:ec:10:26:
17:cf:b1:f5:c9:25:49:2e:73:70:91:b1:93:21:94:
45:7b:39:3c:13:db:f9:bf:68:2d:e5:4b:c7:a6:72:
cc:75:82:d1:bf:cb:46:4c:0f:f3:6b:10:01:95:05:
5c:41:dd:ff:19:65:da:6a:db:a5:b3:95:63:3d:08:
61:da:5b:b2:31:17:2d:c4:05:f0:07:7d:d5:15:1c:
a6:ea:60:d4:29:5d:2c:1a:b9:d7:2f:e8:75:17:cb:
93:3c:11:22:8c:64:da:dd:14:0e:24:ce:a3:2c:90:
ac:a6:a5:c2:b2:87:7f:a0:56:67:9e:6e:37:0b:37:
63:d2:86:f8:bc:ce:12:8d:7a:41:70:f5:31:d1:e8:
c7:06:33:3b:1d:43:d3:3b:cf:8a:61:27:c4:aa:6d:
63:f2:44:9b:37:ae:99:17:96:60:d8:fa:d0:e5:d8:
6a:06:fe:2e:5f:7f:a1:c8:8a:41:a0:5f:20:23:58:
d0:63:e0:33:28:33:67:bc:bc:c2:4e:4a:b7:0e:1f:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5D:8C:B7:7C:B2:8C:68:D8:BE:75:5C:B6:65:4E:6D:C8:CA:11:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/573a2754-a1ae-3d17-a4fe-bd514085d924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
X509v3 Authority Key Identifier:
keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
sbgp-ipAddrBlock: critical
IPv4:
68.69.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:92:5e:be:d9:fe:89:29:ad:3b:4d:7b:d4:a0:3b:a6:26:ec:
57:10:52:90:75:56:d3:1c:e0:90:e2:7b:4f:e4:e0:5d:d3:c5:
a8:26:65:a6:cd:51:2a:fa:5e:89:d0:b4:d4:3d:1b:a2:93:ad:
65:98:b1:cf:3f:7b:89:c0:42:e7:4a:61:08:ad:26:be:c3:d3:
ca:1b:72:c2:ec:67:a1:9d:6e:bd:95:6c:83:eb:30:98:6b:68:
77:e7:a6:2c:79:80:25:05:9f:64:ed:92:66:97:86:c6:04:fd:
57:4c:a6:c1:46:e3:f5:47:c7:2f:95:78:e2:b3:6b:d4:b9:7e:
eb:aa:0e:b4:04:e6:65:11:db:22:a3:cd:fb:31:85:23:f1:04:
df:7b:f5:45:54:5f:68:b7:e3:40:e9:be:7d:ea:0e:ec:91:67:
80:37:3a:2a:fa:85:49:c2:3c:c2:08:c4:ba:db:00:9d:32:08:
15:85:e0:ac:b0:d7:7e:a0:98:2c:ff:28:69:0c:b3:06:d1:f8:
07:3b:4e:07:ee:8f:f5:b2:59:a2:e7:b2:7a:bd:37:d8:ac:2f:
20:85:32:21:6d:ae:35:5e:5e:0d:ed:5c:b0:0d:13:58:09:4e:
c9:57:bb:87:a7:8e:91:a9:9b:66:cb:18:ee:1d:49:af:17:ed:
bc:64:84:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 15:20:45 2024 by rpki-client on console-fra.rpki-client.org