Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/77aa5f52-6759-341c-888f-7f2ec95f48f0.roa
File: 77aa5f52-6759-341c-888f-7f2ec95f48f0.roa (raw, json)
Hash identifier: erHeQEct2DKptJy1XCG2FUMs3MaWpWa0ZYQjKsZ7Yhk=
Subject key identifier: A1:6B:1F:2B:F5:5E:D3:17:32:73:0D:C0:79:2D:FB:04:12:5F:BE:84
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F4328583FBB307C79CBE3970049F90060
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/77aa5f52-6759-341c-888f-7f2ec95f48f0.roa
Signing time: Mon 03 Oct 2022 15:36:08 +0000
ROA not before: Mon 03 Oct 2022 15:36:08 +0000
ROA not after: Fri 31 Jan 2025 05:00:00 +0000
asID: 14315
IP address blocks: 198.186.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:bb:30:7c:79:cb:e3:97:00:49:f9:00:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Oct 3 15:36:08 2022 GMT
Not After : Jan 31 05:00:00 2025 GMT
Subject: CN=9f1916ac-47f8-4744-888c-0d5c7b4c2f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:5d:9d:3d:a4:5e:84:55:37:a6:c9:e3:97:
d6:23:ca:e8:a3:e0:2c:48:d1:75:c9:ab:f5:55:da:
c2:55:40:09:f0:7f:a5:ef:ca:0d:ae:27:b5:9d:cb:
bb:ee:86:5c:35:4d:76:84:f6:4c:a5:18:a9:9c:36:
c1:3e:6d:2d:70:ce:09:f4:39:f9:f6:04:36:5d:ad:
ea:e2:80:87:69:81:54:09:04:a4:24:2f:97:67:01:
4c:81:81:41:a6:75:2b:92:3d:11:9f:3d:2d:88:6c:
d8:6f:aa:ee:96:9f:78:2d:bf:65:a6:55:bf:53:f1:
54:c5:14:6b:a5:50:dd:d2:6f:be:10:4b:0b:a6:22:
72:ff:e2:d9:93:41:52:d9:e3:02:01:dd:e9:39:9c:
6f:c9:57:dd:76:d5:f7:f8:49:c4:63:e2:4e:2f:d7:
d0:0b:b5:be:f8:05:da:76:97:0b:3b:2c:27:92:3b:
75:6f:11:2c:6d:82:9e:d0:7d:7f:63:20:28:85:56:
a9:ac:87:6c:04:0a:02:56:c8:76:11:a3:90:d9:b0:
91:c5:c4:5e:ab:94:00:bb:0a:91:42:1e:bb:20:de:
00:a7:0f:0c:de:46:82:ab:26:39:a2:19:56:f9:9e:
88:22:43:d1:ab:22:50:3c:1d:82:6b:55:82:ee:16:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6B:1F:2B:F5:5E:D3:17:32:73:0D:C0:79:2D:FB:04:12:5F:BE:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/77aa5f52-6759-341c-888f-7f2ec95f48f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv4:
198.186.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:44:e1:e0:ae:86:17:4f:86:b8:ad:d3:60:11:9c:5f:da:0a:
37:81:64:9e:02:be:4a:0b:c5:f1:f6:ee:73:f9:32:51:23:76:
4a:41:ec:0f:c2:ef:65:66:47:2a:e6:4a:7e:8a:1a:3c:8d:c8:
e5:64:bc:b0:7d:51:68:bb:a7:bf:35:f9:16:29:fd:33:35:ff:
ed:13:74:a5:0b:9a:15:02:6f:16:7e:4f:68:3f:7f:44:e3:53:
38:71:fc:58:f4:ff:ae:ce:f8:dd:fa:0a:36:67:10:cf:17:0e:
fc:28:59:22:22:ee:ad:8c:00:84:77:1a:22:a3:ea:4e:eb:6d:
52:5e:e4:99:9a:a4:f7:58:d2:07:51:92:35:58:6f:78:f6:45:
19:53:44:4a:d0:4b:b2:f2:cd:e8:47:7f:bf:61:c6:c5:c3:d4:
ce:4c:46:31:bf:41:07:a1:49:18:3d:09:c7:0b:86:1a:00:f1:
27:4e:d9:ed:9c:1e:ab:5e:19:d4:c3:15:be:25:86:b3:aa:9d:
a9:13:02:78:2f:80:5a:e2:5a:d1:ba:4b:fd:9f:a7:7f:52:98:
ac:5e:ea:b6:0c:49:d8:39:77:36:dd:ad:2f:af:67:e0:75:ca:
f6:61:04:39:14:78:91:6f:9c:22:79:af:dc:ac:6c:9e:c8:68:
85:87:af:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:18 2023 by rpki-client on console-fra.rpki-client.org