Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/a0b12e55-bf4e-348e-93e2-89fe7ddcca16.roa
File: a0b12e55-bf4e-348e-93e2-89fe7ddcca16.roa (raw, json)
Hash identifier: zbc6lk5UhnKxjIAX4HvzTbi1yXsOW58gA8Tqj7yeUjI=
Subject key identifier: 28:37:4B:75:0E:C9:74:B8:8F:54:7B:05:B9:AB:1E:44:8F:D1:EC:77
Certificate issuer: /CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
Certificate serial: 010D0C9F43285842D23D4D12A9C0B0ED4D5EB700
Authority key identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/a0b12e55-bf4e-348e-93e2-89fe7ddcca16.roa
Signing time: Tue 08 Aug 2023 22:48:32 +0000
ROA not before: Tue 08 Aug 2023 22:48:32 +0000
ROA not after: Mon 06 Nov 2023 23:48:32 +0000
asID: 834
IP address blocks: 192.48.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d2:3d:4d:12:a9:c0:b0:ed:4d:5e:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
Validity
Not Before: Aug 8 22:48:32 2023 GMT
Not After : Nov 6 23:48:32 2023 GMT
Subject: CN=7e9be28b-2992-4fa1-b976-5977e0418271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:00:59:4a:a9:e3:7e:d9:ba:17:d8:af:e2:8f:
b5:31:04:a4:73:43:69:34:60:fa:83:9f:8a:dc:e0:
43:36:d7:f0:ec:38:e7:08:d7:67:8e:46:4e:19:84:
d9:49:54:5b:c3:af:06:a9:c9:6c:b3:30:a0:72:ec:
d8:b9:90:8a:68:fd:71:db:5a:2f:4e:4c:e5:c1:de:
de:bb:d3:60:1d:fd:7a:ff:b7:93:8a:67:e4:d0:c1:
a4:e9:0c:bd:cd:f7:d0:56:af:93:ef:9d:99:c5:69:
9b:cb:3c:88:37:b8:ab:06:2a:71:35:7a:f8:25:28:
6d:15:c8:d5:f4:5c:45:e8:28:3f:59:7d:e9:3a:d9:
97:3d:b4:7e:0b:8d:bd:7a:fe:5b:5e:3e:40:66:6e:
69:08:f2:c9:45:b6:a3:cd:95:c8:52:cc:3d:ac:b2:
84:9c:f8:75:2b:59:c8:cc:09:d6:b1:f0:2e:34:20:
a9:c7:bb:f7:be:fc:d3:75:d1:ad:f9:6f:22:83:b1:
1e:53:34:4a:f7:0d:71:09:2a:fb:38:bb:88:81:16:
5e:02:59:49:d2:85:fd:3b:92:31:fd:6f:af:bd:21:
7f:0d:4b:a9:11:95:e9:8c:18:4b:3d:5e:ff:e2:1e:
9f:3c:df:3a:d8:61:ba:d5:cc:8f:9f:5a:bb:a0:e6:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:37:4B:75:0E:C9:74:B8:8F:54:7B:05:B9:AB:1E:44:8F:D1:EC:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/a0b12e55-bf4e-348e-93e2-89fe7ddcca16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl
X509v3 Authority Key Identifier:
keyid:17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer
sbgp-ipAddrBlock: critical
IPv4:
192.48.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:f5:64:04:6c:e4:27:f0:ab:ef:ad:5b:8e:37:ad:f7:22:3e:
71:f7:73:67:03:6a:31:c8:98:37:46:c3:1e:ba:f7:f7:4d:a5:
88:bd:3a:23:28:21:10:3e:86:da:c1:a5:92:11:bb:12:e2:a5:
85:93:4c:a6:98:e1:c4:0d:6a:e0:5a:0c:f7:27:90:02:0b:bd:
08:20:84:1c:db:91:c2:3d:37:e5:da:dc:a4:96:37:4f:91:50:
78:62:d9:f7:b9:e5:18:aa:bf:13:bb:58:be:fd:94:52:c3:ef:
64:47:a3:4e:af:73:54:61:1a:44:c2:38:63:0c:92:f2:ef:ae:
c5:f2:71:e4:e9:94:89:45:21:99:73:a3:29:68:a1:3a:ad:08:
68:a1:e0:85:30:10:27:d1:bd:34:81:2f:be:8a:87:88:65:04:
cd:dd:0d:5b:ad:e3:43:57:48:ba:d4:31:ad:a3:ac:1f:49:1c:
1b:54:50:f1:5c:1b:1f:46:17:aa:16:11:9a:24:60:18:cd:42:
ba:26:7f:ce:39:c9:aa:3e:c9:45:90:ed:0b:e8:7a:d4:fb:3c:
0a:8a:46:86:ec:0c:40:0a:a0:2c:fc:07:bc:4d:6a:00:c7:bf:
a0:92:3f:4d:c3:6f:31:1d:72:45:9d:dd:7d:97:d7:0e:e2:4b:
5f:c6:86:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 18:07:01 2023 by rpki-client on console-ams.rpki-client.org