Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/969cf122-eaa3-3c57-ae69-8cb38b26850e.roa
File: 969cf122-eaa3-3c57-ae69-8cb38b26850e.roa (raw, json)
Hash identifier: 6kLAheyMg7kDAs6oHUuVSWOLZHqQt6b4ikM3/d43xsY=
Subject key identifier: 15:95:6A:79:6E:FB:E3:09:28:07:7B:76:A2:63:94:EA:9F:EF:8B:B3
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F43285843A0BA63068C4EC5068E77D240
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/969cf122-eaa3-3c57-ae69-8cb38b26850e.roa
Signing time: Sat 21 Oct 2023 21:57:05 +0000
ROA not before: Sat 21 Oct 2023 21:57:05 +0000
ROA not after: Fri 19 Jan 2024 22:57:05 +0000
asID: 834
IP address blocks: 72.14.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:a0:ba:63:06:8c:4e:c5:06:8e:77:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Oct 21 21:57:05 2023 GMT
Not After : Jan 19 22:57:05 2024 GMT
Subject: CN=aa1842d1-c771-4275-bcfb-eb7e48d561b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:6a:2b:c6:b1:b7:4d:7b:f5:5d:f7:c2:75:
5e:b6:46:58:b1:94:f4:3b:72:1e:a2:55:ab:81:d0:
35:59:a0:81:5d:2b:f3:ab:b5:58:bb:c3:5e:da:4d:
90:c8:98:6f:aa:6b:ee:c4:61:ef:2e:2d:fa:53:b3:
2d:8a:f9:32:ac:2f:83:d4:e7:ad:fc:b7:6c:11:53:
9e:2e:af:91:d4:1e:79:81:b7:c6:38:93:25:79:31:
36:5c:ef:1b:c7:d1:c3:54:01:e5:8c:33:95:60:38:
97:9e:28:14:f3:12:ad:64:95:76:bd:1e:09:cc:16:
80:7f:90:4e:46:b3:d9:2d:70:9c:89:ba:f1:fc:52:
48:c8:8f:5d:39:9f:e9:af:a9:f4:02:54:ae:aa:79:
c4:ed:c1:fd:af:c6:9c:b9:ea:bc:65:9a:21:8e:9d:
9f:f8:fc:b6:67:d2:79:96:02:2b:78:ef:b2:33:58:
c4:08:be:fb:12:d6:a2:ca:38:61:c4:29:0b:62:b9:
f5:c1:3a:cc:16:ef:7f:88:34:2f:06:25:bc:f5:30:
cc:57:da:a9:6a:9c:31:44:3e:93:2b:4d:60:3e:91:
b7:41:a6:f5:a3:ec:26:54:70:e6:3a:d9:10:3b:be:
27:21:67:84:79:f5:35:1f:d9:8d:ba:db:5e:74:e9:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:95:6A:79:6E:FB:E3:09:28:07:7B:76:A2:63:94:EA:9F:EF:8B:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/969cf122-eaa3-3c57-ae69-8cb38b26850e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:21:d2:ad:7c:4f:b2:0a:8c:94:e2:79:23:86:c2:74:27:6b:
95:2c:9c:69:1f:a7:d9:3a:73:9a:c9:23:9d:87:6c:b0:03:d3:
0a:6c:75:ce:54:da:ac:ac:5b:36:93:d0:f6:b7:38:38:7c:ea:
57:63:da:3c:59:c3:89:fd:02:84:c9:2c:3b:e0:cb:cc:31:be:
3b:03:98:fa:d2:0d:a4:a3:b1:a5:6d:5c:b7:55:71:03:0d:9a:
12:11:34:ab:9b:22:cd:ad:a9:9b:4d:a8:60:34:c2:5e:d7:6b:
ce:07:ee:cb:57:7a:e7:a4:59:11:47:a4:bb:de:ed:6c:24:7d:
89:29:20:ec:91:e2:eb:6b:2f:53:50:8f:bf:3f:86:8b:83:01:
76:e3:2c:95:bd:3b:4d:80:a0:6c:cf:09:68:11:47:91:28:69:
6d:62:6f:d7:4c:9f:80:46:f7:ef:20:62:d1:92:d0:84:6e:3f:
c7:9b:db:b2:db:e7:d8:14:41:97:8a:29:8c:2e:77:18:0c:93:
bc:17:84:25:3f:fe:4c:d5:e0:8a:20:95:9e:a9:f9:f9:5f:b9:
1d:94:1b:a4:89:6f:ed:f7:56:e1:2e:16:59:91:ff:1e:63:31:
87:11:ce:fe:82:ae:2e:f7:68:aa:0d:a2:12:53:f9:34:65:2b:
25:65:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 18:06:08 2023 by rpki-client on console-fra.rpki-client.org