Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/ef54291f-28f6-3cc5-916c-3bf99e21292d.roa
File: ef54291f-28f6-3cc5-916c-3bf99e21292d.roa (raw, json)
Hash identifier: Izi+9YTFdvpMGTv9jq+95pa2sigT0BKFOivSy7E8GS4=
Subject key identifier: 0F:42:7C:6F:0F:C7:F2:F5:21:0E:0C:3A:C0:11:24:E0:7D:6D:20:D5
Certificate issuer: /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial: 010D0C9F43285845C873992DD1BDC9D8B3E76BC0
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/ef54291f-28f6-3cc5-916c-3bf99e21292d.roa
Signing time: Mon 06 May 2024 13:00:34 +0000
ROA not before: Mon 06 May 2024 13:00:34 +0000
ROA not after: Sun 04 Aug 2024 13:00:34 +0000
asID: 7018
IP address blocks: 170.205.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 06:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:c8:73:99:2d:d1:bd:c9:d8:b3:e7:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Validity
Not Before: May 6 13:00:34 2024 GMT
Not After : Aug 4 13:00:34 2024 GMT
Subject: CN=3ed22d4f-357d-416b-af43-ca6561ceb36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:ca:70:74:77:5e:26:07:b3:ef:2c:20:e2:
ee:e0:5c:a6:db:90:13:bb:47:ff:f7:d9:9e:c3:74:
ec:58:90:b0:82:5a:52:69:6c:03:86:b2:68:11:af:
52:fb:e5:6b:4a:d8:49:22:85:51:08:cf:e9:84:bc:
9a:0a:69:fe:05:20:47:7e:da:a5:ce:96:2c:58:24:
73:29:e2:3d:77:e8:62:2e:1b:36:2f:b9:ed:8f:ee:
05:15:ef:21:48:ff:e9:84:93:a9:2d:74:29:f3:3b:
ee:ce:48:c7:41:ff:7b:01:9d:cc:5d:e6:61:07:59:
46:7f:7b:c1:5e:cd:8b:3a:d5:0b:1e:ad:2b:5f:2f:
69:54:07:70:cf:b2:db:fe:59:6e:42:f1:2c:b1:6e:
03:31:87:b4:38:d2:d2:ed:3f:d7:46:72:88:5e:df:
11:90:6a:c5:f5:33:0b:5b:ce:b7:4a:18:48:85:93:
cf:f6:09:37:cd:c8:fa:01:ac:6e:c1:5c:eb:e1:ad:
25:e8:22:24:2d:95:30:94:51:13:2a:9a:a7:82:5c:
e8:ce:e9:5e:89:47:1f:f0:ec:13:8e:91:63:1b:51:
fe:04:96:79:72:d1:b2:fc:80:e2:f8:98:ad:74:e3:
f9:98:93:46:2d:87:8b:e5:0a:f0:ad:e5:9f:57:04:
8b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:42:7C:6F:0F:C7:F2:F5:21:0E:0C:3A:C0:11:24:E0:7D:6D:20:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/ef54291f-28f6-3cc5-916c-3bf99e21292d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
X509v3 Authority Key Identifier:
keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:20:96:89:29:13:2d:6a:9f:71:d8:5a:fb:6f:d0:59:34:b2:
e8:af:dc:3b:b4:e1:e2:25:89:2d:95:e1:65:3e:db:81:ca:9c:
b8:ff:3a:db:3d:2a:45:ef:11:a5:b1:63:26:c5:99:77:ec:be:
59:ff:7d:8a:ac:3d:8b:57:b9:22:64:2d:a3:1b:d9:bd:55:53:
9d:54:03:cb:0e:58:02:0a:3d:7e:e8:3e:4c:4f:a6:41:f2:74:
26:17:42:b2:3a:02:d1:c7:de:04:3b:98:18:a5:4f:47:d0:36:
ec:f4:38:e0:77:0a:81:67:59:3f:2e:e2:7f:98:dd:47:54:aa:
27:32:3c:9c:ba:ba:cd:e4:48:28:d1:5d:a0:29:05:53:7f:9f:
b9:66:12:6a:97:6d:e7:f5:4b:8c:1a:90:ff:13:3a:22:90:21:
b3:7a:ef:a6:58:b6:92:cc:6d:21:50:06:f4:0c:61:08:f3:ee:
f3:ec:fc:a7:24:f3:a7:31:d3:0d:d9:ee:54:1f:b8:bd:f0:ef:
1d:c7:eb:3b:85:01:2f:ef:b5:92:8c:13:a7:1f:fa:ea:6e:34:
74:88:1e:65:8f:7a:fb:19:ff:ab:b2:44:07:b2:72:d9:bf:c2:
9d:96:ee:6f:50:9e:90:f8:6c:6e:9c:61:53:d5:14:bf:fc:11:
c9:05:ee:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 09:09:31 2024 by rpki-client on console-fra.rpki-client.org