Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f5cc8bdc-365f-3ad4-9e98-0bf6daf29ab1.roa
File: f5cc8bdc-365f-3ad4-9e98-0bf6daf29ab1.roa (raw, json)
Hash identifier: QZuM/uD9//CzysqComZCHHnIJ0+VFDyD081b1EEE5lU=
Subject key identifier: 09:6A:23:32:28:2B:A1:40:7C:91:FC:74:EC:37:E9:0E:94:03:61:3A
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F432858456A85C8469BA6B19B2F9746C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f5cc8bdc-365f-3ad4-9e98-0bf6daf29ab1.roa
Signing time: Tue 02 Apr 2024 21:31:19 +0000
ROA not before: Tue 02 Apr 2024 21:31:19 +0000
ROA not after: Mon 01 Jul 2024 21:31:19 +0000
asID: 0
IP address blocks: 4.42.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 May 2024 15:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:6a:85:c8:46:9b:a6:b1:9b:2f:97:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Apr 2 21:31:19 2024 GMT
Not After : Jul 1 21:31:19 2024 GMT
Subject: CN=56b95e09-a9e4-440e-bf21-675d387005d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:e6:d7:ba:30:38:46:40:da:92:62:c6:d3:
31:be:a1:54:dc:7a:c0:62:b3:66:7e:bb:e1:ba:47:
95:1e:d1:b8:8d:05:cb:ba:3c:d6:3b:2d:5c:b2:2e:
a1:54:76:08:42:8a:9e:3a:27:32:bc:53:f6:c2:ae:
98:1b:a5:6c:22:6d:01:a5:7e:70:aa:64:24:3d:9f:
5a:97:8a:64:d7:81:aa:d3:d9:60:87:7c:65:ef:52:
0c:dc:be:13:da:42:12:e4:d2:26:b1:e3:ff:2e:14:
5d:1e:6b:d2:0a:b6:49:34:97:48:db:f0:0a:08:27:
0e:e7:2d:3d:3b:0c:c9:7e:dc:b0:d6:d5:f2:86:e6:
6a:4f:98:20:23:51:82:19:46:c6:87:b2:31:27:00:
f4:6a:49:8b:b8:f6:98:f6:8e:e5:f3:a1:56:e4:fc:
2e:3d:eb:86:1e:5e:cb:24:6d:d5:56:83:f1:d8:8d:
89:56:9b:f8:fd:72:db:d4:dd:b2:34:56:9f:fd:cd:
c8:0a:4d:43:40:47:91:4d:fc:96:62:2b:a7:06:2b:
f4:52:61:68:e8:40:80:b8:be:4d:53:7a:a3:dc:f8:
ec:84:cf:ed:db:db:49:f0:a4:f3:c7:65:34:c7:7c:
3c:13:b4:63:3c:41:2c:87:f4:fd:4a:7b:54:98:7e:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6A:23:32:28:2B:A1:40:7C:91:FC:74:EC:37:E9:0E:94:03:61:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f5cc8bdc-365f-3ad4-9e98-0bf6daf29ab1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
4.42.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:2d:4d:3d:65:57:47:f5:c8:b4:59:0f:f2:5c:a1:93:47:15:
2a:a7:44:b8:9c:d6:3a:b9:2c:d5:c2:d8:05:12:7d:cf:8e:71:
7a:a4:36:79:79:d0:be:fd:14:cd:1e:cd:d2:58:db:97:bc:e3:
f5:ef:19:d6:4f:97:85:38:d4:aa:f2:cc:16:3c:2c:61:ca:68:
45:2f:1c:3f:ef:2e:8e:87:90:ae:1b:05:4e:56:9b:b6:d1:ee:
84:c8:e6:c0:f8:cd:cf:69:ce:d3:c2:97:fe:be:76:fe:c1:2e:
ef:f5:3f:60:3f:c7:40:eb:d1:da:ce:f7:a6:1d:d8:57:c8:cf:
3c:b9:f5:47:36:a2:9f:d6:33:c1:6f:00:0e:ae:09:fb:76:5a:
d5:c6:bf:f2:22:81:12:58:cc:76:03:3d:72:da:08:df:a2:30:
bf:af:30:04:fa:cf:20:02:11:c1:43:35:88:49:4f:eb:83:00:
d7:e1:1d:2c:8c:6a:00:a2:f1:17:35:4e:ea:01:08:18:e3:4e:
3b:bf:0d:c8:e3:18:2d:2a:92:12:07:b3:7a:17:c1:74:7c:47:
d8:08:89:33:fa:95:0b:d9:7c:0b:4e:8b:76:80:ea:4c:eb:00:
93:54:59:ff:7b:34:b9:61:e3:bd:ce:5f:66:ba:6f:aa:12:71:
c9:fd:7b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:54:43 2024 by rpki-client on console-ams.rpki-client.org