Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3aa812ed-0485-3390-a782-817bfb2a93b7.roa
File: 3aa812ed-0485-3390-a782-817bfb2a93b7.roa (raw, json)
Hash identifier: g4lQmNZEcfPDX7xGafcbnfHXnrtaor3d6yMyWX8/x8k=
Subject key identifier: 65:4E:9B:47:70:EB:00:1C:0C:1E:41:AD:C6:D3:3E:6D:F9:69:8D:83
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842C665DC64DE746F1ADA991180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3aa812ed-0485-3390-a782-817bfb2a93b7.roa
Signing time: Fri 04 Aug 2023 17:00:33 +0000
ROA not before: Fri 04 Aug 2023 17:00:33 +0000
ROA not after: Thu 02 Nov 2023 17:00:33 +0000
asID: 834
IP address blocks: 50.114.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c6:65:dc:64:de:74:6f:1a:da:99:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 4 17:00:33 2023 GMT
Not After : Nov 2 17:00:33 2023 GMT
Subject: CN=e505891e-508c-44dc-ad08-0554edffbdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:7c:b8:7f:3b:e0:cd:2c:34:14:32:2c:a9:
2b:9c:d1:2a:6a:ca:68:8a:56:65:70:72:45:a4:9f:
4f:8a:dd:a9:17:c0:2e:23:28:ff:e4:9a:72:41:63:
00:ac:61:62:f9:a7:f8:e7:55:8f:97:81:04:90:58:
69:5c:28:2a:13:33:b4:f4:72:c3:7e:6c:0d:30:83:
d2:45:70:ee:4e:10:e3:b2:96:13:fd:96:38:e7:1c:
56:f1:73:c8:95:24:e2:66:35:b2:d4:f0:c2:bd:e0:
7a:ba:b0:65:66:f5:6a:f5:58:1f:a0:5d:f0:68:17:
eb:2c:10:db:81:74:32:f1:b7:c6:bc:2c:64:9d:e3:
ab:7b:f1:97:61:ab:3e:ac:8d:b3:5d:f6:65:84:8b:
c9:04:53:f4:a5:d1:7b:8a:4a:2f:3a:44:88:81:95:
0a:ec:9e:c9:5d:6a:e8:37:a5:96:a0:7b:b3:a0:9c:
b6:85:32:ee:88:b8:41:db:dd:4b:ac:08:00:cd:0e:
91:62:96:8b:37:35:8a:5d:a5:30:01:b3:1a:c1:86:
1e:ed:1a:77:ce:6d:51:d6:04:d4:4e:8f:3b:a5:40:
82:7d:fe:83:ef:7e:3b:cc:6c:51:7a:8a:9c:b4:5d:
b0:9e:bf:ee:19:c9:48:51:f3:21:e9:01:4b:6a:42:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4E:9B:47:70:EB:00:1C:0C:1E:41:AD:C6:D3:3E:6D:F9:69:8D:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3aa812ed-0485-3390-a782-817bfb2a93b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:5f:7a:eb:0a:f6:72:d6:9b:e3:e2:68:c1:ec:51:64:0b:59:
86:f3:65:47:24:dc:3f:cf:dc:69:81:f2:d4:a5:7c:d7:f9:8b:
43:77:da:44:71:ad:4e:f0:f8:17:ba:42:07:d5:61:34:d2:98:
0a:17:31:5e:36:dc:c9:19:3b:5e:68:f4:71:fd:c5:19:a3:dd:
12:11:30:42:9e:4d:c0:4b:f0:09:0c:a3:5c:31:c1:65:c5:c2:
19:e9:56:8e:4d:de:be:03:f5:bf:9b:17:3a:13:7e:85:fe:37:
60:09:38:d6:3a:70:16:53:18:7f:9e:48:04:fa:36:0c:ad:3e:
30:82:b6:fe:b3:e5:ca:ca:e2:9b:55:3f:1e:63:2e:06:de:25:
09:4e:a8:fa:bc:ce:ba:32:49:41:03:44:9a:6b:21:91:f0:e3:
ec:cf:30:4d:9e:04:22:a6:05:a8:15:f3:0c:f8:a3:13:c6:f0:
c0:b8:66:04:30:5a:39:e8:a1:55:92:c8:45:e9:8f:8b:e4:34:
e6:35:83:70:f0:99:ee:ab:4d:93:f8:be:7e:de:3d:77:e1:64:
16:5f:02:50:c7:3d:d3:a9:19:23:50:61:a6:74:5b:40:be:d2:
34:55:b4:d7:51:5d:2a:43:24:5d:b1:c9:34:b8:92:a7:24:17:
15:76:0b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 20 23:42:54 2023 by rpki-client on console-fra.rpki-client.org