Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/e1553ce1-bc5c-3949-8f15-7c4040389a7d.roa
File: e1553ce1-bc5c-3949-8f15-7c4040389a7d.roa (raw, json)
Hash identifier: 18lqJ6RaFC1oC/SKHGrKmKUYZ8D3tHKqBYlNJ1MQj84=
Subject key identifier: 9E:37:2E:D2:10:20:C6:1F:00:99:7D:99:EA:92:8A:5E:3B:D7:6C:B2
Certificate issuer: /CN=86d41278-dbec-4ce1-a2aa-72427ed93680
Certificate serial: 010D0C9F43285844E26ABD07AD6FF552E1AF8200
Authority key identifier: 89:3D:8C:5B:1A:3F:09:A2:DA:D4:57:63:26:C0:70:4A:67:1B:75:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/e1553ce1-bc5c-3949-8f15-7c4040389a7d.roa
Signing time: Wed 14 Feb 2024 03:26:53 +0000
ROA not before: Wed 14 Feb 2024 03:26:53 +0000
ROA not after: Tue 14 May 2024 02:26:53 +0000
asID: 393857
IP address blocks: 216.176.36.0/24 maxlen: 24
216.176.37.0/24 maxlen: 24
216.176.38.0/24 maxlen: 24
216.176.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 14:58:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:e2:6a:bd:07:ad:6f:f5:52:e1:af:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d41278-dbec-4ce1-a2aa-72427ed93680
Validity
Not Before: Feb 14 03:26:53 2024 GMT
Not After : May 14 02:26:53 2024 GMT
Subject: CN=21f3e252-4691-4b45-b0a0-588aacad5e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f5:f3:68:d4:75:8c:1c:f3:11:43:24:92:48:
c3:be:cc:d0:11:35:8c:04:5b:ac:b7:2d:b2:a4:10:
97:1c:b7:27:4d:6e:61:26:67:43:5a:49:5c:fd:53:
45:b8:7d:8c:da:49:3a:ba:5a:c0:89:d5:d7:7e:c0:
bb:4b:e3:35:dc:55:ef:ab:c3:ac:fe:72:dd:7a:b1:
37:7d:34:21:c9:17:cd:b0:d3:98:90:59:91:0c:71:
e3:71:22:c0:7a:8f:33:73:21:6f:2e:7d:27:9d:df:
b2:30:d5:a7:85:e2:81:ac:fc:fd:7d:c0:27:9b:6e:
f0:d6:df:63:c3:b3:9b:c6:67:fc:bf:f7:d2:07:ae:
89:df:df:94:5a:de:29:6f:e5:64:50:ef:9d:2d:fd:
a2:b1:9e:5b:58:07:9b:c7:50:73:3c:a8:02:96:36:
62:a9:85:66:4b:5f:fc:c4:82:48:32:f5:8c:72:85:
a5:61:de:82:25:33:dc:50:51:9f:cd:80:d2:5b:9f:
30:36:83:8a:6f:b1:37:4e:c2:6f:8b:bb:c7:ca:b4:
54:04:c2:a7:73:5d:db:f2:b7:8a:f4:1a:86:ee:7f:
32:c4:5f:4c:3a:0c:53:36:5a:45:d4:1c:36:d6:40:
88:1d:bb:fe:d9:b0:06:17:54:5d:94:45:39:4b:ce:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:37:2E:D2:10:20:C6:1F:00:99:7D:99:EA:92:8A:5E:3B:D7:6C:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/e1553ce1-bc5c-3949-8f15-7c4040389a7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/86d41278-dbec-4ce1-a2aa-72427ed93680.crl
X509v3 Authority Key Identifier:
keyid:89:3D:8C:5B:1A:3F:09:A2:DA:D4:57:63:26:C0:70:4A:67:1B:75:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680.cer
sbgp-ipAddrBlock: critical
IPv4:
216.176.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:65:2a:6c:a6:24:52:a1:62:52:a3:91:44:b7:9b:09:ac:be:
8f:9c:0e:1e:27:be:16:21:aa:63:fc:9d:ee:af:94:9a:3c:b9:
02:3e:81:99:2c:35:cd:28:31:b3:04:3f:d6:a1:77:ee:28:a7:
cf:01:8a:ec:23:62:11:65:60:51:1c:48:92:fb:67:a8:8f:ba:
f2:30:a5:70:52:de:5b:75:0d:b2:1d:32:3e:5e:e3:e9:05:d6:
3f:f1:eb:43:dc:ab:51:a6:91:6e:cd:c9:5d:2c:23:79:6f:c1:
c6:a4:ab:42:e4:fc:52:67:31:f5:f6:93:07:9a:ea:3d:18:4b:
2b:29:7e:31:fb:48:fd:ab:5f:27:9f:f3:f0:0b:a4:0f:0c:18:
19:80:5a:00:8d:fd:dc:44:43:a9:6e:83:50:50:f8:15:76:0f:
ab:71:1a:44:27:b0:a6:2c:83:1f:a0:17:26:60:75:fe:61:bc:
4b:4f:da:e8:a1:01:83:18:32:24:c7:98:22:22:23:f5:fc:73:
a8:c8:e9:bd:5d:e5:fe:60:d2:ac:71:92:df:57:b2:1a:c7:41:
8e:3b:11:04:84:eb:08:fb:47:03:cb:ca:14:6b:96:2b:c8:02:
9e:6a:37:c4:94:c6:2e:78:64:5e:c5:9c:d6:5b:cf:d2:df:85:
7c:45:98:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:15:38 2024 by rpki-client on console-ams.rpki-client.org