Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/41c24eba-2117-3c82-8ee5-20f769a77c2e.roa
File: 41c24eba-2117-3c82-8ee5-20f769a77c2e.roa (raw, json)
Hash identifier: KKR8b4l851OO8PIRlVfmUuMcpnTUoNcjoUWHJbreTY8=
Subject key identifier: F4:BE:C1:7B:84:C3:46:97:90:15:5E:D1:07:8A:4E:6F:F6:A6:76:D1
Certificate issuer: /CN=13fecd24-0da7-4140-9636-71a72de851ec
Certificate serial: 010D0C9F432858444A724DE79FA3AE7EAB9C2480
Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/41c24eba-2117-3c82-8ee5-20f769a77c2e.roa
Signing time: Thu 21 Dec 2023 16:59:16 +0000
ROA not before: Thu 21 Dec 2023 16:59:16 +0000
ROA not after: Wed 20 Mar 2024 15:59:16 +0000
asID: 396871
IP address blocks: 137.83.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:4a:72:4d:e7:9f:a3:ae:7e:ab:9c:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec
Validity
Not Before: Dec 21 16:59:16 2023 GMT
Not After : Mar 20 15:59:16 2024 GMT
Subject: CN=7f3899b9-7938-4452-9cb0-f51ab21d0028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:32:85:ed:77:3e:76:95:78:ce:9f:db:63:ca:
8a:30:5b:95:f1:67:54:a5:a2:f3:dc:96:b3:22:2b:
39:8a:f8:07:d5:19:b8:33:39:5a:ff:e7:99:73:08:
b2:87:56:1f:fd:87:bc:26:c4:29:a6:cc:86:26:19:
12:44:cf:37:09:86:03:be:4d:c5:25:52:61:7f:4c:
95:e5:96:ee:b8:88:22:40:14:ac:74:a9:62:5b:f6:
09:0d:c0:58:cd:b6:1b:4a:81:63:36:94:57:04:8e:
40:b3:63:f7:91:53:cd:7c:47:49:30:de:a5:21:95:
82:35:77:c6:d1:24:0b:35:d9:5d:fb:29:a3:c5:b9:
f4:80:a9:79:31:ce:4b:f5:9f:c1:8f:0b:4b:75:01:
63:4f:48:ea:9a:91:8d:2c:8c:8d:a5:66:f8:50:43:
3e:66:e1:49:96:91:19:8c:24:0e:f2:8e:1d:97:04:
8a:a8:b0:9d:38:91:fe:80:f3:47:9d:9b:f1:bf:cb:
59:3d:aa:81:f6:47:d1:56:44:6c:de:3d:d1:46:5d:
bd:91:1b:e3:f3:34:fb:78:86:d7:4f:48:c8:96:99:
cc:32:ed:a1:b0:6d:48:23:a1:36:10:39:eb:7c:2f:
85:59:a4:af:1a:ff:2a:10:fa:0c:f8:c1:51:f4:bd:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BE:C1:7B:84:C3:46:97:90:15:5E:D1:07:8A:4E:6F:F6:A6:76:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/41c24eba-2117-3c82-8ee5-20f769a77c2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl
X509v3 Authority Key Identifier:
keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
sbgp-ipAddrBlock: critical
IPv4:
137.83.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:02:35:c5:4d:29:08:1d:d6:5b:dd:dc:9d:1d:36:92:db:86:
2c:49:3e:ab:f5:ae:72:9d:12:89:2d:6f:f5:71:ea:4b:67:00:
8a:d8:f7:62:56:8c:77:7e:6b:f8:06:5f:8e:b0:54:17:91:38:
d0:02:d0:b1:50:9a:7d:a8:ad:a3:9c:ff:de:6a:9c:d7:d0:09:
d7:cc:52:7e:21:3a:f8:ca:1e:eb:37:a4:89:d7:4f:b6:60:d1:
1b:12:3c:e7:8c:77:ac:66:70:51:2b:80:a4:2b:c3:77:1f:19:
9b:e4:d6:c7:4b:64:19:d9:9c:57:47:fc:85:23:de:6d:ea:c7:
fc:2d:1c:23:96:d4:52:f3:19:66:3f:f7:07:b8:ed:8f:b1:21:
0f:4c:e9:0e:a6:60:3a:a7:1a:15:c6:fd:2f:ed:61:a0:c7:75:
6c:ed:70:10:e7:eb:0f:dc:4b:99:ef:53:5a:e6:57:80:3a:3a:
d7:07:f7:89:95:10:54:72:2d:74:01:83:01:51:2a:32:1f:2a:
f7:d3:59:97:63:46:b1:18:b5:5c:3e:f6:5b:42:63:58:ec:fc:
c8:7f:0b:1e:8c:cd:64:51:7d:2c:a5:1a:6f:a0:07:2a:73:ad:
63:77:89:4e:84:fe:cc:9d:cf:79:e8:8f:81:96:80:49:45:db:
ac:7c:6b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 18:05:35 2023 by rpki-client on console-fra.rpki-client.org