Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/682686e5-1b2a-3269-abec-11ba0db376a6.roa
File: 682686e5-1b2a-3269-abec-11ba0db376a6.roa (raw, json)
Hash identifier: ldHsiJLNcC57OMLIyUQjn61WRzpMUrtAFIbLh78BP3Q=
Subject key identifier: 7B:BD:E8:9A:B2:B6:BA:32:FA:68:5C:FF:C0:86:F0:5E:A1:E9:95:8C
Certificate issuer: /CN=3bb6068b-be48-4cc9-ad75-338daae24880
Certificate serial: 010D0C9F4328584566CF5BC42C8BF3EB727576A0
Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/682686e5-1b2a-3269-abec-11ba0db376a6.roa
Signing time: Mon 01 Apr 2024 13:36:20 +0000
ROA not before: Mon 01 Apr 2024 13:36:20 +0000
ROA not after: Sun 30 Jun 2024 13:36:20 +0000
asID: 399989
IP address blocks: 74.117.216.0/22 maxlen: 22
74.117.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 04 Apr 2024 16:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:66:cf:5b:c4:2c:8b:f3:eb:72:75:76:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880
Validity
Not Before: Apr 1 13:36:20 2024 GMT
Not After : Jun 30 13:36:20 2024 GMT
Subject: CN=4f5c1fc1-c4ce-43f5-80db-0da288e27d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cd:e7:41:d0:ae:89:da:9d:c4:91:d0:f5:06:
f4:76:c2:b7:18:b6:e3:5b:11:c4:af:09:0f:ba:18:
ce:9f:aa:42:dc:c2:cd:fb:e2:9d:2e:48:e9:f9:85:
f0:92:f9:0f:c5:af:3f:3f:28:c2:05:ac:1e:ea:99:
85:f5:e1:10:a3:ac:8e:8b:58:57:f2:00:90:72:aa:
f7:10:58:ba:8c:86:fa:23:07:65:43:77:8f:08:4f:
fb:e1:2a:27:18:39:47:1f:b7:e9:7b:df:0f:77:84:
16:54:e7:12:f5:bd:28:da:04:be:e8:7a:c0:f6:67:
f6:5a:58:e8:73:b4:0c:35:06:18:58:f6:e6:dd:58:
7d:e5:3d:5c:1c:90:e4:72:0d:ab:20:5e:d2:99:ee:
99:96:76:0e:71:6d:e7:28:5f:95:1a:f9:e5:dc:f3:
8b:5a:e4:1c:7a:64:77:32:4e:40:5a:c1:1a:79:a4:
d8:ee:81:35:f9:07:66:33:c8:fa:11:87:f3:07:c4:
d2:1f:b3:b0:40:df:52:b0:16:5e:69:3f:40:01:40:
b8:85:0c:cf:73:ea:53:77:17:4a:2b:88:7a:c9:be:
41:80:6f:50:5b:d8:da:b2:2b:5d:ce:e7:c6:e1:bc:
70:ee:64:b0:e9:95:e0:da:8c:ee:c6:23:9e:23:8c:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BD:E8:9A:B2:B6:BA:32:FA:68:5C:FF:C0:86:F0:5E:A1:E9:95:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/682686e5-1b2a-3269-abec-11ba0db376a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl
X509v3 Authority Key Identifier:
keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
sbgp-ipAddrBlock: critical
IPv4:
74.117.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:7c:b5:ff:d2:12:23:5f:d1:f3:b8:c3:4b:6a:ca:05:82:af:
c6:92:5f:22:7f:4c:94:b5:34:bb:f2:7e:03:4b:4d:30:10:70:
06:6a:8e:b0:4f:7b:88:6c:77:9e:49:1a:75:a5:83:f1:d2:61:
c2:d6:dc:cc:b9:cb:b9:31:56:c8:a5:fa:7f:23:1e:b8:fd:af:
f1:f5:d7:f9:42:25:f3:e3:d2:3d:48:90:d5:7c:6d:ef:73:fe:
03:bc:2f:4b:cf:9f:fc:58:2f:eb:e4:50:21:16:18:a6:ca:21:
a3:29:3d:ec:3e:49:db:0b:3f:8c:3b:3f:14:ac:62:80:6b:d0:
c9:a2:f7:52:f5:f2:6c:93:e4:87:43:f9:75:c8:04:c3:7f:4f:
dd:13:bc:73:ee:9a:15:61:4e:19:80:c1:50:e4:13:ed:78:4c:
e8:b5:4a:29:5b:6d:ce:1a:b6:02:c3:25:6b:7f:8d:d5:5d:57:
47:98:55:10:27:75:57:fa:45:09:fc:bf:4c:91:0c:07:84:db:
bc:09:e0:0d:cf:fc:bb:66:1f:88:93:22:9f:36:c9:62:46:8a:
60:1c:27:54:9f:cd:4d:02:57:bd:55:97:47:bd:9a:38:6a:79:
e0:74:84:3c:8b:19:b4:a3:ee:9e:32:9d:3d:09:57:8c:de:71:
1b:8d:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 20:08:11 2024 by rpki-client on console-ams.rpki-client.org