Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/ec493c85-0f5b-310c-bebf-912549ab6246.roa
File: ec493c85-0f5b-310c-bebf-912549ab6246.roa (raw, json)
Hash identifier: eIQTlaMtvP0V9uwTSXRV2dRyHL9/A3htzsOidqGdp80=
Subject key identifier: 3B:F9:5C:60:CE:6A:7B:00:44:1E:75:DC:32:E9:F3:29:0C:1B:BD:D0
Certificate issuer: /CN=3bb6068b-be48-4cc9-ad75-338daae24880
Certificate serial: 010D0C9F4328584551CD695DFD80B45F71FA32C0
Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/ec493c85-0f5b-310c-bebf-912549ab6246.roa
Signing time: Mon 25 Mar 2024 01:00:25 +0000
ROA not before: Mon 25 Mar 2024 01:00:25 +0000
ROA not after: Sun 23 Jun 2024 01:00:25 +0000
asID: 22773
IP address blocks: 74.117.216.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 04 Apr 2024 16:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:51:cd:69:5d:fd:80:b4:5f:71:fa:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880
Validity
Not Before: Mar 25 01:00:25 2024 GMT
Not After : Jun 23 01:00:25 2024 GMT
Subject: CN=76fc984f-c6c1-4fd9-ba03-4753791a571d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:3a:89:20:41:07:21:7c:7e:0d:54:ed:50:
b4:98:58:fb:26:1e:b3:35:16:15:81:89:cb:bb:81:
ac:bc:55:38:41:af:a9:0a:8c:0c:f8:6a:c1:63:35:
3f:1d:6e:e9:05:c8:70:f3:68:be:8a:0c:a7:69:a9:
e0:b2:0c:66:ca:af:8a:2f:82:00:e9:31:36:6c:7d:
c6:7d:8d:a0:1f:b9:7e:2c:1b:af:6e:a1:b8:02:d8:
49:30:1d:0f:bb:96:d1:0f:ac:60:5d:c0:e1:4f:f2:
8d:f4:6e:07:06:2c:d3:7a:41:8a:aa:3c:f1:2c:de:
e0:a6:ed:0b:22:41:7c:74:28:c0:82:d8:a9:9d:eb:
fc:cb:07:cc:ed:86:96:38:18:61:24:12:99:51:bf:
2c:d0:50:05:a4:9c:1e:27:fa:53:3c:d2:b4:20:f0:
ed:44:1f:8c:13:79:59:f4:d8:42:96:47:d2:84:8d:
05:57:cf:60:64:0c:92:6d:c8:59:5b:bc:65:6e:1a:
cd:7e:41:6d:35:1f:17:29:10:70:42:fe:5d:b0:c8:
72:d6:76:01:8d:fc:fc:08:f9:1e:97:fd:5f:d2:b8:
06:75:22:e6:d2:57:ad:8a:b7:69:0f:ce:1c:c3:7d:
79:74:c2:70:7e:6a:6f:8c:73:b6:1f:dd:42:62:9c:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F9:5C:60:CE:6A:7B:00:44:1E:75:DC:32:E9:F3:29:0C:1B:BD:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/ec493c85-0f5b-310c-bebf-912549ab6246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl
X509v3 Authority Key Identifier:
keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
sbgp-ipAddrBlock: critical
IPv4:
74.117.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:97:fa:b5:b8:db:f4:8b:cd:21:f2:73:31:d1:87:c2:15:92:
cb:9c:5a:c4:47:45:7b:96:9d:79:ce:82:99:b6:cc:2b:1a:9b:
81:91:a1:24:f0:64:9e:3a:af:43:2a:b0:d5:79:a9:a3:57:22:
da:ad:02:b4:09:e8:13:0f:fb:81:70:3c:68:7e:3c:56:4b:7f:
9d:c6:c5:a5:bb:30:68:db:95:91:32:92:9a:e6:1f:3f:4c:ec:
d9:f0:28:56:f9:52:01:3b:d8:2f:67:e0:17:14:39:71:32:40:
87:2a:c4:f9:c1:3c:ef:39:96:29:3d:be:65:5e:2a:18:4c:62:
a9:ab:30:56:5d:cc:50:05:71:56:e0:6e:45:db:d8:db:9b:f1:
5e:80:8c:4e:b1:44:26:63:93:69:a6:62:22:1d:86:3f:d8:bf:
32:b2:d6:f1:9d:1d:ee:25:a9:1a:27:b8:d7:99:9e:1e:d2:4b:
e3:c4:03:c0:54:89:08:2c:82:48:62:39:10:71:f0:34:b6:07:
b7:77:3b:23:73:92:43:ac:bb:ea:58:54:11:ee:3f:35:36:57:
94:1a:d8:51:3f:86:73:b8:6f:0b:d5:fb:f0:af:74:37:9c:6f:
f7:40:eb:20:02:83:24:97:c3:27:c4:21:02:22:a8:82:ad:4f:
92:e8:f9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 20:08:11 2024 by rpki-client on console-ams.rpki-client.org