Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cca56d9e-8dad-3df5-9a50-8c02acf60664.roa
File: cca56d9e-8dad-3df5-9a50-8c02acf60664.roa (raw, json)
Hash identifier: 629u6WLHLlPXl+mrTShg0PB3iYEkwF3rAlaL7C4zcBs=
Subject key identifier: E6:37:80:91:8D:6C:1A:C2:DB:BE:AC:DE:81:CD:F1:7E:77:06:00:37
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F43285844CA8513AD0B650CAB657A8EC0
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cca56d9e-8dad-3df5-9a50-8c02acf60664.roa
Signing time: Mon 05 Feb 2024 14:00:31 +0000
ROA not before: Mon 05 Feb 2024 14:00:31 +0000
ROA not after: Sun 05 May 2024 13:00:31 +0000
asID: 210873
IP address blocks: 16.2.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:ca:85:13:ad:0b:65:0c:ab:65:7a:8e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Feb 5 14:00:31 2024 GMT
Not After : May 5 13:00:31 2024 GMT
Subject: CN=5cc8cf3b-34ab-404c-b34e-8c58b59b762d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:60:38:97:c4:b0:48:78:7c:b4:36:dd:6f:
a2:b8:e7:05:ed:37:0b:f6:61:74:7a:ba:80:4d:35:
68:82:7f:b1:ad:7b:92:d2:0c:46:a6:3d:86:52:97:
20:6b:a2:c8:bd:72:d3:8a:89:83:1a:58:3f:ad:49:
b5:db:11:df:3f:c0:f1:d2:9b:aa:3b:5a:52:32:ab:
eb:dd:9c:ed:2f:ee:5c:a8:90:50:ff:f3:ee:ce:4c:
3b:a8:72:f8:6f:56:a6:6c:66:f5:be:61:92:ab:61:
ba:0c:ee:54:f1:bc:fa:56:65:f3:87:32:98:27:66:
8c:46:c5:2d:01:1c:1f:0d:38:48:61:58:bc:26:f8:
3f:a1:c8:38:ba:59:8f:99:f5:25:05:52:84:8a:33:
5b:58:bc:56:cd:5c:0a:ab:f7:b2:5b:f0:13:29:3a:
59:cf:ac:3d:7f:a1:53:25:58:ba:f4:64:6c:3b:26:
b2:22:4f:1f:fe:36:45:f0:44:b3:15:11:17:05:6d:
90:75:49:ee:42:47:e1:71:b7:31:6a:f2:c2:ae:e4:
92:3d:73:93:83:fa:9a:e5:5b:c7:a9:8f:23:bd:cb:
24:cd:45:da:15:f2:b8:b8:40:44:6b:06:a7:d2:2d:
15:7d:41:e9:65:dc:5b:e4:cc:11:6b:86:b6:e6:e5:
4b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:37:80:91:8D:6C:1A:C2:DB:BE:AC:DE:81:CD:F1:7E:77:06:00:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cca56d9e-8dad-3df5-9a50-8c02acf60664.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.2.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:0e:ce:2c:e5:84:f9:bb:1b:29:8a:5d:c2:b4:0a:c9:09:12:
ad:de:ea:55:bf:fa:0c:24:c5:9e:d0:fe:c2:cd:ae:e7:62:0c:
cc:d6:df:19:98:d4:fe:3f:cf:d7:16:27:67:43:0d:69:77:33:
f0:7c:ab:aa:2a:ed:cc:88:02:b4:66:15:ec:25:68:d1:48:fb:
d0:8b:aa:73:d2:48:0c:46:c2:29:0a:de:2f:f0:d5:62:33:d8:
ff:62:c1:0d:a3:25:1e:04:32:da:f0:af:ac:a7:9f:34:72:07:
4f:f2:90:83:31:70:c9:3d:10:83:ee:4e:9b:47:53:2d:0b:1f:
2b:22:8c:76:6c:22:83:5c:6a:63:ed:06:3d:df:f3:bc:1a:7e:
46:f8:7d:65:f8:ad:e4:81:fa:24:0b:27:19:e5:f2:6c:bd:db:
12:6f:c0:55:70:7c:c5:f2:06:ed:8f:d0:42:bd:2e:76:5b:d4:
71:9e:c9:fe:4b:b7:16:8c:00:c3:f7:81:69:fa:a7:0c:de:11:
94:b3:ed:03:2a:1f:13:4c:62:6b:d6:00:63:17:6e:17:c5:03:
26:c2:17:9f:2c:1f:bd:e6:63:23:00:e9:94:31:d8:14:29:17:
c0:87:f2:a0:42:26:4a:cb:11:37:5e:5c:51:84:4e:fc:60:48:
3b:63:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 14:45:38 2024 by rpki-client on console-fra.rpki-client.org