Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/17932c91-6e04-3be6-b3cc-86b66cc631aa.roa
File: 17932c91-6e04-3be6-b3cc-86b66cc631aa.roa (raw, json)
Hash identifier: La6QNIsSAd3r+ZymroELFMt3ujhXzB6k5Pn0HmglJfY=
Subject key identifier: F1:92:36:A1:2E:A8:11:97:09:7D:54:E0:28:D8:FD:2E:F6:C8:A7:19
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858431E95AFBF06B721045122AF80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/17932c91-6e04-3be6-b3cc-86b66cc631aa.roa
Signing time: Tue 05 Sep 2023 07:08:03 +0000
ROA not before: Tue 05 Sep 2023 07:08:03 +0000
ROA not after: Mon 04 Dec 2023 08:08:03 +0000
asID: 3223
IP address blocks: 172.94.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:1e:95:af:bf:06:b7:21:04:51:22:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 5 07:08:03 2023 GMT
Not After : Dec 4 08:08:03 2023 GMT
Subject: CN=0df894bb-d181-42d3-aa93-9ecf2c8171ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:34:ae:cc:8d:01:58:1d:6b:fb:8b:74:4e:75:
60:8d:b4:3f:4c:56:99:47:49:4e:14:a5:8c:34:bc:
38:75:43:27:1c:05:5e:1e:1b:de:1b:c1:85:a8:aa:
95:6a:92:92:68:bd:55:4c:64:b6:09:08:ee:4d:fd:
2d:c7:72:05:ea:ba:3f:1f:99:e1:ff:60:33:9f:9b:
8b:95:a4:ae:fc:26:59:8b:e6:26:df:96:b6:e4:87:
3e:53:a4:ee:d9:da:fa:91:0b:55:ef:cc:93:a5:d2:
66:a3:c5:89:73:30:20:af:3e:c0:d1:e3:83:70:6e:
5d:4a:01:7d:95:0e:08:d6:75:24:6b:94:40:cb:21:
7d:7b:52:39:9f:2e:89:08:d6:31:8a:58:df:38:d2:
2f:3d:1c:9a:c8:18:9f:19:5e:7c:24:0a:e6:13:0c:
f4:f1:e6:c4:b2:b3:4e:d0:6e:d2:d0:03:7f:13:d3:
d7:7c:1f:17:3f:29:6a:f0:7c:21:58:49:78:19:b0:
b3:32:67:33:48:8a:3e:b4:98:ce:c6:8e:26:dc:f7:
c3:e7:b8:86:18:a8:99:ef:df:b7:20:fb:31:ea:cb:
3b:a2:bc:66:59:7c:93:99:fa:96:5a:4f:69:1d:cc:
b3:89:eb:52:9e:9d:b1:23:95:fa:68:28:ed:ed:84:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:92:36:A1:2E:A8:11:97:09:7D:54:E0:28:D8:FD:2E:F6:C8:A7:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/17932c91-6e04-3be6-b3cc-86b66cc631aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:39:20:2b:53:34:69:00:cb:2c:2f:08:d4:92:a6:a1:34:34:
dc:b6:b9:d6:8a:27:f5:47:5c:ce:a8:c8:ba:2a:1a:20:57:71:
52:ae:63:fd:d0:eb:a0:95:66:d1:c6:90:4b:bb:c7:83:11:21:
78:73:36:14:59:14:14:eb:38:f7:1a:42:bd:78:b7:1b:bb:b7:
74:1f:06:22:66:60:e2:90:92:d0:76:40:df:51:14:65:74:bc:
10:ec:ec:0b:03:c1:dd:54:0e:a1:7b:2d:b1:cf:fe:15:ad:e6:
82:65:67:15:cf:3d:c4:24:39:89:d9:32:1e:8c:48:36:74:4e:
2a:1d:15:a9:3a:cd:cc:1d:25:17:e8:8f:05:4a:66:47:2b:18:
22:b4:ea:71:9e:50:15:6c:f3:ad:07:e3:8d:85:e7:23:8b:1b:
87:a2:d6:76:64:ad:9c:1c:17:82:73:76:5c:c1:d9:dd:ee:21:
73:71:95:81:48:bc:aa:ac:b7:0f:8b:ce:44:b3:ce:62:e1:bc:
73:5b:ce:2f:80:83:c5:b5:15:29:25:87:29:f0:00:ff:4e:af:
e9:bb:de:59:1f:5f:04:f5:3c:fc:ac:0d:ea:5d:d0:59:2b:2c:
de:7b:27:f6:18:a1:c6:e4:8e:71:4b:fc:d6:0e:80:e8:3d:bd:
a9:dd:10:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 13:41:55 2023 by rpki-client on console-ams.rpki-client.org