Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/415feadc-c171-3c7b-a01c-b7dff8396072.roa
File: 415feadc-c171-3c7b-a01c-b7dff8396072.roa (raw, json)
Hash identifier: UkGxYp0s5lrNR3Epb0eM1EXzewtTHPBjrlTqKcl6BwM=
Subject key identifier: D2:52:78:DB:88:61:D9:76:D0:43:CE:5A:0F:E2:7F:3B:3C:0B:05:16
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285842AA03D2019C125BD7C810EB80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/415feadc-c171-3c7b-a01c-b7dff8396072.roa
Signing time: Tue 25 Jul 2023 13:00:18 +0000
ROA not before: Tue 25 Jul 2023 13:00:18 +0000
ROA not after: Mon 23 Oct 2023 13:00:18 +0000
asID: 35913
IP address blocks: 172.94.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:aa:03:d2:01:9c:12:5b:d7:c8:10:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 25 13:00:18 2023 GMT
Not After : Oct 23 13:00:18 2023 GMT
Subject: CN=3f223a2f-71ff-4b28-84de-9bc7ada70d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3d:52:06:a8:18:45:f8:b8:e2:d1:32:4c:6e:
43:52:3c:d9:0e:90:a2:04:c1:b5:5d:fa:09:15:b6:
f0:2e:f0:83:6d:a1:35:2f:fe:7c:8d:c5:be:11:4c:
2d:97:5a:ca:72:74:a7:91:4d:ec:60:31:1e:3e:c9:
3d:be:9a:e1:6b:c8:d1:0c:9e:41:78:b7:dc:58:67:
12:29:5e:57:83:0c:e2:24:12:c9:ac:a3:53:e6:24:
cf:39:75:6b:06:a3:15:05:b6:f4:b8:18:34:1f:99:
1c:34:1b:79:2c:e7:ae:77:ef:14:ed:63:c2:34:f6:
02:61:f1:a3:2a:4a:b0:c8:60:b6:7f:18:49:52:00:
6e:e5:51:30:48:79:4a:46:d9:fb:11:8d:3e:ce:fc:
76:f7:fc:f5:9f:4a:7e:f1:d8:d7:6a:8f:a7:ad:0e:
a9:65:a1:78:35:3d:25:17:25:32:3e:a2:8a:da:23:
8d:40:f4:96:00:8e:40:90:85:8d:2f:e0:13:ce:5b:
b0:a6:29:79:c5:5f:77:64:b9:16:e3:f3:c3:55:09:
82:90:b0:4b:24:e4:0a:42:0c:1d:04:e3:97:be:7c:
13:ca:a2:2d:71:b8:38:6f:fc:02:83:21:66:fc:3f:
cf:7b:f7:9a:e5:76:27:c1:a8:ff:f7:35:d7:42:da:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:52:78:DB:88:61:D9:76:D0:43:CE:5A:0F:E2:7F:3B:3C:0B:05:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/415feadc-c171-3c7b-a01c-b7dff8396072.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:7d:00:eb:86:39:0a:a3:59:4f:78:9d:44:e7:d4:d0:8d:c0:
74:0a:73:e7:e7:8b:08:b2:3e:fe:2a:69:81:77:32:c2:d1:3b:
c0:6f:23:90:00:af:ec:fe:df:fd:34:0d:1e:f0:bc:ae:57:d7:
96:c6:ec:8d:dc:8d:1b:6e:dd:c1:42:cb:3b:8f:b1:a8:c6:65:
d4:d2:53:13:a4:e9:27:3b:02:2f:5a:00:4f:c9:9f:5b:14:2a:
19:96:2c:3f:f4:aa:db:51:59:55:8f:b0:83:dd:79:74:25:80:
5b:41:3d:31:60:68:79:ee:40:01:b1:a3:a5:40:fc:16:c1:7e:
00:8e:ce:17:81:67:f7:90:75:bb:94:f8:64:8b:98:ae:25:f3:
29:ce:e6:ee:bd:16:0e:ef:c7:8c:46:11:cc:c9:29:32:39:30:
2b:2d:2e:c8:cc:b0:cd:cd:5c:a4:dd:30:16:4c:af:c9:0d:59:
a8:c0:be:4d:bd:bd:06:8a:d8:18:91:f5:9a:17:3a:19:cb:fb:
14:e6:02:60:bd:e8:f3:49:9b:0a:d7:17:e3:14:f3:e9:b0:29:
84:7d:d3:d4:85:c8:93:78:22:39:a3:82:ac:a1:2b:7f:e9:12:
c2:41:72:6d:45:3e:a9:7a:31:49:33:bd:02:3e:4c:cc:67:95:
21:40:cb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 18:53:40 2023 by rpki-client on console-fra.rpki-client.org