Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41768420-12c6-3ec9-a02b-1a374bd69dbb.roa
File: 41768420-12c6-3ec9-a02b-1a374bd69dbb.roa (raw, json)
Hash identifier: CYycCfWshkftPrT64Yw4AdpnLaKLWcenAYFC2nD1EbA=
Subject key identifier: A4:0C:3E:78:82:A4:02:CF:39:3D:4A:0F:88:34:9B:C0:9E:A9:AB:8F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285842D9797896EF5CFD45FC0B3EC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41768420-12c6-3ec9-a02b-1a374bd69dbb.roa
Signing time: Fri 11 Aug 2023 13:00:24 +0000
ROA not before: Fri 11 Aug 2023 13:00:24 +0000
ROA not after: Thu 09 Nov 2023 14:00:24 +0000
asID: 9009
IP address blocks: 172.111.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d9:79:78:96:ef:5c:fd:45:fc:0b:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Aug 11 13:00:24 2023 GMT
Not After : Nov 9 14:00:24 2023 GMT
Subject: CN=5d814d27-9b51-4181-b58c-fbd511a71011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:ce:b0:2d:45:ea:b9:63:01:f2:3d:c2:89:
74:a9:ff:99:87:d4:69:14:ff:22:5b:7b:39:d6:8a:
e8:92:7c:99:88:1c:7f:d5:5b:32:41:bf:73:2f:18:
9c:a2:6d:62:09:ad:a4:ec:d2:16:45:24:5f:02:bf:
09:c4:81:bc:24:e3:5e:09:03:e5:bf:75:bf:85:0f:
f3:49:e5:46:e2:56:29:60:07:94:d1:10:bf:3d:a2:
e3:de:61:7c:ea:b2:f2:f1:b4:53:2f:70:6f:61:44:
6f:30:41:53:53:2d:19:dc:54:f6:0f:4a:75:d0:0f:
da:c8:48:3e:d9:d8:1a:99:51:dc:3f:66:f9:54:2b:
c7:e8:9a:13:0e:ea:6e:58:37:ff:53:23:23:c6:c9:
81:f8:d3:0a:ea:06:43:40:52:72:c9:44:4e:1a:ed:
06:eb:b1:e3:c5:ae:e5:ce:ce:e5:fe:a5:ec:74:0e:
e5:2f:cd:7a:eb:c9:fe:84:36:b0:33:4d:ae:d5:a8:
d6:f6:2b:89:06:90:c7:17:3b:fe:f6:c0:5a:bb:90:
df:91:5b:72:f9:7a:f6:60:b1:f9:28:cb:00:9a:ec:
8b:27:1e:48:18:53:a7:50:45:72:3d:7a:fa:ba:01:
ad:b0:4f:0a:f0:18:2e:2b:a8:f6:bb:41:c1:79:d2:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0C:3E:78:82:A4:02:CF:39:3D:4A:0F:88:34:9B:C0:9E:A9:AB:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41768420-12c6-3ec9-a02b-1a374bd69dbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:5c:f8:b4:23:00:b8:0c:23:c7:64:90:8a:2d:6f:ed:6a:6d:
b8:19:9a:0e:56:fa:46:84:e2:76:64:40:f4:94:31:ee:f1:50:
d5:9c:cb:32:78:4f:8a:08:82:b9:63:f3:a3:f7:4a:9a:72:00:
88:8c:27:1f:8e:a3:d1:26:0c:06:66:0b:6c:d7:23:72:08:a0:
b3:1e:96:2a:89:36:ce:d6:82:61:b9:62:fd:6e:19:71:53:79:
d7:5d:b9:ff:8b:a1:c4:62:0d:d7:ff:11:43:e4:71:8a:c3:64:
97:e6:aa:86:ee:3e:ac:91:1b:a2:6a:24:d1:3a:39:9b:4c:f0:
f8:50:c0:9d:2c:9b:8f:08:9b:f3:64:62:f8:37:27:5e:97:b8:
99:eb:95:ce:a4:f3:44:7a:61:0a:34:e0:06:1b:93:98:23:9e:
ea:e0:cf:82:22:c3:d1:d0:eb:30:f1:7b:61:72:03:56:56:82:
78:1c:dd:07:4e:3c:d5:02:d6:cd:2d:35:64:44:2d:0f:46:b7:
fa:e0:21:72:a6:9c:c0:36:ee:19:33:1f:37:21:9e:1a:c6:0c:
c9:97:32:1e:03:99:b8:5c:a1:2f:ab:12:18:95:af:03:51:40:
11:1e:0c:8e:58:3d:30:cd:59:47:5b:69:65:e5:49:2f:2e:31:
62:66:64:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 07:14:48 2023 by rpki-client on console-fra.rpki-client.org