Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/65a4ec0e-dd02-3804-bb19-b82548a16d84.roa
File: 65a4ec0e-dd02-3804-bb19-b82548a16d84.roa (raw, json)
Hash identifier: qP3OMIdW/uOTFW/rpyEhz/02e5ywJIifr3pXc6UoQH4=
Subject key identifier: 28:9B:03:9A:0C:4F:EC:40:DE:B0:DA:07:F9:97:C1:88:6A:03:DB:7A
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285843C29593314CB354BB23540300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/65a4ec0e-dd02-3804-bb19-b82548a16d84.roa
Signing time: Fri 03 Nov 2023 01:00:15 +0000
ROA not before: Fri 03 Nov 2023 01:00:15 +0000
ROA not after: Thu 01 Feb 2024 02:00:15 +0000
asID: 212238
IP address blocks: 172.94.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:c2:95:93:31:4c:b3:54:bb:23:54:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 3 01:00:15 2023 GMT
Not After : Feb 1 02:00:15 2024 GMT
Subject: CN=cce15936-770f-4345-a04c-f57244a96f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:df:61:f5:0e:07:7d:77:fc:76:ae:51:c4:22:
1c:40:09:86:97:07:3c:98:30:56:15:b5:8b:62:b9:
94:cc:a3:c0:f2:77:d4:3c:fb:65:e9:e0:f8:7b:86:
a2:09:bd:43:0f:9c:c5:bb:5b:e8:2f:0c:3a:9f:70:
8f:39:3a:72:11:63:9e:77:05:cb:ff:4e:49:64:f2:
eb:fc:d5:e0:ba:0b:42:1c:8e:81:43:ab:11:61:ce:
53:7f:85:39:e8:b4:88:88:7d:64:0d:fc:22:02:4f:
d1:7d:6c:b1:1f:17:87:a2:b8:06:00:10:66:62:44:
f5:ec:70:36:77:c5:c1:c2:6e:28:b8:76:02:53:37:
98:03:04:e0:10:a0:a7:d4:f7:89:48:08:d3:99:37:
96:70:80:08:5b:82:c8:ce:ee:a8:f0:e4:2c:78:d9:
a8:d8:a6:5b:7d:41:bc:e2:49:e8:4c:c9:bb:01:b4:
6b:44:ac:cb:c1:e0:e7:c1:33:a2:f9:18:f4:95:4f:
5a:f2:6f:ed:21:f1:8d:77:cc:d6:a4:f8:3c:a9:3b:
07:15:d8:5a:ea:32:75:bf:60:15:92:47:4b:b6:d1:
25:bc:14:b0:0e:cf:31:9e:ff:be:37:1f:6a:d8:4a:
10:fb:60:54:e9:8d:64:6f:79:5f:e2:1a:f4:c5:71:
aa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9B:03:9A:0C:4F:EC:40:DE:B0:DA:07:F9:97:C1:88:6A:03:DB:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/65a4ec0e-dd02-3804-bb19-b82548a16d84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:e1:8e:f5:0c:af:50:93:86:ac:e7:2e:1c:22:22:6b:e3:f9:
7d:25:72:3e:4d:5b:19:34:e3:80:11:f4:4b:3d:06:f3:77:c2:
ab:a9:d6:7d:06:1a:03:c0:c5:0a:96:73:cf:5b:7f:47:7c:f0:
3e:3d:19:6b:96:2d:b0:2d:80:b8:bc:14:6f:03:f7:79:79:3d:
af:97:5b:18:10:a3:db:5e:6f:d9:7d:cd:5a:54:84:a8:ac:c7:
47:8c:c7:a2:7c:10:cc:27:25:81:68:f9:be:82:fd:a8:c9:d9:
f2:e8:f9:a2:e7:e9:11:2b:06:2c:b1:8a:07:7e:69:42:60:1f:
49:e4:b4:8a:be:4f:d4:a7:76:0d:87:f0:66:46:66:eb:66:7c:
43:b5:17:1f:a4:13:af:c3:ad:e9:0e:b6:a4:85:4e:03:74:53:
5c:8f:3b:d8:de:54:fc:ab:20:5f:7a:5c:90:20:5b:55:f3:cb:
d1:6c:f3:a5:ec:d2:d3:23:9d:c2:dd:72:16:0d:04:ec:1f:0c:
18:19:a2:70:3b:24:1a:ba:cc:6d:fb:ae:09:bf:e6:87:49:45:
86:7b:e5:de:58:9c:25:11:4e:9d:1a:96:e0:ec:af:c3:a3:b8:
26:d6:4d:19:71:9b:93:62:98:ff:9a:5b:d8:cd:e0:29:6f:28:
c6:00:e2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 11:07:03 2023 by rpki-client on console-ams.rpki-client.org