Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d233928-c759-3144-b884-1d7d324b6f8f.roa
File: 9d233928-c759-3144-b884-1d7d324b6f8f.roa (raw, json)
Hash identifier: cL7crQnf0G0RuvjtmkM9bwNpSlGZwxftm8JFQWKPfQM=
Subject key identifier: CA:41:24:E8:0F:86:F7:DF:C2:C4:91:6A:71:C5:CB:5B:F8:4B:59:17
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858430B1FB480BDA54CB17EBE7D00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d233928-c759-3144-b884-1d7d324b6f8f.roa
Signing time: Tue 29 Aug 2023 07:49:58 +0000
ROA not before: Tue 29 Aug 2023 07:49:58 +0000
ROA not after: Mon 27 Nov 2023 08:49:58 +0000
asID: 209378
IP address blocks: 172.94.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0b:1f:b4:80:bd:a5:4c:b1:7e:be:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Aug 29 07:49:58 2023 GMT
Not After : Nov 27 08:49:58 2023 GMT
Subject: CN=b7ff58e9-4db1-4b7c-84a4-6a3f6d61a652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:2a:3a:46:76:1e:27:a8:b5:37:b3:1c:e2:
23:69:ae:6d:b8:7d:55:cd:4f:53:cc:3e:01:ed:4a:
e2:5c:46:4f:97:ae:14:00:15:89:e9:48:95:4c:a9:
ab:1d:16:55:93:46:f3:8b:a8:42:0a:d4:66:c0:8b:
e9:d5:c4:5a:b8:69:29:3e:a8:6a:9c:da:3f:da:f6:
35:a0:9c:da:d6:ca:1a:8a:01:bf:f6:5a:2b:bb:ee:
61:3a:66:8f:fd:63:3d:5c:22:52:28:3f:7b:c9:41:
19:3a:1a:27:b2:d6:89:87:34:f7:de:b6:90:02:10:
32:6f:bd:81:d5:13:98:96:68:01:e6:d8:6e:00:8f:
39:c2:c0:5c:e0:c8:04:1f:57:92:3a:61:c7:af:81:
a0:b0:a3:80:43:5c:de:61:be:c6:ea:bd:7d:81:7b:
d1:b5:e0:54:1e:16:25:47:ee:5a:48:f8:3e:73:1e:
1a:b0:b6:a4:3e:04:1d:8a:2e:02:f4:4e:cc:18:af:
f3:9b:0c:58:37:3c:3a:0d:37:92:ea:48:47:a7:22:
3d:c0:1a:8a:e1:7c:ea:de:e2:ab:cb:41:bf:ba:3f:
07:c6:e9:ac:15:57:b8:81:66:a2:08:2c:11:6b:65:
aa:b6:84:34:65:53:d9:ad:8a:e3:17:21:fa:10:e5:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:41:24:E8:0F:86:F7:DF:C2:C4:91:6A:71:C5:CB:5B:F8:4B:59:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d233928-c759-3144-b884-1d7d324b6f8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:7a:01:ba:84:72:34:a6:72:b1:04:f0:bf:52:c7:74:84:c1:
95:24:51:09:b0:b7:f3:db:09:a3:8e:b1:2d:88:ab:9e:11:99:
7e:4b:c1:9e:68:bb:a9:bb:6d:38:cb:cf:48:dc:a8:2f:14:d4:
c4:0c:b3:3c:61:31:51:71:9d:26:ff:63:c2:de:96:97:39:26:
8e:8f:4c:44:1a:ba:25:b4:ba:84:c8:c8:5c:a0:1e:4d:f6:cf:
be:f7:2a:f2:0d:6a:6f:20:e1:ae:5a:4c:df:95:f5:9e:e8:02:
3d:f5:9f:a1:b2:ae:39:15:39:53:c3:05:cf:e6:ba:db:91:a5:
5a:16:71:fd:76:ec:b5:18:90:a7:ad:f1:cc:02:96:9b:b2:4c:
ef:e0:96:2c:ce:0a:5d:3b:e3:e4:04:5a:cb:99:1e:ed:ee:55:
a7:bf:70:dd:63:60:20:a5:05:d1:01:b3:08:f9:62:4d:d9:cc:
5c:96:35:07:54:10:01:48:06:78:c7:f6:a9:ef:6c:3b:e6:eb:
a2:74:45:45:30:31:d3:05:3a:fc:5a:1e:8c:ae:f5:91:f1:82:
62:5c:c4:ba:69:b0:b6:8c:80:51:ed:ef:41:fc:21:6c:4b:8b:
a1:2d:2e:03:c5:e5:dd:d8:b7:8d:13:55:a5:f5:c6:53:87:2d:
e2:b0:04:2a
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 20 12:33:01 2023 by rpki-client on console-fra.rpki-client.org