Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b67aeb61-3f4f-32af-9820-7b44a30d16b3.roa
File: b67aeb61-3f4f-32af-9820-7b44a30d16b3.roa (raw, json)
Hash identifier: 0LZiVSoooXUrzs6lLd9+dvTs3ZZo0wxBYlxX5uyaVcc=
Subject key identifier: EA:51:79:A9:B1:72:1C:88:00:AE:F3:95:EE:99:C7:E3:80:DA:D6:94
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858434B68C66F13AB99BAC23BAEC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b67aeb61-3f4f-32af-9820-7b44a30d16b3.roa
Signing time: Thu 21 Sep 2023 08:28:56 +0000
ROA not before: Thu 21 Sep 2023 08:28:56 +0000
ROA not after: Wed 20 Dec 2023 09:28:56 +0000
asID: 63018
IP address blocks: 104.250.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:4b:68:c6:6f:13:ab:99:ba:c2:3b:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 21 08:28:56 2023 GMT
Not After : Dec 20 09:28:56 2023 GMT
Subject: CN=17cc6bd0-c63b-49cf-9551-e378f1b12649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:aa:14:a7:de:2a:66:d1:93:3b:b9:e8:ae:
77:52:79:f3:6c:7c:66:2a:8d:f0:99:b1:ef:08:5f:
1c:34:6b:be:7f:89:f5:49:36:40:30:23:c2:4f:e3:
ac:e6:9f:f8:3e:7d:99:75:ee:7f:c5:7d:8d:2c:ef:
b1:4a:01:43:cc:6e:1f:b6:38:52:03:bf:19:bb:1f:
4d:8c:74:3c:da:67:ea:55:a9:fb:02:c2:58:72:67:
c6:6f:43:75:5c:02:50:d8:fc:b8:4d:d0:58:24:d7:
82:1d:f2:7f:04:bf:8b:6f:e8:14:98:b5:cc:f9:e3:
d5:03:2a:3c:59:53:ac:ea:1f:e8:cb:6d:54:d1:25:
c3:5b:5e:c9:5d:f0:17:af:fe:07:df:d8:15:7c:06:
04:7b:a8:21:99:eb:69:e3:03:13:7c:84:9d:22:66:
a7:98:4f:70:70:1e:4c:5b:81:f8:57:bf:12:f8:12:
69:c4:14:dc:74:de:92:42:0c:f4:cc:71:57:38:e2:
06:10:2b:27:03:24:f1:22:56:3b:59:25:91:51:ae:
2c:c2:9f:dc:2b:41:f3:5f:93:08:fa:a2:e8:3c:92:
c4:63:cf:56:b3:e6:e6:c1:a6:3a:82:c2:e7:fe:0c:
70:bf:a5:5b:67:40:d5:e4:85:92:82:a0:9b:ae:bb:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:51:79:A9:B1:72:1C:88:00:AE:F3:95:EE:99:C7:E3:80:DA:D6:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b67aeb61-3f4f-32af-9820-7b44a30d16b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:3f:fe:b3:76:17:44:96:5f:72:1d:81:b3:25:a5:8b:cb:5a:
34:9b:94:6b:4d:11:e5:da:2a:e5:37:57:62:f5:93:73:f8:5e:
f2:ec:92:26:6d:b9:d2:74:08:87:50:94:a2:b4:d8:2a:90:06:
e0:70:e7:f6:34:d4:5f:bc:5a:48:55:fa:a1:39:1b:b1:59:90:
f3:61:4b:a8:ba:a2:db:13:ca:10:05:f2:d6:d4:7e:72:9d:57:
a1:e5:15:b5:e4:c7:47:be:af:be:d8:12:01:9a:22:50:64:c9:
ea:a1:18:1f:2c:cd:e1:f7:76:61:f5:1b:cb:48:cb:0e:54:7a:
1d:e7:02:fa:0f:6d:a1:ee:3c:fc:63:70:ad:c3:90:10:62:68:
fb:05:a6:2b:5a:70:cf:ed:13:db:96:1a:6e:76:d3:7f:b1:0d:
db:d3:aa:40:f4:f8:27:75:5a:0f:ef:b4:5b:e6:6c:45:33:6c:
ae:d0:f5:25:52:18:4f:84:a7:c2:35:18:28:e9:56:8f:d2:79:
df:1d:3f:8b:8d:de:af:0e:a5:05:de:d6:46:3b:76:3f:5e:07:
b9:9e:6c:52:eb:20:ed:e6:27:69:24:83:dd:54:4f:8c:17:ca:
bb:4d:7a:cf:94:c4:dc:c3:ee:b8:69:57:ad:84:91:49:21:d2:
dc:e5:64:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 13:44:25 2023 by rpki-client on console-fra.rpki-client.org