Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de0cd4f6-e4f2-3b81-ab39-ea010aa37547.roa
File: de0cd4f6-e4f2-3b81-ab39-ea010aa37547.roa (raw, json)
Hash identifier: FevCu2MIEqoSJSUBYns975FDLuQktqSDc0ye+L66QT4=
Subject key identifier: 69:EC:94:9A:AB:EE:B9:BB:DE:A5:80:71:A6:3B:AB:1B:C1:BA:65:F8
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285843A84CDD71860F9DF08BD5B700
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de0cd4f6-e4f2-3b81-ab39-ea010aa37547.roa
Signing time: Tue 24 Oct 2023 15:02:53 +0000
ROA not before: Tue 24 Oct 2023 15:02:53 +0000
ROA not after: Mon 22 Jan 2024 16:02:53 +0000
asID: 3223
IP address blocks: 172.111.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:a8:4c:dd:71:86:0f:9d:f0:8b:d5:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 24 15:02:53 2023 GMT
Not After : Jan 22 16:02:53 2024 GMT
Subject: CN=14d13c7f-bc92-4c9c-939f-4ecee0401cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:62:83:9f:8e:ae:fc:f5:2a:b1:05:81:54:
e3:a8:48:aa:72:02:0a:44:73:9b:c0:24:94:66:9c:
0e:bb:14:bf:d2:47:6f:88:9d:0d:da:44:0a:29:e5:
86:e7:e3:c0:1f:21:81:13:6d:d8:2c:ca:a2:1a:b5:
14:24:03:ae:31:45:36:91:f6:ab:d7:22:19:20:7c:
50:75:f2:17:4c:c2:0c:f6:5c:75:ac:46:df:dd:fc:
43:a0:e8:25:67:fb:14:71:aa:dc:fa:19:3b:66:3d:
ab:60:a1:30:2b:4a:8d:f2:5d:e2:87:f2:4e:9f:b4:
93:41:db:68:a9:0c:6c:2f:ab:ba:f8:36:24:2e:0a:
4d:4b:c8:73:42:2f:1d:36:ad:12:0b:90:74:cd:10:
2c:18:f2:c8:dd:ad:a9:51:82:8f:0b:d5:27:1b:63:
77:3b:f5:da:76:1a:2b:cb:11:68:48:d9:af:bb:1d:
a8:bd:c3:96:52:23:cb:10:e3:c2:c2:3e:76:4e:25:
49:df:3d:d0:7f:36:80:39:ed:a1:72:d6:cc:03:41:
92:93:8e:3c:67:70:7d:f4:8f:e2:cf:e2:96:be:c0:
8f:f4:a7:82:bd:a1:0c:f1:57:e6:86:1d:d9:59:9d:
02:98:4a:c3:76:bd:b1:e1:98:d7:61:8d:f6:73:e0:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EC:94:9A:AB:EE:B9:BB:DE:A5:80:71:A6:3B:AB:1B:C1:BA:65:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de0cd4f6-e4f2-3b81-ab39-ea010aa37547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:44:dc:8f:76:89:cb:07:77:83:7b:fa:d8:9e:64:c5:7f:6e:
57:0d:ad:84:7c:c8:02:86:f1:33:72:b4:99:f2:78:8e:8a:be:
be:0e:5b:7a:f1:e5:bc:61:d7:9b:55:c1:c2:4a:72:bd:ee:38:
0d:af:4a:b7:2d:7f:30:c0:14:8c:9a:55:74:e1:94:99:d7:71:
3e:1f:b2:99:78:55:a7:73:f4:87:83:d4:50:d3:21:26:fd:5e:
ca:79:ed:6c:14:fb:1e:25:ae:77:6c:06:ff:fa:7c:39:31:76:
64:da:75:3b:be:a1:90:45:b2:e1:3f:6a:ad:57:15:38:b1:62:
97:85:d2:35:bd:9f:be:85:c1:e8:df:76:c1:75:b0:ae:f0:56:
18:78:93:27:97:a8:f3:37:74:9b:ec:d4:5d:38:4f:46:f0:bb:
da:21:25:fb:89:d6:85:26:cf:3d:d6:1a:a6:11:61:43:67:a6:
2a:20:cf:d3:79:b6:1c:42:f4:9c:02:5c:60:bb:c5:57:75:db:
85:7e:81:3a:d5:f4:cc:1e:f6:2f:e7:de:76:35:9f:58:02:9b:
e8:67:a6:6b:cc:6c:42:7e:5b:00:cc:55:3e:f2:5f:5e:d2:a0:
97:8c:2a:fb:49:2d:c6:c0:24:e3:77:a3:c0:0d:85:d3:6b:47:
12:c7:88:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 12:54:06 2023 by rpki-client on console-ams.rpki-client.org