Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/ae2c343c-01d5-3857-89c3-c82cc740bf70.roa
File: ae2c343c-01d5-3857-89c3-c82cc740bf70.roa (raw, json)
Hash identifier: Y0gEMPOAOZgRzf/mkaVdh4H9MYJB983Bwy3S2wwIYC8=
Subject key identifier: 9E:38:47:C6:F2:94:F2:41:AE:C0:70:E6:75:FB:EB:AE:7E:85:2B:E1
Certificate issuer: /CN=6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b
Certificate serial: 010D0C9F432858444A19892CEAB223917B9A7980
Authority key identifier: 7D:56:C4:5C:48:3C:C8:54:D0:77:55:A7:1A:AA:53:50:F7:D1:38:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/ae2c343c-01d5-3857-89c3-c82cc740bf70.roa
Signing time: Thu 21 Dec 2023 14:00:21 +0000
ROA not before: Thu 21 Dec 2023 14:00:21 +0000
ROA not after: Wed 20 Mar 2024 13:00:21 +0000
asID: 400521
IP address blocks: 96.43.192.0/19 maxlen: 24
168.75.176.0/20 maxlen: 24
2606:c040::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 Feb 2024 01:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:4a:19:89:2c:ea:b2:23:91:7b:9a:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b
Validity
Not Before: Dec 21 14:00:21 2023 GMT
Not After : Mar 20 13:00:21 2024 GMT
Subject: CN=d42d5814-1c35-48c3-90b0-f415b514ce59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:4b:74:5f:ac:61:45:72:c2:52:3a:e5:ad:
f7:da:53:72:cf:ed:18:dc:31:e7:54:6b:56:4c:9a:
1e:dc:3e:22:18:90:4f:c0:ba:72:08:e6:62:41:b7:
06:ca:ee:4c:aa:70:79:43:55:93:e3:7b:36:21:1f:
a3:4a:d5:21:fd:2d:69:c2:ac:77:85:a3:f8:5c:75:
fe:51:1a:c4:e2:e0:a4:94:b4:00:81:05:0c:a4:b0:
7b:d5:61:11:80:23:57:0f:2a:3b:33:77:68:67:12:
a4:e9:e5:ba:42:b1:ac:d0:ac:ae:bd:e1:cc:b2:29:
90:c2:9c:16:f6:1c:36:73:19:63:02:ee:31:98:41:
7e:89:b0:c6:f6:f3:d3:40:4e:8d:2e:16:a2:4e:ce:
ad:f2:5f:3c:30:4a:8e:9e:59:8e:03:77:eb:d2:8a:
89:f9:39:5d:84:ac:ee:0b:c2:15:61:cf:60:73:d3:
ad:6f:ce:a5:78:15:1b:bb:36:68:4e:89:ae:9c:5f:
f4:3f:fe:5e:36:0c:e5:7a:ef:f5:5f:ce:69:b0:22:
2c:d6:a1:18:74:cd:78:64:44:bb:41:15:f7:85:6d:
64:3a:2a:f5:d5:d2:62:13:a8:99:1d:55:7c:a6:f5:
54:3b:26:27:3f:9c:56:c9:3f:f9:87:18:d6:38:80:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:47:C6:F2:94:F2:41:AE:C0:70:E6:75:FB:EB:AE:7E:85:2B:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/ae2c343c-01d5-3857-89c3-c82cc740bf70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.crl
X509v3 Authority Key Identifier:
keyid:7D:56:C4:5C:48:3C:C8:54:D0:77:55:A7:1A:AA:53:50:F7:D1:38:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.cer
sbgp-ipAddrBlock: critical
IPv4:
96.43.192.0/19
168.75.176.0/20
IPv6:
2606:c040::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:a5:99:4f:91:57:e0:16:75:65:32:d2:2b:b0:4c:1e:f9:e9:
30:fa:89:f7:17:cd:5e:61:01:59:b7:ca:b9:0d:09:5e:b1:96:
f0:a0:23:cb:cd:88:a4:69:c2:a4:29:c6:0e:c8:24:9f:ef:d0:
ee:13:b0:31:5b:12:f4:24:66:f2:39:2f:a9:3f:eb:02:cd:dd:
d9:69:06:9d:6f:4b:37:a2:6e:83:b3:c6:d7:6c:f8:ad:6e:fe:
79:53:ee:e0:94:7c:f2:db:16:6f:85:83:79:44:70:09:e8:f1:
d4:f1:a8:97:57:34:8b:c1:25:bf:34:2e:11:c4:37:06:41:f8:
71:9f:bf:be:3e:2a:b2:ce:32:2f:1c:fb:a7:c8:c0:6b:83:5f:
bf:8b:f2:f1:89:b9:5a:81:68:9d:a9:a8:64:dd:cb:62:1a:2a:
82:3d:8b:de:5e:89:92:1e:6a:17:57:25:a3:95:24:05:9b:df:
2a:77:33:fb:ae:ce:85:5a:a6:e0:3c:5a:52:89:07:00:0d:b7:
47:6d:17:b0:22:24:d4:d7:72:e0:5c:7e:e3:cc:95:a9:d6:f3:
bf:6d:13:25:f9:6b:85:c6:95:fc:0f:b7:83:28:49:e6:8c:51:
75:43:f5:e4:c9:ac:c8:ca:c8:b0:7a:d0:78:c1:82:d0:7c:14:
56:d2:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 03:01:20 2024 by rpki-client on console-fra.rpki-client.org