Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7806853-d981-3518-bf3a-62e163efc972.roa
File: f7806853-d981-3518-bf3a-62e163efc972.roa (raw, json)
Hash identifier: x1uUvrgxVgmVvr5A9yvUG91+1QvZToaSfjlrKCYgGM0=
Subject key identifier: CF:BE:78:25:83:75:74:73:90:36:4F:B7:A7:F4:D2:6D:BB:3E:EC:4B
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F43285844B164F214317888F740793C00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7806853-d981-3518-bf3a-62e163efc972.roa
Signing time: Sat 27 Jan 2024 14:00:30 +0000
ROA not before: Sat 27 Jan 2024 14:00:30 +0000
ROA not after: Fri 26 Apr 2024 13:00:30 +0000
asID: 11232
IP address blocks: 69.9.192.0/18 maxlen: 18
96.2.0.0/15 maxlen: 16
Validation: Failed, certificate revoked on Thu 22 Feb 2024 16:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:b1:64:f2:14:31:78:88:f7:40:79:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 27 14:00:30 2024 GMT
Not After : Apr 26 13:00:30 2024 GMT
Subject: CN=7424f2bd-2585-46ce-a801-8957df9ba0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:71:4a:19:92:94:8c:e3:cd:87:c0:57:bd:
b9:e9:9f:48:0e:9d:ed:66:29:59:26:ed:5c:14:93:
43:ab:1b:18:80:b3:45:b7:28:90:52:be:79:ed:97:
20:e2:d3:d7:c9:f4:cc:a9:20:f0:c3:27:a8:7a:cd:
58:bc:71:dd:3b:5c:f8:51:df:29:6c:3a:12:b1:3d:
dc:d2:ad:31:0d:f5:1a:eb:78:4b:dd:a6:3c:fb:12:
04:4b:2e:72:fc:57:ca:c5:4c:af:35:be:33:1a:0a:
f1:88:1a:1a:3a:61:60:6c:3a:02:be:ee:a8:01:10:
06:cc:02:76:1e:69:57:ad:95:6f:52:58:43:45:11:
e0:93:a7:87:a9:43:df:3b:2c:33:ce:35:89:6b:38:
88:97:ce:ab:69:9f:cf:4c:f3:e3:03:3f:a6:27:53:
aa:05:ca:07:56:83:fc:89:e6:b5:ee:ab:8a:ed:93:
0b:eb:54:e8:65:0b:f1:11:95:3b:2e:6c:83:b3:46:
a8:74:ff:21:4b:e6:04:c7:37:3a:33:cb:33:69:48:
85:e4:88:80:fe:fd:c9:79:6d:d1:65:51:41:de:c5:
40:ca:6b:4a:26:90:88:92:98:71:42:b3:ef:db:ec:
f4:4c:1b:22:cf:72:a4:3e:83:8d:94:b7:69:d1:9f:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BE:78:25:83:75:74:73:90:36:4F:B7:A7:F4:D2:6D:BB:3E:EC:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7806853-d981-3518-bf3a-62e163efc972.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
69.9.192.0/18
96.2.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:dd:f0:0a:90:2b:cf:fb:e8:f2:97:5c:6d:69:5e:4f:e2:e9:
a1:15:06:51:f0:2e:f5:22:04:f1:db:67:e6:98:b4:16:75:94:
e9:55:61:22:84:8b:05:1a:e0:5f:5c:86:b6:c7:91:6d:b6:c2:
48:d9:b2:a1:08:f5:89:37:c1:fc:4c:30:45:d4:35:53:e8:01:
a7:f9:7f:cc:51:2a:c3:42:3d:b8:13:29:62:d6:ad:95:b6:4e:
57:29:a0:1a:05:77:33:ef:1a:82:9f:25:d2:e1:3a:49:66:e6:
50:2b:40:de:79:58:b5:8a:9d:99:f2:fe:28:9c:37:b7:06:59:
06:ca:80:d2:b4:c5:2c:69:53:bf:03:d9:4a:c0:60:c2:9b:16:
0b:c4:25:0d:79:a3:b0:6e:ac:24:db:4e:22:43:6e:66:0d:23:
01:ad:1c:e1:63:5a:91:b8:6d:3b:82:f8:41:6d:22:04:16:8d:
e5:55:5f:83:61:dd:e3:8d:18:c7:82:47:cf:9f:16:f9:f6:4a:
9d:30:60:00:21:98:d3:c4:52:79:83:19:13:cf:72:c2:0f:86:
b7:d9:e3:9f:23:26:5d:b0:ac:c2:47:95:39:d5:ef:21:8e:cf:
fd:be:a2:32:7c:bf:3b:9d:71:46:06:4d:bf:64:48:00:19:30:
20:c1:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 20:07:05 2024 by rpki-client on console-ams.rpki-client.org