Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/01491e4b-101c-347c-9471-7945f46eeee2.roa
File: 01491e4b-101c-347c-9471-7945f46eeee2.roa (raw, json)
Hash identifier: w2XDb2qPGDl6+KvQiEzf5JZOCOI/5uKPOMRcdMWEZMM=
Subject key identifier: 05:DE:1F:87:7A:4D:D4:B2:E8:32:E6:7D:DE:9F:2B:1D:6B:18:F9:C4
Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial: 010D0C9F432858438C2537ECD1457E741EB8F6F0
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/01491e4b-101c-347c-9471-7945f46eeee2.roa
Signing time: Sat 14 Oct 2023 13:00:18 +0000
ROA not before: Sat 14 Oct 2023 13:00:18 +0000
ROA not after: Fri 12 Jan 2024 14:00:18 +0000
asID: 7922
IP address blocks: 209.250.21.0/24 maxlen: 24
209.250.28.0/24 maxlen: 24
209.250.29.0/24 maxlen: 24
209.250.9.0/24 maxlen: 24
209.250.11.0/24 maxlen: 24
209.250.22.0/24 maxlen: 24
209.250.8.0/24 maxlen: 24
209.250.24.0/24 maxlen: 24
209.250.25.0/24 maxlen: 24
209.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:8c:25:37:ec:d1:45:7e:74:1e:b8:f6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Validity
Not Before: Oct 14 13:00:18 2023 GMT
Not After : Jan 12 14:00:18 2024 GMT
Subject: CN=80edc3c7-b435-4743-9897-6a739f293daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:42:25:f1:1e:b6:84:ae:85:3d:d1:25:dc:
74:2b:8c:2f:d3:4a:29:47:af:7d:2f:87:3b:3d:78:
5f:3d:91:b2:41:a6:41:01:27:7f:fb:d8:94:a5:8e:
13:18:7b:e5:a2:5c:19:37:c4:aa:91:d4:1e:69:43:
35:40:eb:1f:1f:c5:ae:bd:60:dc:ec:52:9f:4d:c2:
bc:8a:de:e7:c3:92:39:7b:7d:5a:fc:10:73:5e:6d:
1a:cb:bf:d3:10:f3:70:46:13:0c:f5:f9:13:9a:67:
c5:e0:83:69:c0:0d:ac:99:8a:2e:e8:b4:6f:96:4c:
4b:40:e4:fa:1c:26:ff:6b:c6:51:bf:62:38:68:ea:
60:03:26:a5:fc:9e:9d:b9:2a:f7:d6:7f:48:bb:d8:
ba:6a:fe:b2:8a:ba:c9:e4:4b:b8:fe:f6:9a:75:89:
15:e4:28:fb:de:a5:46:99:bc:2e:7d:f8:04:e2:91:
03:ba:de:6c:e8:ef:8e:83:45:f1:93:45:5d:78:32:
0b:92:bc:34:cd:19:6c:e8:47:91:54:34:1d:a9:ba:
9a:1f:2a:bb:32:8d:9b:e9:be:d9:81:0c:49:2b:01:
3b:e2:13:6d:6c:6e:79:d1:5a:ba:9e:4d:bf:08:ca:
85:03:a9:76:28:21:d5:ea:53:2c:a7:63:99:07:b6:
a1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DE:1F:87:7A:4D:D4:B2:E8:32:E6:7D:DE:9F:2B:1D:6B:18:F9:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/01491e4b-101c-347c-9471-7945f46eeee2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
X509v3 Authority Key Identifier:
keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.250.8.0/23
209.250.11.0/24
209.250.21.0-209.250.22.255
209.250.24.0-209.250.26.255
209.250.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:27:2c:8d:91:38:f1:af:07:30:e3:6e:17:71:38:c9:7c:d7:
c7:09:36:9f:9b:ef:c5:b3:3f:b0:10:31:ad:ce:5c:af:95:99:
2b:88:6e:65:6b:fb:00:e3:2f:b6:5e:b5:c6:4d:e5:e9:65:11:
a5:78:54:12:3c:0c:32:4b:63:0d:df:2e:94:d8:79:38:68:58:
d3:9e:19:34:44:ca:9c:e1:27:9d:05:ed:a7:bc:aa:ba:5e:31:
27:f8:b7:65:18:93:e1:64:5e:c5:07:aa:cd:1a:38:cf:64:18:
28:ac:ab:b2:6b:88:1e:76:93:75:84:16:dd:d8:78:84:fd:c0:
6f:7e:69:f9:b6:11:ed:40:ef:6e:53:f0:9c:ff:f7:dd:fe:1e:
a3:73:5e:4f:26:74:18:a2:95:0d:82:40:d2:dd:6a:4a:73:bc:
87:0b:1e:6f:11:46:e4:35:3f:eb:e5:0a:80:11:34:d1:18:ff:
18:6f:d0:c8:e0:2c:99:26:8c:4b:ed:de:5a:67:c2:62:22:b2:
7e:ad:f5:c0:4d:54:a8:80:9a:af:5c:f8:e7:64:18:b8:85:0e:
b7:f2:ec:ee:46:0c:92:e3:74:df:5c:a5:95:c8:f3:37:cd:de:
9f:b7:c4:dd:57:16:03:37:81:94:a4:e4:45:f6:e8:34:0d:69:
2b:ef:e7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 05:05:38 2023 by rpki-client on console-fra.rpki-client.org