Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/89845fce-08f2-3924-a68c-bd8dc40a630e.roa
File: 89845fce-08f2-3924-a68c-bd8dc40a630e.roa (raw, json)
Hash identifier: iS5BSK55Xr4gNZj7r8EaWlVg9PN00pIMb/SL9GMnJ7w=
Subject key identifier: D5:2F:CF:77:7E:41:18:31:75:F0:49:67:E3:57:C0:4A:9E:3A:52:5D
Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial: 010D0C9F4328584410DE7F9560AC63C19288E980
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/89845fce-08f2-3924-a68c-bd8dc40a630e.roa
Signing time: Fri 01 Dec 2023 02:00:15 +0000
ROA not before: Fri 01 Dec 2023 02:00:15 +0000
ROA not after: Thu 29 Feb 2024 02:00:15 +0000
asID: 18759
IP address blocks: 162.247.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 15:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:10:de:7f:95:60:ac:63:c1:92:88:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Validity
Not Before: Dec 1 02:00:15 2023 GMT
Not After : Feb 29 02:00:15 2024 GMT
Subject: CN=f918ce8c-5b77-425e-a906-168f0d21c3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:d6:50:1d:eb:51:75:47:e7:28:3d:ed:0f:
4e:d1:fb:92:ee:a4:a6:df:86:1c:b3:25:9d:7d:cb:
7a:b3:b7:c8:79:4d:4e:60:78:b3:06:2b:05:9f:7e:
42:d6:83:77:05:46:aa:9d:76:68:09:c3:71:17:89:
fe:6e:2c:30:8f:94:02:22:3c:bf:ea:50:8c:f6:05:
6e:b8:65:6c:b1:d2:32:a9:a0:79:b8:61:2c:89:fc:
af:6f:f8:23:65:e6:77:15:63:b8:df:c8:26:c4:3a:
77:2d:e1:1f:d0:76:62:0c:a3:8c:ee:14:4e:44:b8:
1c:d0:1d:98:d1:c6:d1:d7:4c:43:ee:9b:24:f2:06:
1e:65:2d:25:2d:52:a5:31:a2:1a:ba:8e:c0:b5:62:
7a:fc:17:75:26:86:7c:ab:da:65:f8:a4:69:97:02:
e0:8c:13:44:17:74:e8:30:f1:b5:79:c7:33:04:0e:
a1:64:59:1c:a7:31:0a:b6:e0:1c:22:4a:ed:85:24:
24:36:23:13:49:2f:3f:02:84:06:91:22:2e:e0:c3:
5d:fd:1c:31:9b:ec:6c:26:a2:32:82:7e:60:fe:24:
8b:5f:6f:c2:a7:5f:06:cf:ad:a3:59:6f:ec:f0:ef:
35:cc:fb:60:ae:bb:03:cd:04:04:eb:da:6b:13:65:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2F:CF:77:7E:41:18:31:75:F0:49:67:E3:57:C0:4A:9E:3A:52:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/89845fce-08f2-3924-a68c-bd8dc40a630e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
X509v3 Authority Key Identifier:
keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
sbgp-ipAddrBlock: critical
IPv4:
162.247.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:8b:de:fd:8f:ae:a5:b2:1e:c7:7c:c1:6f:95:d7:b2:17:2b:
84:f8:19:0a:8d:d6:7d:fa:c2:68:04:2e:fa:ea:0e:87:26:a6:
cd:68:90:54:74:82:c9:44:95:6e:3e:bc:15:cf:4d:dc:42:6a:
3a:1e:f2:9f:da:67:b0:85:73:57:af:52:2d:03:ad:d6:6c:db:
03:3f:8b:b2:2c:06:15:e8:bf:8b:0f:78:70:2d:47:2d:94:5c:
ad:3b:65:c6:ed:03:bd:38:85:5c:73:9f:93:47:c5:e0:18:27:
be:c9:8a:9b:cc:a0:ce:f4:04:cf:50:9b:80:39:4f:7b:87:96:
f1:f6:eb:62:fa:5f:e1:84:11:a6:dd:24:1a:3d:87:51:9e:f2:
01:6a:3e:e5:99:63:9b:be:e2:75:75:eb:47:34:18:19:17:b5:
e8:e0:4f:96:63:d8:26:7f:1e:f2:14:c5:b8:fe:23:24:25:d1:
10:4f:bc:c2:94:25:01:2a:23:83:6d:19:57:37:3f:d0:70:09:
d9:78:19:37:5a:70:5c:c9:b6:74:ee:5b:f1:92:9f:91:77:30:
8d:7b:2f:65:97:c4:fc:ca:04:d4:04:f2:cf:fb:c9:af:4c:53:
da:b8:bf:5b:81:4c:df:db:d6:97:7b:e4:3b:b4:9f:7f:c8:04:
38:3c:dc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 21:13:19 2024 by rpki-client on console-ams.rpki-client.org