Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/3f98ba1c-0aee-3d60-a3f5-21d2d341d79f.roa
File: 3f98ba1c-0aee-3d60-a3f5-21d2d341d79f.roa (raw, json)
Hash identifier: v/hvyBPOD6H6kaCrWivY5mfQBkFUSIFMjFWIguNWa3s=
Subject key identifier: 7E:00:CB:FE:E8:1C:77:0F:97:AF:67:78:A7:10:62:DF:4C:C1:08:EB
Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial: 010D0C9F43285842D4979EACD8074621963D6DE8
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/3f98ba1c-0aee-3d60-a3f5-21d2d341d79f.roa
Signing time: Wed 09 Aug 2023 19:02:08 +0000
ROA not before: Wed 09 Aug 2023 19:02:08 +0000
ROA not after: Tue 07 Nov 2023 20:02:08 +0000
asID: 14618
IP address blocks: 72.42.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d4:97:9e:ac:d8:07:46:21:96:3d:6d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Validity
Not Before: Aug 9 19:02:08 2023 GMT
Not After : Nov 7 20:02:08 2023 GMT
Subject: CN=e990c7ee-f39e-4fe0-8b89-423b39e1c5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:4a:28:1a:92:80:75:08:da:c2:56:4a:f7:
e1:b4:4f:12:27:49:66:5c:ae:ae:3b:d5:8a:89:37:
08:f0:31:37:54:eb:28:9a:3c:aa:8b:5d:a0:69:17:
5b:73:37:b7:da:b3:4c:ee:57:1c:a0:3e:4c:96:fc:
39:2b:dd:28:ce:a4:9c:c8:11:86:bc:6d:dc:c5:47:
7d:7b:66:89:3f:b9:ee:aa:a6:b0:33:96:7f:1d:89:
77:10:4b:4e:a8:56:40:cf:b6:cf:9f:0b:ba:91:7e:
af:19:9a:d0:37:2a:a0:c8:3c:11:c5:c3:5b:3c:3c:
2c:96:7a:f3:c8:b2:01:50:22:8d:a4:5d:20:fb:c4:
92:af:39:78:e6:a0:c4:fc:a4:00:9d:20:e6:75:89:
02:ac:a6:ac:db:f4:dd:65:25:5a:af:34:b0:72:5a:
7d:ff:81:f0:1c:54:8a:c8:9c:f8:21:f4:7b:8b:84:
e2:09:7e:fd:da:f9:5c:f5:a4:68:0d:da:a8:55:cc:
78:a1:d4:9d:d1:55:36:e8:15:4e:ec:68:26:ea:d6:
e2:7b:c7:a7:28:20:d0:27:ca:36:e9:03:3c:45:44:
7d:11:8f:f6:69:50:cb:34:a7:1c:e6:df:f5:75:63:
9e:4c:de:4a:cf:12:f1:94:85:cc:a7:57:f8:90:e0:
75:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:00:CB:FE:E8:1C:77:0F:97:AF:67:78:A7:10:62:DF:4C:C1:08:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/3f98ba1c-0aee-3d60-a3f5-21d2d341d79f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
X509v3 Authority Key Identifier:
keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
sbgp-ipAddrBlock: critical
IPv4:
72.42.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:d2:1a:f8:8a:28:48:0f:4d:f3:e8:3a:61:f3:bc:61:da:aa:
7b:19:f4:11:9d:6a:06:5e:a2:ab:35:e6:07:b3:5d:78:8f:1e:
66:d7:79:fc:e3:95:46:4b:73:02:84:17:ca:a3:50:0f:c8:e6:
f9:c4:66:5e:74:08:86:72:60:46:ae:88:f4:fd:c2:1c:cf:53:
9d:15:e3:de:b9:c8:4f:38:2a:5d:c5:3b:47:0d:61:9f:1e:6c:
c3:84:29:23:3f:db:a9:e3:4b:9d:15:be:3b:33:c1:8c:32:e8:
55:bc:77:94:b3:53:ba:d6:b4:ee:36:19:db:03:1b:7b:ba:10:
b9:4b:d5:9a:33:54:17:4c:22:a4:b8:23:2e:4e:aa:a4:d1:b7:
05:c8:62:51:1e:e4:5b:f2:04:8c:1c:65:dd:86:2e:c8:bc:bc:
50:ac:a9:ce:f4:40:00:3e:68:27:45:23:07:cc:29:e8:b4:d5:
51:49:36:ec:91:5f:ed:05:fb:4e:b8:66:38:29:7d:ca:4f:31:
d4:c7:a7:77:59:2f:c3:e8:70:6e:64:51:23:09:16:cf:e4:43:
90:86:29:24:3a:20:39:c4:98:a9:24:8c:fe:a0:69:f4:63:a9:
fc:68:32:e7:ae:74:ff:1a:2e:1a:5e:80:20:cd:76:f6:79:b9:
fc:9c:23:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 21:42:57 2023 by rpki-client on console-fra.rpki-client.org