Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/24fad7f5-4de6-318c-aacd-57a8b04465e4.roa
File: 24fad7f5-4de6-318c-aacd-57a8b04465e4.roa (raw, json)
Hash identifier: uSJL7HvmNSQlbdCCstzS5dfW5fwmiOSc189krRVD8XI=
Subject key identifier: 31:FE:5F:1C:7F:C5:98:CF:84:C3:6E:03:22:59:AB:7A:84:51:A9:DF
Certificate issuer: /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
Certificate serial: 010D0C9F43285845CC4B4DCD646C15357E703100
Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/24fad7f5-4de6-318c-aacd-57a8b04465e4.roa
Signing time: Tue 07 May 2024 22:02:42 +0000
ROA not before: Tue 07 May 2024 22:02:42 +0000
ROA not after: Mon 05 Aug 2024 22:02:42 +0000
asID: 53486
IP address blocks: 209.35.46.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 18:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:cc:4b:4d:cd:64:6c:15:35:7e:70:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
Validity
Not Before: May 7 22:02:42 2024 GMT
Not After : Aug 5 22:02:42 2024 GMT
Subject: CN=76d54877-3ec7-4593-8940-ef3cf862cfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:68:d2:31:0b:1a:4b:63:a4:9a:39:4e:1a:
30:b9:73:0d:ce:67:6b:81:df:02:44:82:e0:f2:04:
61:bc:f4:36:12:cf:fc:61:a4:94:e5:8a:18:b4:ec:
df:84:ba:a0:3c:ef:f1:06:fe:f7:50:d7:f5:65:c1:
9d:b5:02:14:06:74:66:81:46:06:a6:7f:b1:d4:34:
52:fe:d5:af:53:d4:52:79:e8:5d:74:23:d4:c4:d8:
f5:ec:18:0c:0c:93:8e:83:ad:96:9e:1b:09:08:c2:
b7:79:14:c9:ee:0c:44:7d:de:5b:fd:f5:ba:6c:62:
71:2e:42:db:bd:0e:c3:dc:47:e3:40:ab:b5:00:0f:
d5:65:7a:50:36:f3:85:d3:64:f0:35:7c:cf:a6:bd:
3d:3e:78:4b:f2:9b:70:76:81:e0:92:19:6a:70:0b:
91:bf:bd:1c:f8:ff:bc:0d:07:df:c6:b5:1a:c5:b1:
c2:3d:5c:42:8f:98:a0:84:ea:a4:54:dc:e2:81:6c:
3e:ed:86:a4:52:0c:74:d1:1c:f2:63:7f:58:f5:65:
98:67:ee:4b:2c:b5:b0:4e:12:fe:2e:38:bc:67:e7:
93:d2:34:39:5d:36:b1:f7:65:14:14:5e:2d:db:72:
83:92:9e:6d:21:85:42:e6:d3:aa:b8:87:a5:af:49:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FE:5F:1C:7F:C5:98:CF:84:C3:6E:03:22:59:AB:7A:84:51:A9:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/24fad7f5-4de6-318c-aacd-57a8b04465e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl
X509v3 Authority Key Identifier:
keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.46.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:c8:5f:3d:b4:2a:3c:be:91:c2:a9:5e:3b:22:15:15:8e:46:
1b:db:03:19:58:76:2c:c8:2b:d6:3e:4b:6f:55:3e:a6:28:90:
86:10:f8:ed:91:6a:aa:89:59:19:8b:c1:22:b4:28:ae:32:b8:
b7:48:3e:be:1f:61:cc:90:4c:8f:bf:4f:0b:1a:3b:ae:e4:cf:
3f:ec:6f:51:75:9c:ed:e2:de:8d:05:e8:98:26:29:60:ae:35:
5a:34:f2:86:00:d0:b9:17:f5:35:55:80:d4:ed:a3:03:bb:f3:
78:ab:d1:17:1d:da:99:6c:99:f5:1a:8b:ab:0f:19:c9:8f:cf:
61:09:c8:0b:88:a3:1f:29:9c:41:91:cf:af:fc:e7:dc:98:f6:
29:39:72:d0:a7:e3:af:6e:9f:50:ac:86:ff:b6:b8:d8:41:60:
54:25:a0:44:87:cb:92:8d:e5:25:b0:f6:04:82:9c:8e:8e:13:
12:6f:5f:d1:5f:c8:30:d9:96:5a:a3:f6:07:62:b0:a4:94:3d:
86:11:27:36:94:23:e9:28:b7:af:d2:6c:f5:9f:47:be:c2:b4:
d5:a0:04:8f:d6:fb:eb:2b:a7:e5:7e:4b:30:ce:ee:ca:c5:31:
6f:ae:3a:09:e8:3b:fb:79:39:64:4d:b8:b8:f0:a4:11:93:d9:
0e:e4:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:56 2024 by rpki-client on console-ams.rpki-client.org