Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa13ecae-332f-34f1-b852-0a7419e62ad8.roa
File: aa13ecae-332f-34f1-b852-0a7419e62ad8.roa (raw, json)
Hash identifier: oXs5x0z1dXe0ItrH/4GKy7DnPDew6JK5UhMpQ1B+36w=
Subject key identifier: 31:AE:C1:A1:DB:32:DD:45:42:34:83:9D:94:46:78:A4:28:FD:20:3B
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285845628D9573BD7DB8A28D234F40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa13ecae-332f-34f1-b852-0a7419e62ad8.roa
Signing time: Sun 31 Mar 2024 01:00:26 +0000
ROA not before: Sun 31 Mar 2024 01:00:26 +0000
ROA not after: Sat 29 Jun 2024 01:00:26 +0000
asID: 7843
IP address blocks: 24.33.32.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 12 Apr 2024 18:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:62:8d:95:73:bd:7d:b8:a2:8d:23:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 31 01:00:26 2024 GMT
Not After : Jun 29 01:00:26 2024 GMT
Subject: CN=b6d5235b-4968-4305-89a9-eb3d806fe87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:9a:91:35:e9:b7:02:a5:d8:90:d8:a9:c0:
cf:fb:ef:51:fb:67:9f:df:e4:f0:c1:72:ae:f3:94:
ac:8e:42:1c:63:49:a2:65:09:32:55:02:00:95:a6:
9c:65:c5:2d:83:b5:5c:17:92:fd:b1:6c:1b:f8:3d:
f2:c4:71:73:08:ec:e3:c1:41:83:8e:c8:6b:cc:58:
d2:e4:88:e5:9d:49:5c:26:c9:ae:74:33:7a:ab:d0:
f4:d4:0a:41:56:f8:64:05:5c:2d:b3:d6:ab:75:ab:
0d:47:34:50:46:a1:35:c7:af:47:34:fa:80:09:6d:
8f:3d:3f:f7:e9:08:99:15:49:58:02:10:1a:87:59:
66:49:b5:e1:05:3e:ad:d5:dc:58:a8:4f:ce:91:c3:
2c:b9:98:be:0c:0e:8b:07:d9:67:3f:70:63:f4:b9:
67:e9:ea:a9:3d:dd:ac:c0:c5:29:c2:54:02:bf:c1:
fc:81:5f:e6:70:89:b7:25:f0:8d:3b:1e:b6:fe:02:
38:ba:59:52:74:92:11:58:15:61:10:a4:e4:97:5f:
66:aa:f0:b1:3b:fe:d9:21:a7:e8:1a:79:d9:7d:e4:
e8:84:b5:fa:14:cb:87:b3:50:6e:1a:a2:21:bb:32:
f2:86:c4:24:c3:01:1f:5f:82:48:f9:dc:ce:c4:6c:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AE:C1:A1:DB:32:DD:45:42:34:83:9D:94:46:78:A4:28:FD:20:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa13ecae-332f-34f1-b852-0a7419e62ad8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.33.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:84:44:18:31:55:e4:a9:b3:5f:79:3c:ee:a5:19:9c:9d:02:
97:17:5c:ec:d8:85:d0:84:83:9b:d2:fb:94:04:49:be:1d:16:
6c:c2:f8:4e:f5:34:01:b5:ce:aa:d2:7e:d6:df:ee:79:7f:1d:
c5:ed:00:83:d3:d7:45:70:f4:7c:87:cc:fd:ae:3c:e4:59:a0:
aa:7d:8d:e3:a1:0e:cf:33:9c:fb:be:c1:0f:10:5e:c8:03:c3:
ad:66:fc:4d:28:cb:7b:a6:59:79:46:ff:68:dd:20:03:9b:1e:
33:6b:7f:0b:45:bb:1b:b8:b5:26:e0:7a:ae:10:38:b2:ac:31:
f3:c7:0d:3c:8b:53:26:73:3f:c8:88:1a:b1:5c:8a:ff:77:8c:
b8:12:60:e8:0e:fb:ce:3a:b5:2d:24:e1:c8:08:ac:1e:53:16:
0d:87:b3:26:1e:34:dc:83:c9:03:9b:f8:87:9b:fc:7c:e3:b4:
9d:48:be:dc:0f:85:76:c0:12:0b:b7:12:9c:93:0f:80:13:8a:
33:14:54:87:4e:f2:1d:fe:ce:10:eb:87:59:fd:b0:40:b0:57:
d5:ee:3c:59:7d:19:80:a0:3e:b1:51:6b:22:cf:86:97:93:7e:
dc:7c:87:9b:cf:39:b6:fa:c0:a4:83:6a:a9:b5:c6:f1:5f:9e:
f3:66:f9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 21:43:35 2024 by rpki-client on console-ams.rpki-client.org