Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/d92d75f8-193c-35bc-8331-da10f89552c9.roa
File: d92d75f8-193c-35bc-8331-da10f89552c9.roa (raw, json)
Hash identifier: IP9AIVmTHWNzq1/Yj96TohVf4rHbxkfK0EDv8ZUuH9I=
Subject key identifier: 46:26:F0:B7:11:F1:AC:80:8E:C1:57:5B:FB:D2:EF:76:D1:0F:3E:05
Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial: 010D0C9F4328584218D83ACDA4D3859B02716100
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/d92d75f8-193c-35bc-8331-da10f89552c9.roa
Signing time: Sat 03 Jun 2023 13:00:19 +0000
ROA not before: Sat 03 Jun 2023 13:00:19 +0000
ROA not after: Fri 01 Sep 2023 13:00:19 +0000
asID: 60978
IP address blocks: 172.96.8.0/21 maxlen: 21
142.147.96.0/22 maxlen: 22
204.10.160.0/22 maxlen: 22
162.251.120.0/22 maxlen: 22
192.188.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:18:d8:3a:cd:a4:d3:85:9b:02:71:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
Validity
Not Before: Jun 3 13:00:19 2023 GMT
Not After : Sep 1 13:00:19 2023 GMT
Subject: CN=815b4321-fc5b-4d82-bdc9-d7ce8b279620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1b:ff:6d:a2:a4:96:a9:7e:5b:cb:c4:f6:fe:
d5:13:69:5c:f5:bf:ca:4a:45:f6:1b:f1:bb:da:7d:
87:35:05:22:25:a0:e3:46:42:68:1c:6b:7f:38:82:
c7:99:a6:98:ee:d5:ee:cb:19:38:a1:80:5d:24:cc:
c4:c7:52:12:d9:94:67:58:d5:4c:e0:15:22:0a:a4:
77:1f:f9:f5:89:a3:84:c7:61:03:a7:e7:e5:f6:ac:
78:09:11:16:49:c9:53:88:bc:ac:74:1e:2d:99:97:
14:ef:a3:0b:4d:c7:e7:1a:c4:89:95:37:bd:98:45:
19:e2:c6:46:58:c9:7f:ec:7d:98:66:4b:29:49:a3:
c7:a4:74:08:7e:58:b4:e7:b9:31:4b:c1:80:1c:9f:
89:75:14:66:e3:41:20:0b:0f:60:59:af:de:1d:23:
94:a8:ea:34:95:5f:5a:ff:5f:55:36:71:c7:45:46:
8a:1c:29:78:e8:51:43:76:6a:77:ed:f1:50:03:16:
e4:c7:ac:6e:0e:e0:c9:85:c4:92:fc:4d:15:8c:47:
56:7d:77:2e:70:24:6a:f2:03:a4:81:ae:ca:5b:66:
da:d4:c3:3b:6b:20:97:30:76:86:b4:be:b6:bf:cc:
06:4b:80:4c:ce:35:59:0b:13:71:f4:7a:4c:8a:c8:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:26:F0:B7:11:F1:AC:80:8E:C1:57:5B:FB:D2:EF:76:D1:0F:3E:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/d92d75f8-193c-35bc-8331-da10f89552c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
X509v3 Authority Key Identifier:
keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
sbgp-ipAddrBlock: critical
IPv4:
142.147.96.0/22
162.251.120.0/22
172.96.8.0/21
192.188.88.0/24
204.10.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:ab:0e:ae:79:1a:04:e8:14:bb:f5:cd:30:fb:4f:16:75:ee:
0b:bf:c4:79:29:46:6c:22:e4:67:a6:c2:1a:9e:ba:59:90:41:
6f:9c:cc:9c:91:6e:3e:20:9a:fa:24:a3:64:47:35:0f:75:cb:
be:ef:9c:25:2c:7e:b5:9b:69:14:b4:53:dc:c7:be:e7:54:56:
dc:4a:cf:82:67:47:97:2c:9b:9b:2e:8e:3f:9b:2d:a5:d5:a4:
15:58:ac:ca:4b:71:13:35:c0:40:62:d5:2b:c4:44:90:5c:b3:
cc:91:18:29:74:50:84:c3:1a:8f:41:23:6e:22:b6:69:c4:55:
b8:e2:1e:67:e6:15:cb:25:3c:66:00:53:1f:09:f4:c0:ad:0f:
f8:6d:46:26:33:68:90:e4:9b:b3:cf:a7:7b:87:8e:3a:6a:ff:
1b:4e:e6:93:38:38:63:54:f5:89:0d:4d:98:51:d9:7b:41:ec:
48:01:fc:95:81:26:f6:eb:aa:96:1f:14:4b:11:7d:47:91:a0:
13:65:9f:06:23:17:f9:db:0c:7c:31:33:69:d4:ee:5a:e8:cb:
4e:a2:7a:6a:1e:9a:e2:8a:64:41:f2:8d:1a:95:76:fd:97:7c:
30:21:8e:95:b8:bb:ce:96:77:82:d7:9e:79:ba:67:49:40:47:
10:73:2c:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:53 2023 by rpki-client on console-ams.rpki-client.org