Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/40ec0988-8887-331c-bb1c-f0e2ea30aa05.roa
File: 40ec0988-8887-331c-bb1c-f0e2ea30aa05.roa (raw, json)
Hash identifier: MQheyKxFc7rIaWAMqgsOSH2UztjS44ldqmfVTnUzZ6E=
Subject key identifier: 5E:49:63:76:46:3F:43:12:F9:75:53:AC:CC:FA:2C:71:C1:1A:C2:76
Certificate issuer: /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial: 010D0C9F4328584313E6860549EDD05621DAFD00
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/40ec0988-8887-331c-bb1c-f0e2ea30aa05.roa
Signing time: Fri 01 Sep 2023 11:17:02 +0000
ROA not before: Fri 01 Sep 2023 11:17:02 +0000
ROA not after: Thu 30 Nov 2023 12:17:02 +0000
asID: 213035
IP address blocks: 208.67.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:13:e6:86:05:49:ed:d0:56:21:da:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Validity
Not Before: Sep 1 11:17:02 2023 GMT
Not After : Nov 30 12:17:02 2023 GMT
Subject: CN=fa1d5d60-b584-49f1-bb99-6b66adac22d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:04:07:a6:db:1e:4b:93:5b:33:1f:82:bb:
64:46:c8:ba:e4:da:41:2e:33:af:5a:31:d4:33:99:
89:cc:fd:d8:c5:b2:b8:94:78:5e:5a:27:3f:0a:33:
23:21:a4:89:43:15:cf:56:89:fa:d4:bc:73:15:69:
dd:aa:ba:8e:bd:24:43:4a:41:d8:52:09:1f:70:3d:
e5:2d:58:4f:6c:61:29:de:a0:83:d6:00:12:6b:61:
63:2c:b4:de:b8:5a:ff:21:c9:fb:02:91:fb:ff:3f:
cb:4c:c6:4b:f7:b2:91:5f:6b:ff:57:38:e7:b8:34:
ae:ff:7d:ab:8b:89:06:2b:37:35:12:d3:6d:64:65:
83:a2:5a:bb:d3:2c:a7:e7:cb:f3:18:3c:4c:f5:4c:
5b:ea:ba:39:5d:9f:16:81:a7:0a:01:bc:60:2b:f9:
7b:9f:ea:03:3f:c1:13:d6:95:19:74:68:a8:7d:2d:
8d:40:84:77:ee:9b:fe:98:50:ca:20:3a:c7:7a:8e:
04:dd:23:cc:29:c9:0e:30:b9:a0:b8:1a:9a:ae:aa:
3e:42:f3:fd:99:49:92:6a:ab:32:39:05:e2:7f:b8:
72:b3:c9:9d:20:cb:d7:8f:2b:a4:a1:ef:79:3d:57:
bc:78:04:3b:4c:7a:db:4a:3c:62:29:1a:9e:d9:2f:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:49:63:76:46:3F:43:12:F9:75:53:AC:CC:FA:2C:71:C1:1A:C2:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/40ec0988-8887-331c-bb1c-f0e2ea30aa05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
X509v3 Authority Key Identifier:
keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
sbgp-ipAddrBlock: critical
IPv4:
208.67.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:c4:29:f3:92:f5:d9:73:f5:74:f8:73:65:8c:d5:6f:5c:2a:
cb:d8:18:dc:bd:9e:b6:9e:09:e3:2d:aa:7a:2d:89:9c:54:84:
93:0a:c7:20:60:91:a9:4f:54:f1:1f:56:fc:8a:9d:07:1f:b6:
06:1f:55:68:15:99:a5:91:20:9e:c8:e7:cb:c3:cb:c3:2a:a7:
57:af:ef:5a:e9:46:8e:45:35:ed:4d:c2:d6:4e:ec:67:dd:4b:
cb:67:98:bc:54:d8:d3:52:6e:96:ef:fe:04:bd:65:8f:72:30:
92:0f:fa:e5:a6:10:d2:29:47:f6:d2:e3:3d:f3:54:8b:63:d2:
1d:b7:40:d7:96:03:de:9d:eb:f0:e2:8c:c9:dc:2f:c9:36:fa:
40:af:b8:cd:f9:3c:9d:9b:a1:f5:14:7a:19:60:7e:53:47:f3:
02:f2:8b:42:58:37:92:ae:6c:49:28:9e:07:b6:be:b9:94:bd:
cc:03:3a:b6:dd:f0:4f:84:5d:66:e3:01:bd:47:b3:31:bd:68:
a1:8f:4b:6d:d2:56:bb:05:13:80:2d:9a:b8:5e:6d:37:62:d9:
46:03:ba:7e:43:3f:06:5e:50:ea:cb:b0:aa:ed:11:83:df:2a:
9a:93:6d:03:38:37:21:e8:20:38:92:ea:44:57:23:d2:15:c0:
6e:82:87:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 19:19:50 2023 by rpki-client on console-ams.rpki-client.org