Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/d551afbd-e0e3-35e9-b1bc-0d20c1dc391c.roa
File: d551afbd-e0e3-35e9-b1bc-0d20c1dc391c.roa (raw, json)
Hash identifier: 5ZxNV3fa13rHJCkd5PZ4RDFY7VdXOgmZVooSp6kCDzw=
Subject key identifier: 12:5B:B2:B9:0B:B5:41:D2:58:C3:C9:89:3B:63:49:A7:CB:55:07:92
Certificate issuer: /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial: 010D0C9F43285843A9E6FE3DCB7A6BBDCFBC44C0
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/d551afbd-e0e3-35e9-b1bc-0d20c1dc391c.roa
Signing time: Wed 25 Oct 2023 04:49:14 +0000
ROA not before: Wed 25 Oct 2023 04:49:14 +0000
ROA not after: Tue 23 Jan 2024 05:49:14 +0000
asID: 205663
IP address blocks: 208.67.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:a9:e6:fe:3d:cb:7a:6b:bd:cf:bc:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Validity
Not Before: Oct 25 04:49:14 2023 GMT
Not After : Jan 23 05:49:14 2024 GMT
Subject: CN=70da5c97-e658-4fd8-81a2-84a5295cb58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:31:34:10:fd:d1:6e:8a:ef:4e:9a:a4:b2:
17:9d:33:bd:3d:51:8f:c8:be:21:a8:6c:6c:da:92:
30:23:0b:b9:4a:e0:fe:bb:2e:4a:62:34:9c:8c:25:
bf:d0:6c:f1:00:6a:94:9e:d9:7c:4e:0e:ec:ee:17:
63:34:5b:d1:2a:ca:6c:2b:1f:2a:bb:37:28:3f:4a:
99:57:64:f0:4a:78:74:d4:5e:77:8e:41:d2:aa:46:
b2:be:41:bf:f8:6d:21:0a:3d:a1:1d:0c:bf:c8:bb:
40:aa:54:f7:53:22:c7:56:c4:3b:38:05:3f:a7:5c:
39:e2:71:44:bf:af:c2:3a:b5:30:cc:82:51:16:48:
19:f1:ee:a7:f8:f7:a3:77:ce:fe:78:af:f8:4e:fc:
0c:27:79:a5:7f:65:70:51:7d:e5:e1:84:76:e9:56:
32:70:fc:8a:0c:98:44:d4:ac:77:9b:10:a3:22:13:
75:d7:60:e8:4f:bb:bf:b0:c0:a9:7a:39:90:88:70:
8a:1a:7d:54:a6:52:c0:fd:42:34:df:94:2c:0b:6d:
f7:08:4a:08:37:48:d0:ac:6f:77:2c:b0:e6:61:70:
d0:01:d2:ae:5d:12:08:0f:56:36:77:7e:3b:ac:6b:
ba:ee:82:a8:af:ad:83:f1:8c:87:ae:f9:1b:0d:ac:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5B:B2:B9:0B:B5:41:D2:58:C3:C9:89:3B:63:49:A7:CB:55:07:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/d551afbd-e0e3-35e9-b1bc-0d20c1dc391c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
X509v3 Authority Key Identifier:
keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
sbgp-ipAddrBlock: critical
IPv4:
208.67.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:85:47:e4:b5:51:49:ad:31:fe:6e:98:0c:5d:5e:9b:63:82:
e0:ee:10:48:ba:c1:1e:f7:90:4a:40:6c:fd:41:0d:0c:16:f3:
fa:e6:c4:3d:68:e6:ee:ca:2d:10:95:f3:8a:d2:89:07:4e:09:
08:dc:9f:18:cc:cc:7a:ce:af:ab:f3:cf:83:b4:90:4c:a6:57:
3d:ab:b4:fe:95:e7:cd:11:cf:d3:df:0a:ad:dd:f3:f5:7a:b1:
f2:29:3d:cc:c9:e0:72:47:ca:33:b0:90:d5:85:05:b0:99:52:
f7:3e:a4:be:eb:6d:7a:95:b2:cf:af:84:01:85:72:27:ff:fe:
7d:9f:c8:c0:06:5d:a2:4b:d8:1a:95:3b:3f:7b:90:d6:f2:3f:
62:6a:29:69:71:f1:7a:97:5f:e3:0a:af:5a:ba:42:44:8e:31:
38:3f:58:be:91:1d:25:bf:11:55:25:c5:40:aa:9b:f6:fa:f9:
da:9e:ef:06:07:e1:24:e5:7e:63:22:d1:85:41:5b:3d:73:b5:
cd:23:a7:89:9c:f8:00:47:aa:db:a0:f1:6d:fb:09:03:f7:08:
e3:be:45:bd:34:65:04:6e:30:8e:f1:7d:cb:13:5a:85:7b:3d:
ca:09:8a:44:8e:1a:c4:d3:10:4b:14:4d:cd:c0:2e:3e:73:5f:
9a:81:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 06:01:05 2023 by rpki-client on console-fra.rpki-client.org