Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/9a06d9fd-23d0-3fa5-8277-e9fe64e4bad3.roa
File: 9a06d9fd-23d0-3fa5-8277-e9fe64e4bad3.roa (raw, json)
Hash identifier: 7lG0HVqB2YPlic6p2rrKtQt8VEVDQxbPgSlr3AhEuaw=
Subject key identifier: 75:13:EC:F2:4C:96:3A:A5:62:F3:94:7E:10:58:44:D1:3B:63:9E:5B
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F4328584151B34C66804968825CB8BAC0
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/9a06d9fd-23d0-3fa5-8277-e9fe64e4bad3.roa
Signing time: Tue 28 Feb 2023 12:00:00 +0000
ROA not before: Tue 28 Feb 2023 12:00:00 +0000
ROA not after: Fri 01 Mar 2024 05:00:00 +0000
asID: 57156
IP address blocks: 104.167.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 00:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:51:b3:4c:66:80:49:68:82:5c:b8:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Feb 28 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2024 GMT
Subject: CN=b170ba7a-defa-4096-8660-fa5e9117bfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:44:2c:94:9f:36:17:18:57:85:5c:db:d3:
63:bc:a1:32:a4:59:a2:0c:12:34:85:a7:5b:bd:6d:
aa:0f:b4:11:bf:6b:1d:fe:7e:bf:56:c3:3c:41:28:
23:f9:96:3a:1c:ce:87:82:1b:8a:45:54:55:3c:dd:
7b:62:63:ff:f6:b4:10:79:55:c8:a8:b0:c1:56:c7:
2b:a8:dd:e3:0e:fa:8e:d0:75:ec:6a:42:aa:4d:0f:
c7:a9:dd:77:1c:95:4f:d8:d6:08:44:06:57:b6:0b:
dd:ed:c1:ef:15:35:c0:29:db:82:2d:f1:ef:59:cd:
08:ec:fa:10:4f:b5:5f:0f:78:a0:70:08:a8:62:a0:
c3:cd:31:eb:10:d4:c2:45:2f:21:89:c9:f3:79:59:
5a:c5:e1:7a:b9:5d:93:c1:32:84:36:1b:57:f3:5f:
1d:d4:9c:a7:ba:ed:a5:8b:ab:fd:1d:23:52:e2:7e:
1f:0f:a6:8a:75:b3:b5:cb:dc:4c:75:08:d1:88:01:
39:11:45:5d:b7:9b:1a:09:4e:36:51:cb:a6:e5:52:
8d:c8:e6:9c:8e:0c:e5:c7:30:17:da:21:5c:65:34:
d4:e8:cb:9c:b0:90:1d:2c:de:af:55:28:4e:b4:96:
2e:88:12:e8:a2:18:24:0c:47:b2:50:3a:49:64:a4:
ab:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:13:EC:F2:4C:96:3A:A5:62:F3:94:7E:10:58:44:D1:3B:63:9E:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/9a06d9fd-23d0-3fa5-8277-e9fe64e4bad3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:f0:86:9e:3b:93:73:86:16:5b:79:8b:64:d4:a4:6c:35:31:
35:24:4c:5d:04:f4:10:2f:d3:b8:e5:fd:d2:68:58:e2:16:12:
9c:39:ef:75:8a:d0:9b:dc:a5:6e:a8:c5:2e:6e:3c:85:ae:8a:
ff:38:a7:05:36:88:a9:51:e9:98:54:fa:be:b4:e0:cd:23:1c:
ac:75:f4:de:94:41:df:0e:b9:31:b6:90:90:4c:d3:77:13:73:
e4:fc:12:b5:73:08:3e:89:59:5c:07:7a:35:fb:44:2e:74:59:
03:6b:ae:c0:ca:b5:29:33:ea:a1:89:95:f4:b4:47:d9:b0:33:
94:e2:3b:93:f3:dc:61:6c:2e:3b:6c:87:ac:59:61:f5:6d:18:
fb:9b:fd:18:c5:92:96:f2:f3:ce:14:30:01:05:23:87:2f:aa:
4c:4f:47:56:7d:c2:76:c7:a4:eb:24:70:82:65:84:be:ff:98:
0e:af:bc:8c:2f:41:ef:f9:88:61:92:04:c9:de:29:c8:6a:8d:
3b:85:14:4f:f1:46:43:ba:7a:21:05:ba:fe:8c:81:4c:2f:fd:
26:e8:35:e9:26:c8:66:d3:df:ad:fd:10:e9:21:64:08:dd:2a:
3d:e4:2c:60:ae:3f:8a:23:60:89:61:8d:29:c0:01:d9:74:a9:
36:f0:c6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 01:18:10 2024 by rpki-client on console-fra.rpki-client.org