Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/6f82e2d9-822a-3fae-ac35-7bc8e7f3ef29.roa
File: 6f82e2d9-822a-3fae-ac35-7bc8e7f3ef29.roa (raw, json)
Hash identifier: BupDtsUM24faM5RNBVrJ1+HUSfJ3QLbqMd/0SBkUq3Q=
Subject key identifier: E4:3E:17:BB:43:69:69:8B:A5:27:F0:9B:59:2B:5E:D9:3F:3F:AA:51
Certificate issuer: /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
Certificate serial: 010D0C9F432858415BF7E6B309B94DE0DCC3F800
Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/6f82e2d9-822a-3fae-ac35-7bc8e7f3ef29.roa
Signing time: Mon 27 Mar 2023 19:50:39 +0000
ROA not before: Mon 27 Mar 2023 19:50:39 +0000
ROA not after: Sun 29 Jun 2025 04:00:00 +0000
asID: 54301
IP address blocks: 66.128.192.0/20 maxlen: 20
198.143.0.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:5b:f7:e6:b3:09:b9:4d:e0:dc:c3:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
Validity
Not Before: Mar 27 19:50:39 2023 GMT
Not After : Jun 29 04:00:00 2025 GMT
Subject: CN=dc00f390-fbe4-4552-a220-9d066e27c143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:ca:44:65:35:59:70:e1:40:88:c0:bb:20:
16:69:4f:81:e9:09:5e:6a:b9:11:f3:9a:e0:29:ce:
b0:54:aa:07:78:e6:de:d1:c9:8b:b8:94:d7:67:37:
58:33:70:00:0d:e7:c6:89:75:f3:41:71:89:cb:d6:
6d:d5:56:68:a1:1e:95:76:af:50:3f:d7:a4:ed:5a:
84:64:ee:d9:5d:62:cd:37:24:88:65:1c:dc:3d:a9:
30:b9:c0:f2:78:1e:56:e2:65:de:12:eb:01:65:bf:
8e:d3:59:70:69:44:ba:f8:44:7a:38:60:80:86:68:
a6:2f:c1:f4:ba:6a:60:42:47:35:17:a5:ba:86:e2:
65:0e:8a:cf:19:c4:be:e2:15:57:d8:4f:2a:15:41:
b8:95:78:90:b8:78:41:35:2d:12:f3:14:b4:c5:12:
d2:81:70:09:b7:97:dc:c8:ea:70:ef:b4:48:d5:b2:
03:13:fb:df:22:d0:58:56:39:5a:d5:45:3d:6c:45:
e9:d6:9f:68:04:ca:cb:d0:96:9c:42:40:0d:5f:eb:
f3:64:67:53:f0:ac:8f:6e:28:99:6a:d4:7c:26:d0:
12:af:37:6d:d9:ad:95:d7:18:19:5b:71:8b:3f:08:
82:94:06:ac:5a:4b:d9:d2:48:04:8c:77:ef:98:47:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3E:17:BB:43:69:69:8B:A5:27:F0:9B:59:2B:5E:D9:3F:3F:AA:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/6f82e2d9-822a-3fae-ac35-7bc8e7f3ef29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl
X509v3 Authority Key Identifier:
keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.192.0/20
198.143.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:b0:71:96:17:e4:83:ce:17:d5:cb:a5:d3:e2:8c:64:c8:34:
d0:67:86:5f:58:1f:fe:4c:42:52:8f:d4:59:70:6a:f0:ec:70:
d2:2a:ba:3f:dd:80:9c:8c:c6:37:e1:f5:29:e3:d9:75:36:b9:
fe:9c:9b:63:05:e4:4e:af:fb:41:aa:56:d2:40:6e:54:64:3b:
46:e7:c6:d3:04:95:d7:30:f9:cb:44:07:18:03:aa:5a:80:4e:
4e:35:ef:98:4e:cd:c6:a7:c2:ce:2e:25:b0:bf:f8:b5:be:2c:
c7:09:c3:26:a7:5f:5b:5a:eb:a1:8d:6f:35:1a:0d:7b:23:7d:
f7:04:29:d0:9d:40:e2:ac:0e:ca:0a:dd:a2:25:d8:e8:12:4e:
fc:ac:de:36:a9:58:a9:75:d4:df:5d:28:48:bb:89:13:82:06:
55:6b:08:3d:94:3d:22:44:97:12:37:0e:f0:69:aa:3d:13:6f:
61:67:ac:8f:c1:93:fe:32:97:e4:2a:26:e7:e8:e5:48:67:20:
a0:4e:46:74:dd:c0:60:06:97:d3:43:19:21:ce:c4:31:91:9a:
5b:23:aa:6f:4c:b1:93:27:9c:72:01:06:0d:25:03:95:52:af:
6e:6c:71:6d:d0:5d:5a:f8:3f:30:74:57:ce:c8:a6:49:db:25:
87:9f:19:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:15 2023 by rpki-client on console-fra.rpki-client.org