Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ff550c8f-9a93-34eb-9fa6-7ff8dd1d3eb0.roa
File: ff550c8f-9a93-34eb-9fa6-7ff8dd1d3eb0.roa (raw, json)
Hash identifier: NXSVqzHQ2mEeuTHMKWEwz/6AfshMr1Psmn3cb3xtIYk=
Subject key identifier: D7:12:66:02:05:A7:23:F3:3E:7D:F8:6C:38:CF:CB:CA:00:76:68:62
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285844C0BFAE00D95D470DB5EFD0A0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ff550c8f-9a93-34eb-9fa6-7ff8dd1d3eb0.roa
Signing time: Fri 02 Feb 2024 02:00:26 +0000
ROA not before: Fri 02 Feb 2024 02:00:26 +0000
ROA not after: Thu 02 May 2024 01:00:26 +0000
asID: 396073
IP address blocks: 162.33.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 16:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:c0:bf:ae:00:d9:5d:47:0d:b5:ef:d0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Feb 2 02:00:26 2024 GMT
Not After : May 2 01:00:26 2024 GMT
Subject: CN=46619fd8-a72c-492a-a5cf-fa3f23a3f041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:69:1e:bf:fa:49:e9:15:24:a3:88:e5:f3:
73:d5:cb:f6:5d:e4:50:de:2c:59:e8:f1:6d:b6:99:
06:56:e0:67:7c:23:68:99:b6:91:3e:d9:93:e9:7a:
37:76:ab:ef:b6:b7:10:67:42:a8:c5:6a:24:1d:51:
77:88:fa:27:04:98:ba:ac:3e:40:f8:91:d3:a2:0f:
15:5f:0e:02:4f:34:80:09:ff:24:fe:4e:ed:ae:69:
b1:92:b4:bf:c1:6c:df:dd:63:b1:c3:30:c1:5e:dc:
34:9d:ab:9d:4f:64:98:46:6c:63:a0:bb:e4:dc:96:
63:eb:6c:32:cf:02:70:5b:3d:d7:80:73:a4:b2:23:
87:4b:23:e0:66:f7:64:9e:18:85:2b:34:63:af:e0:
02:18:ca:9c:f5:82:5a:77:4b:a8:58:08:91:10:74:
9a:c1:77:36:2a:8a:eb:13:cf:50:21:90:2f:8a:04:
5c:95:5e:6f:7f:3c:62:31:1d:60:1f:3b:c8:4b:9d:
f5:2f:11:dd:c6:df:3c:6a:31:dd:f6:5c:87:22:81:
f2:1f:a4:61:da:49:59:94:c3:97:11:ac:44:14:21:
64:f0:52:7d:b4:45:6f:70:68:f0:98:fc:1f:83:74:
07:8f:83:5b:e9:49:19:4d:03:23:e1:5c:38:93:98:
16:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:12:66:02:05:A7:23:F3:3E:7D:F8:6C:38:CF:CB:CA:00:76:68:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ff550c8f-9a93-34eb-9fa6-7ff8dd1d3eb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.33.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:f6:47:01:97:46:6a:3b:d0:12:44:ff:c2:e7:99:14:75:96:
7e:0c:85:92:bb:d6:eb:51:f6:e0:85:1f:d8:09:99:b5:01:a6:
80:e2:45:39:4e:e6:b3:7b:49:e2:9b:9c:84:08:54:23:b9:62:
ac:ae:a9:48:6b:1a:6e:88:75:49:96:6c:76:ed:a9:0b:9c:20:
40:57:c4:de:fb:63:f9:65:9f:65:61:52:d7:a5:3f:21:2d:45:
e1:ba:55:e9:67:f5:d6:4c:49:5c:b7:65:f8:72:60:2d:27:b7:
ba:10:46:5a:36:33:76:e0:d2:b6:52:1b:c3:3f:72:72:a6:5d:
23:ac:ea:f3:17:0f:eb:b5:e5:99:cd:45:43:a4:5d:1e:57:5e:
20:b6:ce:6c:b3:66:d3:4a:5e:5b:58:0f:2f:fe:61:a2:1c:fc:
1e:04:ed:5b:63:34:45:7a:d6:b2:98:c8:f7:70:41:7e:fc:50:
a8:3f:7d:f6:af:a7:a5:3b:3b:d5:18:35:90:53:fb:f0:5f:2f:
2e:92:f6:00:0a:b0:53:8b:24:40:35:a8:fd:53:8c:4c:92:b6:
07:64:ea:09:34:b3:2a:25:4b:f6:b0:be:61:92:85:e9:d2:de:
1f:90:3e:09:4a:35:9b:6b:39:7e:7f:aa:cf:58:de:a8:41:b2:
96:13:1b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 20:17:00 2024 by rpki-client on console-fra.rpki-client.org