Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/3db5d02c-959a-30c8-b847-8ecb5a9d608a.roa
File: 3db5d02c-959a-30c8-b847-8ecb5a9d608a.roa (raw, json)
Hash identifier: iGhzQV73rUtup/DrguDvYGwEurSr323QfnEGy2b0+rY=
Subject key identifier: FD:FD:7B:5F:2C:76:90:10:C9:05:A5:BC:CD:67:FF:D2:1D:76:A8:09
Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial: 010D0C9F43285844720A855D649E70F28625EF00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/3db5d02c-959a-30c8-b847-8ecb5a9d608a.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 15169
IP address blocks: 207.126.144.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:85:5d:64:9e:70:f2:86:25:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=f1f72dd9-535d-44c4-a1e2-f6762630f692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:1e:64:c7:9d:5c:0d:70:73:ed:c8:65:85:
d7:64:36:3a:1c:fe:51:32:cb:bc:d4:81:c5:8a:24:
11:e4:80:03:9d:a1:74:ff:d7:55:ec:6a:64:bc:05:
93:19:dd:81:ab:37:6d:a9:52:83:8b:87:53:4d:b4:
22:f6:ae:ef:6a:98:17:de:37:e1:c6:eb:92:a9:91:
54:7c:b0:1e:7d:92:6e:b6:7a:42:58:8a:49:c6:59:
17:4c:ed:1d:af:7e:98:e6:b4:9d:dd:f9:3a:d4:c5:
66:45:84:06:52:aa:26:2a:a7:84:0d:fb:c9:7c:1b:
70:af:17:b7:47:8a:1e:4c:67:4c:e9:01:1a:9f:96:
27:a1:6c:71:f4:c3:a4:28:03:2b:dd:69:3f:43:12:
3e:1a:5b:78:92:86:4c:2f:c1:f4:20:87:4e:27:4d:
9b:0a:1e:5b:71:50:04:3c:8b:42:59:6d:f9:77:78:
49:b8:0c:71:d7:ef:3d:e1:56:bf:59:c7:21:e6:46:
92:b9:c1:7a:a1:9a:e8:da:8b:57:90:f6:97:60:91:
f0:78:6e:e1:b3:54:88:a5:64:c7:83:ac:dc:9b:fc:
d6:8e:d6:db:8d:a1:d5:a2:3f:3f:9d:d1:09:e1:8f:
42:c8:04:77:e6:1d:a1:72:de:a1:62:c7:ee:88:5f:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FD:7B:5F:2C:76:90:10:C9:05:A5:BC:CD:67:FF:D2:1D:76:A8:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/3db5d02c-959a-30c8-b847-8ecb5a9d608a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
X509v3 Authority Key Identifier:
keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
sbgp-ipAddrBlock: critical
IPv4:
207.126.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:27:67:d4:c2:42:c4:f6:62:42:ab:47:39:b3:79:99:fa:03:
a2:f6:55:42:2e:20:1f:11:07:bb:99:77:45:4a:f3:56:ac:ed:
cb:5a:19:19:62:5e:56:92:f3:03:f3:01:25:4f:9a:3a:f9:d3:
54:fa:da:25:be:1f:5a:e2:9b:ed:2a:a3:8a:ed:39:d7:4b:a4:
84:8c:b1:5f:71:0c:07:57:c6:5e:94:6c:07:2d:77:f2:aa:f2:
cf:c6:a8:af:36:3e:52:27:c8:20:41:8a:5f:f1:d5:f8:8a:2e:
68:13:9f:02:c2:a1:65:57:db:48:63:73:10:ee:ec:b5:5e:e0:
cd:72:be:d3:02:0c:8c:1b:b6:fe:69:78:c1:59:50:44:da:a8:
6c:07:52:9c:dc:6d:02:6c:8a:23:01:df:ed:76:41:22:cc:5c:
00:1a:6f:cd:55:0b:4e:8d:98:5b:3b:f8:c5:8d:1c:9c:13:ac:
fc:36:d0:7a:65:98:af:8f:f3:35:30:17:91:7e:f6:0b:e0:51:
60:55:ae:f9:13:97:9d:3b:68:c1:fb:3f:59:2f:4b:be:6a:4d:
36:50:75:e0:ca:c6:00:06:6b:d0:f2:98:c9:41:af:ce:e5:d8:
eb:80:fe:23:ed:45:14:7c:07:dc:e1:4c:4a:0e:c2:31:3f:06:
4c:fc:0f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:42 2024 by rpki-client on console-fra.rpki-client.org