Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5ec8caec-78f8-36a1-a2f3-f75dc8ffabab.roa
File: 5ec8caec-78f8-36a1-a2f3-f75dc8ffabab.roa (raw, json)
Hash identifier: NKDMrqjsRXaVNhRWezmrYEFFfhzN5apXdWtqcJxC4pk=
Subject key identifier: 9D:62:7C:C3:AB:88:35:92:83:A1:6B:F7:CA:63:2F:BB:62:00:11:87
Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial: 010D0C9F43285844720B024166D584C0DA644600
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5ec8caec-78f8-36a1-a2f3-f75dc8ffabab.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 32381
IP address blocks: 207.126.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0b:02:41:66:d5:84:c0:da:64:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=dd801592-0889-4779-8b20-f6427a76268d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:4e:12:0d:fb:4e:0f:89:d4:84:31:d6:ba:
91:3d:3a:f7:f8:1c:fc:4a:c8:b3:0c:10:fb:0c:90:
f8:bc:37:2a:58:e7:ce:f3:d2:cb:ed:08:0c:44:8a:
56:59:b7:a3:33:5b:19:97:cd:62:82:d1:c1:13:27:
f4:3b:98:4f:a6:48:07:3b:47:e4:01:98:9d:3d:e9:
7c:5a:17:6e:90:b8:d4:35:57:3a:9a:74:0d:41:3c:
f3:73:c9:b4:05:1e:28:36:60:86:35:56:75:50:06:
1e:4a:11:62:a6:03:b5:ad:b3:5f:ed:59:d4:d4:cd:
4e:6a:2b:45:dc:08:22:72:b5:41:69:75:b2:49:25:
cc:bb:1c:10:9c:62:93:46:ee:67:c4:a4:63:e0:24:
06:e1:ad:b3:5e:b2:a9:50:ef:17:1b:cc:0c:1c:7e:
da:f9:bb:7d:84:4c:b3:a7:91:4e:68:7e:9a:80:dc:
e4:1a:0d:e6:81:a1:04:90:ec:22:74:29:a7:be:58:
2a:d9:e2:fd:88:9b:58:c4:d5:2c:31:a2:90:ed:c7:
81:4c:13:1a:80:b8:5d:2e:8a:1d:c4:5d:f0:38:1c:
08:ef:51:12:39:84:61:5f:fa:5e:65:6f:51:6e:c9:
47:c2:93:1c:7a:50:79:69:7b:46:1c:22:1b:ee:31:
fa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:62:7C:C3:AB:88:35:92:83:A1:6B:F7:CA:63:2F:BB:62:00:11:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5ec8caec-78f8-36a1-a2f3-f75dc8ffabab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
X509v3 Authority Key Identifier:
keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
sbgp-ipAddrBlock: critical
IPv4:
207.126.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:32:1d:aa:19:f8:01:66:5d:54:e4:b6:fe:c5:fa:94:d4:cf:
e3:65:10:6b:38:82:42:6e:28:3b:ac:c5:8b:b8:4a:9d:29:4f:
41:a3:23:09:03:64:a3:a8:45:0f:54:68:ae:d9:a1:5d:21:ba:
29:90:53:95:7c:eb:fc:8a:6c:e2:be:41:be:22:82:5a:9d:da:
36:02:b7:9f:55:d0:dc:21:05:e8:3a:93:96:73:b7:2a:4e:84:
34:07:e5:60:24:8c:74:f7:16:3b:ba:53:cf:d7:9c:81:33:19:
1c:3c:1b:35:f1:c1:b9:b6:2e:44:99:ba:81:53:4e:4c:c0:48:
c3:ba:7c:24:68:68:c6:65:d7:33:fe:05:5e:8a:b9:bb:a1:2f:
d0:89:00:dc:c2:7b:d4:bd:2e:b3:c1:fe:a6:17:de:47:80:f8:
a1:5a:26:04:0e:8c:3f:c3:41:bf:9a:ae:36:75:a5:8f:e8:f3:
5e:39:0d:10:36:09:aa:cb:ee:a5:4c:de:3a:22:b8:da:ec:10:
75:3c:cd:32:de:e2:eb:84:69:31:49:de:50:3e:dd:bb:7f:f7:
1f:da:20:69:7f:7b:b4:f3:93:37:83:52:99:66:b4:8f:ea:18:
e2:2e:3b:30:55:0d:4d:eb:24:53:8f:65:82:22:aa:1f:45:99:
4e:49:e1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org