Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/9286367c-490c-34a2-9ed1-620a8b9175e2.roa
File: 9286367c-490c-34a2-9ed1-620a8b9175e2.roa (raw, json)
Hash identifier: jTDIA55J3mxNjyQ3S/HXa6qVuDqO2Br+ASj6eTakAh4=
Subject key identifier: AB:DD:98:72:32:74:19:32:81:C9:4A:EF:66:F3:91:EC:DF:F5:6E:A4
Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial: 010D0C9F43285844720A58E5D1E3B0BF0F414900
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/9286367c-490c-34a2-9ed1-620a8b9175e2.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 32381
IP address blocks: 207.126.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:58:e5:d1:e3:b0:bf:0f:41:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=8c2ee6db-53ff-4063-ac99-4fcb77eb0fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:be:ce:1f:2f:a2:b0:75:34:1b:fc:fb:22:
87:44:4c:ff:f9:69:2d:ec:cc:95:35:85:ec:e8:8c:
ac:ce:33:56:36:07:50:b1:40:3b:66:93:55:ea:b0:
31:46:76:4e:f9:c3:94:13:27:ef:cf:d9:d1:6d:e5:
c6:98:1a:0a:f6:dd:75:6d:d0:5e:a3:cd:8f:0e:ca:
71:14:9d:cd:c4:c7:b0:53:d7:d7:8a:53:34:3d:b3:
9b:0b:6b:0c:15:cd:f9:d2:72:0a:63:67:e4:ad:d8:
87:fd:43:a8:59:7d:e3:72:a9:ff:40:2c:ea:2b:9c:
6b:c4:ea:5e:fc:c0:cb:4d:fd:2e:1a:0d:53:d0:04:
2a:7c:7d:17:e3:a4:6e:98:80:b6:1c:0a:eb:9b:f3:
96:ec:26:24:83:1b:fd:e8:47:25:49:96:4b:26:72:
d5:56:f4:1a:8b:d0:b9:c7:b2:a0:a1:6b:59:c2:09:
21:28:e0:3a:36:b7:42:46:c4:ec:9a:66:8b:5e:3b:
3a:30:26:17:05:61:8a:7f:26:7e:00:77:de:ab:d4:
7e:be:8a:d1:9b:47:3d:c6:01:29:0f:1e:cf:57:e5:
8c:e9:b4:54:42:dc:5a:d9:5f:05:6c:f1:05:24:00:
42:a5:b5:38:5e:5c:7b:74:7e:cf:cc:c1:e3:e1:46:
47:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DD:98:72:32:74:19:32:81:C9:4A:EF:66:F3:91:EC:DF:F5:6E:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/9286367c-490c-34a2-9ed1-620a8b9175e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
X509v3 Authority Key Identifier:
keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
sbgp-ipAddrBlock: critical
IPv4:
207.126.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:45:a0:5b:3b:cc:2b:12:d9:78:a3:58:5f:de:da:79:cf:df:
51:b1:20:56:4d:1d:fc:fe:9f:75:ac:95:10:e3:60:a6:79:20:
44:d1:76:a4:65:62:08:16:92:d6:76:94:43:c9:cf:79:a0:8f:
c3:cc:a2:00:43:4f:f2:14:ad:85:ec:3f:42:5a:9e:ae:83:d4:
93:87:f3:d4:13:15:6b:e4:bc:22:fd:02:40:7d:21:f8:af:3b:
7d:77:ec:d4:e9:15:cf:51:89:60:6e:58:f8:6d:2f:d3:73:98:
15:7d:71:9f:34:aa:a8:5e:e7:70:8d:15:7c:3c:2a:39:76:b6:
16:69:5d:17:73:6b:3b:53:7a:bc:15:da:e4:9d:d3:93:c1:ff:
6b:6b:a6:93:f2:7d:62:f6:21:a8:3c:eb:e6:25:b0:3d:5d:bb:
11:ee:af:72:5c:ab:4a:1a:de:42:47:7e:eb:87:45:10:d7:d1:
cd:c2:f0:1c:f1:94:6f:ad:da:39:70:25:77:2f:b3:e6:1e:54:
d7:96:ee:d0:1e:31:1e:5a:dd:86:db:a3:eb:ba:fd:4d:64:72:
fc:49:d4:cb:56:6f:83:01:7e:f8:1f:2c:96:76:5d:a2:65:33:
23:0b:05:6f:7a:c7:d1:e6:4d:27:cc:72:43:86:e5:09:67:c5:
e9:10:36:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org