Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5557abfc-abbd-3ba5-bc1c-f2684ed655a5.roa
File: 5557abfc-abbd-3ba5-bc1c-f2684ed655a5.roa (raw, json)
Hash identifier: OROWhVqfC7bwxQLIgUUoitTc2Hdi3fftM0i/Khh+HLA=
Subject key identifier: 3A:80:DD:C7:0C:1C:AC:23:99:8D:FC:F0:DF:71:0C:8E:3D:1E:9C:7D
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285843BC057714BD7539582EA16980
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5557abfc-abbd-3ba5-bc1c-f2684ed655a5.roa
Signing time: Tue 31 Oct 2023 16:35:11 +0000
ROA not before: Tue 31 Oct 2023 16:35:11 +0000
ROA not after: Mon 29 Jan 2024 17:35:11 +0000
asID: 834
IP address blocks: 216.10.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:bc:05:77:14:bd:75:39:58:2e:a1:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Oct 31 16:35:11 2023 GMT
Not After : Jan 29 17:35:11 2024 GMT
Subject: CN=4d4d822d-c02c-47a1-ab43-0cc516c42f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:46:14:c8:0b:49:5d:fd:53:c2:4b:7a:9d:
b8:f8:38:83:05:d5:91:45:f8:5a:5e:9c:c1:a2:73:
1f:eb:34:fd:17:eb:80:f8:28:64:1c:0f:6a:a8:85:
90:93:57:79:0f:69:43:42:d2:d5:f8:00:bc:5a:48:
96:61:e8:fc:e0:d7:42:54:c6:78:ca:c8:6d:b1:46:
82:28:fd:7f:d1:c7:98:4a:f4:df:63:49:3c:65:18:
b0:ce:f4:c3:28:6a:c2:dc:60:56:c5:6a:ed:90:53:
a0:91:a9:a1:08:91:5f:54:92:4f:bc:e8:2b:f9:d7:
54:2a:80:e5:5d:f2:be:85:de:4d:ec:71:e5:e1:a5:
8e:c3:21:ee:ea:e2:a7:e5:92:38:76:35:1b:7d:5e:
05:ff:68:80:4e:b3:46:27:5c:8c:71:9e:b5:ac:d0:
e3:d0:78:92:84:57:a3:a4:04:c0:11:39:36:0d:bb:
6b:26:3c:c2:d7:af:d0:ca:7c:08:a7:68:c7:86:d9:
bf:f6:f0:26:f0:7c:45:05:f7:07:39:1f:63:f6:47:
fa:af:3c:87:cb:3d:23:32:44:02:ce:fe:01:e5:6d:
10:1f:c6:07:85:94:3f:b3:cf:cc:44:9d:80:36:4d:
34:fd:18:65:45:6c:9c:8a:eb:19:0c:1d:85:4f:96:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:80:DD:C7:0C:1C:AC:23:99:8D:FC:F0:DF:71:0C:8E:3D:1E:9C:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5557abfc-abbd-3ba5-bc1c-f2684ed655a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
216.10.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:9f:e8:b0:36:89:db:bf:d9:db:3b:e9:0b:fe:a7:05:81:22:
74:c8:25:0e:7f:d3:7c:33:24:47:c5:a4:cc:62:20:40:ae:ba:
85:da:e3:26:28:61:8b:25:8a:0a:37:13:67:62:ae:46:7b:4a:
ba:58:50:75:7c:6f:4c:ed:af:25:f6:56:18:88:0b:4e:81:02:
20:cc:39:cb:e4:af:08:f6:31:9f:5b:c8:6d:4c:59:7a:78:05:
4e:ca:90:51:0d:10:33:d7:d5:8a:ec:db:9e:56:cd:c5:8f:05:
7f:4d:0f:91:39:2f:af:12:f1:7c:09:2d:fe:63:ab:ad:21:bc:
2d:67:7f:e4:9f:b5:f6:1a:d1:79:cf:d2:6d:b3:9f:3a:91:00:
91:3a:0c:94:52:fd:96:43:df:1e:99:f0:7a:79:d4:26:5f:3a:
39:ed:4f:c6:08:c3:94:0b:58:c6:bb:b0:80:18:31:ad:88:09:
de:92:fd:86:9f:ae:ec:06:13:03:30:3b:36:1a:37:af:9c:98:
9c:fd:db:ed:06:4c:ac:7b:02:c0:d2:81:88:a6:62:05:e0:1b:
48:a3:4f:e2:70:4a:0a:b1:09:3d:8d:51:42:8c:2d:fe:d7:a6:
8e:20:5e:84:b0:ea:4d:1d:71:f2:23:6e:1b:5b:51:3c:b0:39:
54:34:ad:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 18:54:04 2023 by rpki-client on console-ams.rpki-client.org