Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a1a254f3-c8f4-3b48-bb07-2f0bb3bfcea0.roa
File: a1a254f3-c8f4-3b48-bb07-2f0bb3bfcea0.roa (raw, json)
Hash identifier: IDGTO2EsY9NSOzV6YBTSwxE2D8xe6NdWbi4L8XyOV7Q=
Subject key identifier: 5B:3F:A0:10:30:14:A0:DD:F9:D9:D3:CD:63:33:FD:A2:C0:61:95:CF
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285843FD53B665F0F655A9C21AD120
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a1a254f3-c8f4-3b48-bb07-2f0bb3bfcea0.roa
Signing time: Fri 24 Nov 2023 02:00:16 +0000
ROA not before: Fri 24 Nov 2023 02:00:16 +0000
ROA not after: Thu 22 Feb 2024 02:00:16 +0000
asID: 13332
IP address blocks: 206.206.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 17:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:fd:53:b6:65:f0:f6:55:a9:c2:1a:d1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Nov 24 02:00:16 2023 GMT
Not After : Feb 22 02:00:16 2024 GMT
Subject: CN=27df1485-b09f-4ae2-a9c9-7ecd09b8f834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:f0:2b:fa:ff:c6:d4:fd:a3:b9:ef:e5:b6:
73:50:d8:12:2c:79:f7:d4:74:a1:d3:2d:a4:b2:ae:
fe:c5:04:8c:2c:c7:f0:10:71:b5:ca:0a:a5:99:73:
80:3f:42:e6:e8:41:ff:c8:45:ee:91:c0:7e:d8:f8:
62:2e:1e:05:fd:fe:ba:ff:28:99:e1:f7:41:e6:cf:
34:3f:f3:91:d6:7d:59:5d:f8:e4:70:24:90:d6:e1:
cb:b6:c9:8e:55:79:b3:a5:2b:7c:4c:e3:ff:3d:28:
cc:b4:2d:13:ba:42:15:cb:df:aa:10:e8:0b:f5:cb:
67:e2:69:6e:fb:7b:fa:fc:b8:a5:40:62:36:c1:72:
2e:53:df:a8:bd:74:28:3c:a4:f3:11:a8:a9:d5:da:
10:d0:39:79:2c:50:6f:44:93:b2:99:17:2f:f3:36:
8c:22:6a:41:c9:83:f3:c6:d4:aa:ca:9f:08:2a:7f:
93:50:02:42:4b:5a:e2:a8:b4:d3:9a:cd:e7:dc:0f:
bf:b1:8e:93:a3:bc:ce:9d:c8:40:2f:a3:53:a6:89:
ad:e2:28:a1:eb:b3:5c:d1:04:ce:6e:cf:d3:6f:e2:
62:da:a4:91:e6:6d:1f:7b:73:96:f3:3a:5f:fd:dc:
eb:3e:1e:e7:8e:01:b7:2e:3f:50:15:c7:f0:c8:6c:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3F:A0:10:30:14:A0:DD:F9:D9:D3:CD:63:33:FD:A2:C0:61:95:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a1a254f3-c8f4-3b48-bb07-2f0bb3bfcea0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
206.206.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dd:58:2e:99:c3:88:45:36:61:76:65:28:c8:0c:66:19:79:8c:
a5:1a:7b:2a:67:9d:3f:5b:51:e8:4a:c9:06:bb:74:3b:5b:7e:
4a:68:fe:88:67:55:db:65:f0:20:2a:e2:ad:2f:81:69:45:1d:
51:0e:d8:9a:02:aa:ab:31:4f:a5:8b:58:18:a2:e6:eb:99:d1:
e0:71:68:21:2e:38:b0:e5:c0:6a:0b:3a:3b:e8:f0:f7:f4:a8:
c7:a7:b2:93:97:d2:bd:71:66:ff:39:de:65:b0:ac:9a:6f:59:
e9:23:81:d0:e0:0a:b8:f5:d9:9a:7e:7b:21:8c:c6:d4:3d:e9:
18:2d:53:90:5c:dd:cf:8e:51:cf:41:76:b9:56:02:3e:c0:26:
0f:15:c3:3a:be:30:29:a1:09:c1:7d:a5:c7:a9:1c:38:f0:f3:
a4:85:fb:1b:b6:1f:bf:40:9e:d1:48:c5:20:ae:2b:6a:69:96:
1f:7f:a1:e4:b9:79:b7:40:81:c3:fa:00:34:15:97:a0:38:de:
2b:02:e1:b3:92:15:18:27:de:27:fa:61:7c:31:7a:21:51:8b:
21:f6:f0:a1:c9:ed:a7:bb:e1:83:d1:e2:25:61:b8:99:07:6a:
74:63:62:45:41:be:1e:6b:33:16:3a:e2:1e:09:df:10:24:ef:
df:7a:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 20:33:29 2024 by rpki-client on console-fra.rpki-client.org