Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ca63fd5b-0568-3c6c-b7fc-5aff895761da.roa
File: ca63fd5b-0568-3c6c-b7fc-5aff895761da.roa (raw, json)
Hash identifier: gBgLjKYlxdVBZS8dJ9xS6DKmFzOgV8eywcMU5/rCn9I=
Subject key identifier: 04:98:13:60:17:D3:97:C2:74:12:B2:A6:BA:4B:64:06:77:3F:D0:BC
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F4328584309ED819090764BB936670800
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ca63fd5b-0568-3c6c-b7fc-5aff895761da.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 216.252.220.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ed:81:90:90:76:4b:b9:36:67:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3e31c8c1-6138-4156-b6fb-3326a03dc142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:6e:cc:e8:60:3b:8d:cf:3d:f8:f7:ed:d9:
26:ba:13:ea:7f:15:ac:7f:be:53:ff:35:b9:4a:ab:
ec:e7:86:35:26:73:0d:6e:6d:0e:57:0c:71:80:ec:
61:46:a5:28:20:13:cc:0e:a3:9e:37:c1:c8:2e:6f:
f3:84:d0:d3:d0:5c:3d:07:30:b8:cd:50:83:91:a6:
87:39:45:be:d3:ae:8e:35:3a:29:3a:5f:ac:99:79:
dc:36:d4:03:16:89:ed:d0:76:41:cc:b5:a2:ff:d5:
85:65:97:1d:83:9a:60:b0:ba:b7:d0:36:de:2d:f9:
e1:c2:6f:d7:41:96:4a:0b:ca:d5:f5:50:c4:ed:49:
a3:53:96:30:2e:e5:6a:83:55:64:b5:8a:d7:25:bc:
6a:e5:a9:4d:45:24:d6:f5:19:b9:f2:b7:81:2b:8b:
5a:09:25:46:1b:a9:42:85:57:75:72:8a:fc:cd:4e:
a2:64:2e:91:2d:f5:16:22:77:ed:0a:59:bf:1c:8c:
ed:1b:4f:30:c2:a0:7e:80:71:98:49:ac:be:54:7f:
e8:9c:37:18:23:bb:04:5c:99:a6:a0:b4:c6:65:c3:
6d:c7:92:20:1c:48:69:6e:97:37:59:2d:54:73:77:
f2:88:cd:ab:4f:84:4b:c2:47:0e:58:14:08:43:c3:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:98:13:60:17:D3:97:C2:74:12:B2:A6:BA:4B:64:06:77:3F:D0:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ca63fd5b-0568-3c6c-b7fc-5aff895761da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.252.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:c7:07:b0:cc:81:9f:62:4c:c2:83:e5:c7:07:12:64:fa:78:
c8:08:2e:21:6c:98:aa:92:d5:9f:86:47:f9:d0:5a:c1:09:c0:
59:ee:46:0a:04:cf:76:d7:58:a9:d9:6d:31:0d:c6:8a:f4:e9:
21:3e:1e:61:73:02:10:0c:b5:3b:95:2a:df:db:23:55:2c:4e:
b4:0e:b9:03:9b:eb:50:62:9f:cc:b7:ae:59:98:08:85:b6:2a:
4e:7c:1c:d4:2c:10:94:2c:97:7f:f8:c5:06:cb:da:fc:27:11:
d6:9b:0c:07:b1:cb:d9:e6:cc:f9:e3:36:c2:a4:b1:b7:95:4a:
ca:02:76:25:e2:60:8e:06:48:c6:19:5f:70:f8:da:e0:06:01:
92:84:1a:66:e4:89:68:78:8d:6f:a2:07:28:c9:8d:23:af:09:
4c:48:a4:f8:2c:6c:99:4f:73:6a:91:36:da:87:24:4a:8b:c4:
ab:40:1d:d7:8e:06:09:00:3d:16:36:6f:9a:dc:e1:e0:36:66:
14:26:fd:ae:6b:b1:f2:83:53:5f:28:38:aa:46:48:d9:61:7e:
81:67:26:7d:4e:f2:00:62:0d:0f:8f:29:35:48:19:88:41:e2:
6e:7b:7a:28:96:77:b9:af:82:bb:b7:c3:95:21:41:ac:85:86:
1d:64:3c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org