Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f07dcd5d-fc84-3cf5-b7c7-ff94bdf953af.roa
File: f07dcd5d-fc84-3cf5-b7c7-ff94bdf953af.roa (raw, json)
Hash identifier: 7d0/ev10pIGDfc64Noas8RKn9luwqQA57qvdJg2rrQ8=
Subject key identifier: 65:A3:B1:CF:1E:27:98:32:FB:5B:54:A3:A2:93:61:66:CD:C9:78:40
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F432858430A2833FD9B242F547CF6EB80
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f07dcd5d-fc84-3cf5-b7c7-ff94bdf953af.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 216.252.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:28:33:fd:9b:24:2f:54:7c:f6:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2aaf49e7-8277-486a-9c5e-9833ad14767e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:b3:e0:1c:84:79:12:7e:c1:5f:1b:aa:53:
c4:24:1b:d9:17:8b:f4:d6:c9:c4:a0:7f:4a:04:2b:
d8:6a:fb:6a:6c:31:d2:c8:c3:fe:b9:1c:e0:32:5f:
5c:55:75:28:97:0d:50:fe:28:62:49:4c:56:ec:0c:
ee:da:b2:e7:5d:cf:87:b6:b2:4e:0d:1a:8f:03:51:
36:e6:3e:65:94:5c:f2:0f:65:c3:e4:8d:34:6b:3a:
34:0a:6f:6f:7b:75:e7:30:2d:e1:cc:df:8f:61:bb:
0c:f2:04:56:41:30:36:eb:c9:cc:89:76:cb:ff:95:
05:21:55:6c:9f:b7:d0:3c:06:37:d6:95:50:38:78:
9f:86:0a:ce:d4:b8:ff:8f:78:16:0b:09:b4:82:64:
47:97:b4:60:16:04:5b:cc:a8:dd:09:87:71:7f:65:
07:00:97:4a:fe:d5:ef:41:33:0c:80:fb:bf:74:ae:
91:2e:49:c5:e8:f1:0c:9b:24:0d:62:f9:11:7b:ab:
84:b3:74:a7:89:5f:90:41:56:36:7d:80:99:82:2f:
32:54:eb:04:97:cd:7b:f7:57:1d:9f:9f:1e:d1:b5:
78:83:df:7f:46:f9:b6:a4:1e:0b:f6:24:92:b9:cd:
b1:5c:75:e8:98:0f:34:dc:d9:c9:92:19:56:9c:37:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A3:B1:CF:1E:27:98:32:FB:5B:54:A3:A2:93:61:66:CD:C9:78:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f07dcd5d-fc84-3cf5-b7c7-ff94bdf953af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.252.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:05:ce:02:a3:3f:e5:8e:9a:d1:22:9b:63:01:ad:7d:dc:2c:
01:f5:c7:5f:42:76:bb:20:5f:33:21:54:9c:e2:5e:c9:7a:b3:
5e:ec:50:d1:03:8f:19:ec:08:74:f2:46:8f:e2:95:c7:53:ae:
c9:2a:e3:2b:92:5b:ac:0b:c3:ab:0f:e1:f8:4c:7c:92:11:c2:
dc:a3:b4:44:64:fd:4f:f2:38:89:be:48:45:5e:08:bc:98:f4:
fb:26:f8:be:41:fb:d5:48:8d:d8:88:2f:fe:cf:7d:58:df:bf:
aa:c6:40:81:6a:21:e7:68:fc:3e:13:8e:96:8f:53:83:db:88:
2b:eb:ec:21:89:e8:1a:f3:d3:7b:69:ba:32:bb:31:a4:36:dc:
72:2f:13:f2:4d:f6:28:a1:ce:80:8b:82:48:ef:bc:e2:de:6d:
8a:0e:b6:2e:db:54:5d:3f:d4:77:13:88:17:2e:a6:7f:17:0f:
ba:50:cc:46:4f:a7:84:da:ca:22:20:8a:0a:40:69:e1:ca:31:
a4:c7:ef:73:5c:04:46:79:4a:1b:f0:96:a8:88:c3:1e:a2:a6:
89:2d:30:54:31:19:93:c0:76:0a:b1:26:2a:21:f5:3c:1d:e6:
95:d1:0e:a7:d6:be:65:e1:d6:ac:ba:bb:ba:53:29:de:74:6e:
c4:8e:84:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org