Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/25e87971-6720-3ca6-995e-e5e8a358d711.roa
File: 25e87971-6720-3ca6-995e-e5e8a358d711.roa (raw, json)
Hash identifier: 2V7qlwqHkDTSu6wlDONeA/gK5LDYpAZV24pmNkikmwI=
Subject key identifier: C9:82:B8:1D:9D:F6:FE:F7:1C:6D:3B:A7:43:D0:FF:CE:4A:BB:96:CD
Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial: 010D0C9F4328583C34B9CE30822BBAA5F611D200
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/25e87971-6720-3ca6-995e-e5e8a358d711.roa
Signing time: Tue 09 Feb 2021 05:00:00 +0000
ROA not before: Tue 09 Feb 2021 05:00:00 +0000
ROA not after: Sat 14 Mar 2026 04:00:00 +0000
asID: 395092
IP address blocks: 172.96.136.0/22 maxlen: 24
64.28.236.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:34:b9:ce:30:82:2b:ba:a5:f6:11:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Validity
Not Before: Feb 9 05:00:00 2021 GMT
Not After : Mar 14 04:00:00 2026 GMT
Subject: CN=1f7ab85f-d6da-4ee8-af0a-5133771565e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:b8:24:c3:56:85:40:ba:50:6d:d4:0e:37:
0f:69:65:bd:e3:92:60:74:26:92:1f:cf:fc:d6:25:
0a:72:f2:6e:85:08:4d:03:4d:40:86:ff:59:33:61:
e8:f0:2f:85:29:76:b4:c9:c3:5b:64:38:0c:30:38:
11:1c:30:83:ef:46:c6:ab:3f:6c:61:85:e2:2b:82:
70:84:60:20:5e:cd:a0:d5:f5:c2:1e:df:2e:17:c6:
da:be:02:48:c2:c1:af:3a:09:53:9d:ab:98:f6:01:
ba:3c:a7:7e:2f:33:39:5d:b2:81:71:0a:36:95:4c:
5e:1a:32:b3:a3:40:90:c2:4c:c1:ef:f7:85:3a:81:
8c:4f:54:d0:8d:b6:9d:cc:37:0f:43:9d:f3:fc:d2:
c2:f9:51:91:62:92:88:77:dd:ed:94:51:d9:5b:76:
23:a4:ec:3f:34:5d:ba:d3:3f:91:86:5a:b8:21:eb:
74:87:d1:d5:94:46:49:9f:57:9c:8e:5b:79:57:44:
d7:89:10:98:5a:0a:65:b2:dd:dd:cf:cb:c3:c4:49:
5b:79:b4:3b:b3:a0:4f:b8:db:33:b9:95:81:e3:7e:
44:ae:e3:47:ab:59:d9:f7:66:7c:eb:b8:24:2f:04:
56:a9:05:9f:27:e6:56:1c:ba:05:6b:58:84:fc:1e:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:82:B8:1D:9D:F6:FE:F7:1C:6D:3B:A7:43:D0:FF:CE:4A:BB:96:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/25e87971-6720-3ca6-995e-e5e8a358d711.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
X509v3 Authority Key Identifier:
keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
sbgp-ipAddrBlock: critical
IPv4:
64.28.236.0/23
172.96.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:bf:f9:00:9e:7e:cc:23:16:32:e2:b3:4c:7f:d7:1c:17:2a:
94:87:4a:82:29:34:9c:3d:b8:62:64:0a:a6:9e:fe:0a:0b:dd:
29:c7:99:bf:b3:e8:84:46:3e:bb:8f:62:4b:41:61:c4:4e:97:
da:93:b2:a3:5a:3f:8a:a8:7c:3b:9a:af:73:36:c4:72:39:d2:
68:04:84:3f:c8:78:2c:17:a5:4d:f4:37:8e:6f:c7:15:9f:86:
82:dc:b6:72:2a:d3:a0:84:d1:7e:72:75:dd:b1:99:cc:70:29:
b3:23:31:8f:a4:4d:3d:a6:c7:51:1e:9e:b0:e7:94:de:66:5e:
1b:f7:d6:98:61:f1:f2:aa:24:fe:7a:5e:9a:24:5d:12:bc:9d:
77:60:f5:9b:70:ff:48:db:c2:1e:9b:e8:e9:44:a6:c1:46:e4:
53:c0:70:8d:b8:01:66:d4:ca:7a:15:8e:2d:86:88:52:fe:74:
9a:ce:ac:2d:aa:18:ce:70:82:ee:fa:fe:93:6f:c1:8a:d2:fa:
a9:36:9f:94:cf:a2:17:c8:bf:c5:02:1e:9b:04:4d:2d:36:47:
c5:2b:10:fb:78:7b:38:f2:fc:d2:dc:51:7d:e9:98:fb:6a:ca:
ff:fa:8f:11:c9:27:47:5c:c3:f5:b7:35:43:d2:06:17:6a:23:
0a:be:92:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:32 2023 by rpki-client on console-fra.rpki-client.org