Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/19ba709d-422a-3805-a7a3-c408bd503357.roa
File: 19ba709d-422a-3805-a7a3-c408bd503357.roa (raw, json)
Hash identifier: 5MrwBUmclwQE+rcs9I1K3Mfts3nwcRw47mk/ML5654w=
Subject key identifier: 9E:D6:48:52:4E:0B:4B:40:8B:C0:9E:CA:34:6F:05:E8:FA:BA:56:A6
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F43285844B9C4FC8935D6E01E49409300
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/19ba709d-422a-3805-a7a3-c408bd503357.roa
Signing time: Tue 30 Jan 2024 14:00:30 +0000
ROA not before: Tue 30 Jan 2024 14:00:30 +0000
ROA not after: Mon 29 Apr 2024 13:00:30 +0000
asID: 49348
IP address blocks: 174.136.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 14:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:b9:c4:fc:89:35:d6:e0:1e:49:40:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Jan 30 14:00:30 2024 GMT
Not After : Apr 29 13:00:30 2024 GMT
Subject: CN=f9ce1598-9b25-47a6-a022-e35e56e04226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:c0:58:98:1c:b9:f5:32:0f:27:8c:a5:2a:
8b:78:06:d2:ab:e8:92:16:52:d5:84:e4:4f:f4:38:
98:44:3c:62:5b:8a:91:7c:3d:11:41:7d:54:39:f3:
0e:c7:58:75:f9:f0:ba:95:ae:85:11:5e:ce:64:75:
22:6d:d0:b9:0b:d1:ad:46:49:2b:72:5f:92:16:d1:
6e:be:ef:27:65:fe:24:f0:46:96:32:95:b2:50:d9:
16:59:9d:1e:cb:df:71:5e:7a:83:80:89:17:83:75:
59:69:61:4a:10:94:0f:1c:42:d1:8f:4e:41:61:2e:
a1:7d:85:6f:60:c4:bd:ae:59:2f:ce:e5:fb:07:d2:
4d:76:9b:e8:2e:2c:3f:01:41:e9:8e:7e:83:0e:ea:
f7:68:c4:a3:2a:0c:3d:10:4c:0e:a3:e4:7c:9a:f1:
69:6c:c6:80:db:53:83:8f:b1:fe:15:55:19:93:80:
45:77:6c:d1:14:b2:bc:e1:7f:85:d6:40:4c:48:86:
cf:b7:cd:1f:a8:c7:ca:20:4a:ee:3c:8d:13:99:9e:
ab:c9:d6:75:f2:46:87:a9:30:1e:52:49:ed:1b:56:
be:08:06:e8:07:48:ec:27:c6:07:3a:e1:0a:fe:59:
a6:39:95:6b:b2:24:35:50:85:0f:f3:02:e4:29:c3:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D6:48:52:4E:0B:4B:40:8B:C0:9E:CA:34:6F:05:E8:FA:BA:56:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/19ba709d-422a-3805-a7a3-c408bd503357.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
174.136.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:89:bb:a9:49:06:d1:5b:57:b6:d2:b3:57:6d:78:40:7b:36:
7e:7a:0d:74:ab:0c:07:f2:0d:b3:28:80:cd:7e:9d:d0:54:14:
ad:30:7f:a4:88:bf:de:66:f5:d9:63:fc:31:d3:85:82:af:8d:
cc:3a:06:7c:20:31:3d:1c:55:34:e6:ff:6f:30:11:85:5e:2f:
5d:a7:d5:d4:13:b6:cb:fa:41:47:21:c8:96:ee:3b:da:79:ba:
94:b5:09:0b:06:03:a8:78:f7:46:a0:7e:1b:04:c6:bc:0e:66:
14:48:6d:c2:8e:2c:2b:03:0a:5c:5a:c5:e4:e3:de:b0:e5:bf:
3c:39:71:24:35:64:f3:22:3e:d5:48:9a:58:01:69:eb:a1:0b:
f4:8e:0c:80:8b:66:43:44:ba:e6:d1:26:b0:76:3d:13:61:cc:
29:25:41:fd:2d:66:9f:dc:90:0b:aa:f6:c0:ac:ed:1f:fd:ee:
64:f8:c3:f3:0d:dc:98:c8:83:4b:ff:d4:f6:a4:df:88:43:41:
b6:da:af:8b:79:d1:ed:1f:23:98:de:5b:a8:80:33:ec:77:30:
ae:17:08:e9:75:63:ef:5c:44:41:ed:77:ec:b6:90:ed:a7:5a:
6f:d4:ef:dd:fb:c3:20:7e:1c:16:8f:9f:9f:2d:b8:55:dd:f8:
97:53:81:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 19:07:30 2024 by rpki-client on console-ams.rpki-client.org