Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/30b4554c-b512-33ae-bfba-82acf470a536.roa
File: 30b4554c-b512-33ae-bfba-82acf470a536.roa (raw, json)
Hash identifier: LmWg3t6mOVtTL56UMo3SEUuDGTcAZCNQZu+nuQB2dkA=
Subject key identifier: 0D:46:6B:9B:D2:72:12:DC:CC:8D:C7:06:B8:16:A3:E6:1C:32:A0:6C
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F43285844D08CFD88077D7D2D19BA5400
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/30b4554c-b512-33ae-bfba-82acf470a536.roa
Signing time: Wed 07 Feb 2024 17:51:21 +0000
ROA not before: Wed 07 Feb 2024 17:51:21 +0000
ROA not after: Tue 07 May 2024 16:51:21 +0000
asID: 0
IP address blocks: 199.119.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d0:8c:fd:88:07:7d:7d:2d:19:ba:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Feb 7 17:51:21 2024 GMT
Not After : May 7 16:51:21 2024 GMT
Subject: CN=22bbac8c-1229-4311-84d1-61d9da3d7bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:e1:af:3e:14:3a:60:da:bc:c9:2d:1f:91:
8c:c7:1f:93:1e:7f:a5:e1:30:90:39:10:2a:68:13:
70:ba:b2:aa:7c:11:5d:c2:9d:b4:b9:dc:96:67:f2:
85:d6:85:9e:5a:c5:79:af:72:30:d7:aa:31:0c:a6:
04:3e:20:50:c1:07:af:f3:87:0a:92:70:90:af:5a:
9c:c2:ad:c0:f0:b7:1d:4a:25:25:8a:9d:68:fa:0c:
ca:a0:1e:8f:a2:29:80:b0:65:dd:1c:d1:1a:3c:50:
76:04:13:30:7e:cb:43:d1:6b:f4:65:b0:bd:87:9b:
9f:e2:28:23:02:54:8f:c0:9d:cd:09:c4:f0:47:77:
50:80:8b:d0:12:70:dd:13:71:63:34:ae:de:ce:64:
b8:ad:5b:09:bf:a7:d4:47:c3:66:ef:d0:06:d5:d6:
33:36:15:c7:2b:16:b1:ac:7d:32:e7:45:b7:23:5c:
d9:96:1e:f7:36:a1:b4:5b:c3:30:29:a7:e9:1b:cf:
87:9b:e1:57:bc:5b:b7:0e:b3:22:e0:52:4f:8b:a5:
96:76:58:e0:61:39:22:76:9f:d3:5f:21:16:ce:96:
41:24:a8:1f:95:81:55:1d:3c:ba:45:eb:23:83:47:
94:05:31:87:f4:4e:aa:7e:fb:2b:0a:02:53:88:0d:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:46:6B:9B:D2:72:12:DC:CC:8D:C7:06:B8:16:A3:E6:1C:32:A0:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/30b4554c-b512-33ae-bfba-82acf470a536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:c0:2b:58:67:d8:6d:c8:6b:86:46:eb:9d:b4:5a:ef:f5:29:
39:f0:35:0b:40:4f:fc:a8:ab:28:21:0b:29:ca:35:f6:d4:3f:
e0:47:7d:56:b6:af:1e:11:15:d1:54:ad:30:f2:f2:0a:3a:f7:
5b:28:87:60:0b:ec:17:10:85:af:2f:9c:e3:3d:8b:75:d1:87:
dc:1b:bc:0e:a1:69:ea:bb:3a:a7:47:b7:ca:d5:35:ea:65:ff:
49:d8:d1:8e:68:f3:38:87:36:8e:75:fb:14:2e:11:4b:a9:8f:
59:8e:28:72:12:13:61:ef:e1:17:f9:c5:dd:cb:3f:d8:d6:69:
a8:ed:79:fd:a6:ee:fc:bc:4b:82:54:4d:52:03:0d:4b:3d:de:
1c:b9:9c:a7:b7:1a:ba:8d:3b:52:a0:8f:ce:de:11:af:59:5f:
ca:39:2a:2d:90:89:25:84:ff:92:01:f9:f7:1b:a2:a6:f5:f2:
7f:e5:55:2b:58:43:ee:07:5e:ae:22:63:48:5f:01:50:5a:aa:
60:56:64:0d:a9:94:23:7a:6a:51:57:33:73:a7:26:d4:eb:1a:
f4:f5:10:c1:d1:b1:76:6c:bc:7c:00:6f:92:a3:57:36:ec:cc:
ea:d1:dd:be:e7:c2:71:5d:74:e0:91:21:41:cc:01:fe:a6:38:
96:ea:15:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 20:34:22 2024 by rpki-client on console-fra.rpki-client.org