Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/a7f81dce-1db5-3803-bd9e-cf342f9fa5e5.roa
File: a7f81dce-1db5-3803-bd9e-cf342f9fa5e5.roa (raw, json)
Hash identifier: IFE8bM93+6IeXO6gVuJDtkJURRrhgPie0h8q29GFQvU=
Subject key identifier: 29:0C:B1:11:9B:B8:FF:51:DD:EB:F7:0A:D1:2F:E8:F2:97:F5:F7:9A
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F4328584466055AB2F56E4AA939AC7100
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/a7f81dce-1db5-3803-bd9e-cf342f9fa5e5.roa
Signing time: Sun 31 Dec 2023 14:00:20 +0000
ROA not before: Sun 31 Dec 2023 14:00:20 +0000
ROA not after: Sat 30 Mar 2024 13:00:20 +0000
asID: 399244
IP address blocks: 45.59.171.0/24 maxlen: 24
174.136.202.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 29 Feb 2024 16:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:66:05:5a:b2:f5:6e:4a:a9:39:ac:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Dec 31 14:00:20 2023 GMT
Not After : Mar 30 13:00:20 2024 GMT
Subject: CN=83d33dc6-ffc2-4b4b-aaa0-e41e26df33e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:31:cb:37:ce:e6:97:9a:78:f2:82:08:be:
fb:75:e5:f4:72:e8:43:0c:b1:f2:28:13:1a:c3:05:
cc:5c:e4:fc:44:cd:85:e4:83:36:70:0a:06:6f:03:
1c:7d:7a:79:d3:3e:13:fd:98:ed:9e:a1:77:55:3c:
9e:67:2c:6d:17:c8:cc:90:18:94:02:e4:e4:9d:29:
e0:c1:eb:01:25:2b:1c:ef:6e:06:6c:f5:58:67:de:
1b:ce:60:0f:bd:8f:fd:01:35:cf:9d:ad:3b:46:32:
20:fd:24:2f:ca:64:1d:3e:20:ed:ce:63:d4:ad:0c:
29:7d:f0:1a:37:88:eb:f9:fc:e1:84:0a:b7:b0:91:
f0:08:73:26:e8:b6:da:8c:28:2b:a4:95:c0:63:2e:
3e:4e:67:04:80:a3:1f:02:4a:0a:cc:2f:e7:c1:b6:
4f:58:a7:21:bb:5d:c6:99:69:93:9a:5c:d5:38:1e:
25:da:63:3d:57:3b:5d:ef:c3:d9:99:22:63:68:c6:
fd:4d:bf:ef:1c:32:10:8f:ff:62:8b:89:76:e1:7a:
70:02:02:07:a1:08:df:e8:01:3a:23:09:66:24:1a:
5e:49:df:fc:9f:0e:15:18:d2:3b:59:73:bb:80:66:
0b:86:16:a1:d6:eb:3f:b1:63:90:16:57:3f:76:d5:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0C:B1:11:9B:B8:FF:51:DD:EB:F7:0A:D1:2F:E8:F2:97:F5:F7:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/a7f81dce-1db5-3803-bd9e-cf342f9fa5e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.171.0/24
174.136.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:3b:8f:46:ee:10:c7:f6:33:90:1f:ff:cd:47:6c:f7:81:d9:
9d:d9:51:d9:66:41:70:c7:d2:9c:4c:3e:10:19:c9:5a:2d:a4:
3b:cb:13:16:32:53:0e:f4:95:e5:8a:2b:ac:a6:4f:94:79:02:
17:bb:9c:62:72:6f:7c:cd:ae:89:5c:f5:6c:f2:05:54:0d:bd:
c7:6f:8c:c9:a7:3e:8d:06:f2:50:2e:c0:c1:8d:94:77:e0:4d:
84:be:1b:11:b0:74:ba:bb:a4:37:be:10:79:cf:9a:32:e6:40:
28:13:a2:8c:a9:d1:7b:63:7a:d2:db:25:e3:a3:78:95:c7:06:
9f:31:db:90:8a:e3:8c:f8:ca:aa:99:58:29:2e:a0:24:8b:09:
2d:c9:d8:81:df:41:e3:80:1f:25:ce:62:91:1b:0c:97:6e:68:
5c:60:71:9f:58:8c:50:6d:b4:fa:2a:be:95:5c:12:95:37:6a:
48:11:d5:b3:7a:39:aa:a6:d3:1b:2a:f5:6e:a4:c1:81:fa:4b:
e9:e8:09:0e:bd:fe:cc:8d:0a:a8:34:fe:61:48:c6:9d:b2:dc:
f1:45:f0:7e:63:33:7a:64:54:27:e1:8c:77:bc:3a:14:27:82:
5d:3c:1c:63:90:bd:fe:f6:e4:a7:e6:e8:16:f0:6c:47:b1:55:
d6:92:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 19:07:30 2024 by rpki-client on console-ams.rpki-client.org