Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/baa83604-a660-3a88-bf4c-44453ef26647.roa
File: baa83604-a660-3a88-bf4c-44453ef26647.roa (raw, json)
Hash identifier: S+5DQbYVyaloyTR1MeZhgN1j1eil/Tb6d8AZQk7Q44k=
Subject key identifier: A6:E4:4B:81:56:61:2F:8F:AA:24:0E:0D:F3:37:7C:9A:94:A3:CC:01
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285844798F228621239A48481E7B80
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/baa83604-a660-3a88-bf4c-44453ef26647.roa
Signing time: Sun 07 Jan 2024 14:00:20 +0000
ROA not before: Sun 07 Jan 2024 14:00:20 +0000
ROA not after: Sat 06 Apr 2024 13:00:20 +0000
asID: 55154
IP address blocks: 96.44.150.0/24 maxlen: 24
66.63.170.0/24 maxlen: 24
66.63.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 03:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:79:8f:22:86:21:23:9a:48:48:1e:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jan 7 14:00:20 2024 GMT
Not After : Apr 6 13:00:20 2024 GMT
Subject: CN=864d8270-272e-4ade-b63c-9e59993eea7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:0a:14:7d:2a:0d:91:7e:00:38:d3:7a:0a:
83:98:a3:26:7a:7f:52:0d:da:b3:86:38:14:35:e3:
f4:4f:87:8e:87:7e:82:b9:a8:c0:26:59:85:e0:0c:
da:01:f1:ae:ac:5c:e7:3b:05:c1:26:21:8e:27:4b:
22:c4:c2:df:f0:7a:c9:de:63:0a:b6:9f:fd:dc:d7:
8b:d3:a8:47:1c:de:6c:f7:c8:7e:73:b5:22:13:95:
0f:43:2f:79:b9:14:bd:5f:a5:50:4b:fb:3d:47:93:
05:01:d5:39:a3:9e:88:ce:63:dc:34:b5:25:73:83:
e1:b7:d3:89:63:25:6d:ac:53:ab:ce:5d:a0:b2:e3:
cb:4d:1b:dc:41:83:e0:08:2e:3a:0a:2e:32:dc:c4:
4c:fb:24:a3:d3:21:28:32:78:33:75:8b:d7:a4:4d:
18:0c:d7:60:29:0b:a1:1b:2b:61:2c:75:4f:bd:b0:
47:f6:de:12:1c:83:d3:e6:78:d8:84:12:ad:56:86:
14:73:2f:12:12:55:d2:12:23:78:d6:39:e9:96:88:
6e:77:98:99:4b:3d:85:52:8d:43:7c:b4:de:4e:76:
b2:fd:e1:de:c1:42:ee:06:7b:59:e5:bf:c9:c4:35:
9b:e5:e4:0e:95:c4:43:96:2e:c1:49:bf:4c:65:f8:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E4:4B:81:56:61:2F:8F:AA:24:0E:0D:F3:37:7C:9A:94:A3:CC:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/baa83604-a660-3a88-bf4c-44453ef26647.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
66.63.165.0/24
66.63.170.0/24
96.44.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:50:42:46:13:8a:f7:4b:92:91:1b:40:d5:af:07:98:14:82:
6b:3c:a5:01:d7:60:5e:0b:eb:57:6a:9e:a5:c8:62:e7:60:e5:
d4:72:43:00:37:65:e4:c7:c1:37:9b:ad:13:aa:80:cc:74:34:
18:e5:5e:7c:b5:5a:47:0d:64:29:ed:46:53:33:bd:2c:49:73:
1b:56:17:1c:70:93:d3:7b:2a:5f:fd:1b:d6:0b:ae:2b:08:0a:
af:68:96:a8:33:71:7a:de:e6:b3:1b:6a:ba:a1:8a:b5:08:71:
ef:4b:9c:d3:3d:88:68:c8:ee:eb:b1:ef:08:f6:28:93:8e:5a:
09:5b:db:82:be:3e:ab:39:76:0a:a9:84:4a:e9:e2:7d:57:cd:
82:7c:7d:5d:4f:33:70:b7:11:bd:71:a0:ae:78:23:d7:17:0f:
bf:d6:d9:42:7a:8d:26:fd:c2:01:f6:92:24:60:74:4f:7e:e7:
fa:bd:bd:7a:6c:31:6b:4d:60:05:14:8c:3c:10:79:06:64:53:
87:aa:bc:b3:7d:bf:bd:ad:20:fe:a1:58:56:f2:7e:f2:a7:9e:
aa:3c:ca:6e:cb:4a:80:cb:9f:9e:4c:32:f1:8e:01:b4:a7:b5:
d3:bc:ed:72:00:55:08:af:62:cf:9e:fe:37:22:89:0e:b9:74:
ce:e3:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 05:10:15 2024 by rpki-client on console-fra.rpki-client.org