Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/6c06f604-b2f6-3dc2-81f8-d63649a32511.roa
File: 6c06f604-b2f6-3dc2-81f8-d63649a32511.roa (raw, json)
Hash identifier: 2m1F/032BKzktFgytirhIXO1ul+qMyxn9cnAhaLVW1U=
Subject key identifier: 44:68:C6:30:21:48:00:7B:C1:34:72:62:36:0E:4D:DE:8B:17:BF:F8
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328583CCEE297FA1DFD5C383CAFC500
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/6c06f604-b2f6-3dc2-81f8-d63649a32511.roa
Signing time: Tue 18 May 2021 04:00:00 +0000
ROA not before: Tue 18 May 2021 04:00:00 +0000
ROA not after: Wed 08 May 2030 04:00:00 +0000
asID: 11325
IP address blocks: 172.98.166.0/24 maxlen: 24
172.98.190.0/24 maxlen: 24
172.98.191.0/24 maxlen: 24
172.98.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ce:e2:97:fa:1d:fd:5c:38:3c:af:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: May 18 04:00:00 2021 GMT
Not After : May 8 04:00:00 2030 GMT
Subject: CN=30fa66c9-ac73-4024-b5e6-671fe768da14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f3:72:d6:53:54:b8:ae:86:31:e0:7f:21:8c:
ed:7c:e2:bc:62:85:c0:25:ac:cf:76:a4:ae:38:0e:
75:2e:f8:5e:76:9a:e8:d7:fb:46:e0:07:52:29:1a:
05:83:4b:69:12:9f:c1:ea:f5:1e:84:2e:80:47:0a:
3c:d8:ac:0b:f8:af:f6:95:f7:9f:a9:c7:2d:0a:89:
c6:a3:1a:dc:1a:f4:85:b8:dc:a8:a2:52:ac:f0:cd:
85:36:2a:e7:ce:33:e4:fa:bc:fa:09:2e:89:d6:38:
2a:ea:50:8d:3d:f9:9e:71:e4:3a:c2:44:07:ae:74:
1a:30:0d:24:56:ca:d2:5e:3a:2b:a1:c0:21:30:41:
28:19:06:2a:b5:52:a7:6b:5a:d7:a2:44:f6:51:b0:
55:6a:8e:5a:c8:2a:7b:a7:f2:44:b2:3b:4e:18:9a:
bf:7f:2b:07:e2:7c:65:d9:05:64:f4:2a:c5:72:6d:
fb:d3:2c:e0:d2:c1:20:ba:ae:6c:37:73:98:c8:44:
da:6e:5b:22:c6:55:72:30:8b:c1:15:b5:cc:dc:34:
cb:f1:a7:00:39:cc:8c:fa:d1:71:0f:d7:0b:d5:24:
a9:07:13:ac:d1:0b:8b:2c:b0:50:1a:85:7a:5b:ef:
e9:2b:95:b5:d5:09:c8:35:cb:76:a2:4b:8b:56:0d:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:68:C6:30:21:48:00:7B:C1:34:72:62:36:0E:4D:DE:8B:17:BF:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/6c06f604-b2f6-3dc2-81f8-d63649a32511.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.166.0/24
172.98.188.0/24
172.98.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:d0:7d:5a:06:3f:ad:28:6c:7f:cf:78:8f:63:67:3e:00:12:
f3:31:cf:18:12:1a:f0:d6:72:8f:45:b8:db:b7:42:45:72:0f:
7c:77:32:06:39:83:10:b7:3a:45:09:a2:f4:7e:6d:68:2c:60:
ed:bd:fa:64:a3:01:e5:34:e2:d0:36:ae:97:19:71:5b:98:af:
32:bd:eb:e7:fa:b7:63:d4:62:dd:41:94:4b:8c:67:e1:61:b7:
8f:39:d9:42:da:b8:83:02:cc:18:7c:fb:15:4f:31:5d:f1:3e:
9e:84:8c:cc:fd:98:ec:1a:f5:ef:bc:3f:37:01:f6:4b:d7:09:
f5:dc:6f:80:18:41:28:6f:0b:7a:e1:06:d6:ea:36:81:40:12:
84:e2:b0:ff:44:98:2d:2e:f9:66:e7:ce:30:9f:3c:4a:27:de:
b0:8b:3b:d5:51:b6:b8:72:07:a0:4d:6f:10:ec:26:bb:0c:6a:
1f:55:a7:db:f4:63:35:c1:d3:75:cc:31:9f:2f:86:e8:1c:b1:
5d:3c:da:69:ea:36:03:98:b0:86:64:c1:dd:43:97:b8:89:6f:
bf:a0:0f:a1:c6:58:40:46:9d:22:c0:67:da:c2:7b:b3:bd:c9:
c8:ce:fe:ca:0d:24:bd:ae:bc:c2:a5:cd:26:c7:84:fa:ba:b0:
45:e7:3d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:39 2023 by rpki-client on console-ams.rpki-client.org