Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/da85478d-ef89-362a-bc55-53a1f37afca8.roa
File: da85478d-ef89-362a-bc55-53a1f37afca8.roa (raw, json)
Hash identifier: +urw+HEczxpQH3pJGnihxQazXXcMuBwm1VQ+DRTdtwc=
Subject key identifier: 37:21:98:24:ED:82:CD:DC:C9:07:E4:59:3C:36:26:7C:5C:4A:EF:73
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285844D3D0CBDFF84FB5B649380750
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/da85478d-ef89-362a-bc55-53a1f37afca8.roa
Signing time: Thu 08 Feb 2024 21:55:24 +0000
ROA not before: Thu 08 Feb 2024 21:55:24 +0000
ROA not after: Wed 08 May 2024 20:55:24 +0000
asID: 9009
IP address blocks: 172.98.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 21:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d3:d0:cb:df:f8:4f:b5:b6:49:38:07:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Feb 8 21:55:24 2024 GMT
Not After : May 8 20:55:24 2024 GMT
Subject: CN=5a058f1e-5d46-4b2e-a306-9eb47f19af97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:9c:36:1f:ba:ac:38:bb:bc:52:ab:ed:0e:
54:1c:24:fd:39:82:ad:05:e7:bd:59:de:99:e3:c5:
10:15:d3:53:f5:93:9a:7a:2b:e3:66:c3:28:45:19:
7d:6f:4e:9c:80:e1:10:e9:fa:a1:00:6d:48:d6:55:
70:c5:2a:c8:33:f0:f2:53:79:ce:37:f2:85:7a:73:
01:87:ee:ea:b5:4d:cd:df:a7:a0:95:19:09:ec:22:
38:71:de:2e:f7:99:d0:30:01:e1:6d:66:51:e5:f6:
7f:ff:1c:3f:fb:76:03:7b:dd:2d:81:ef:fd:cf:2f:
36:da:4d:a2:78:de:48:47:ee:4c:3b:c4:a0:aa:43:
df:c4:c7:95:5e:13:68:d9:8c:d7:2d:bb:cc:fb:9b:
0c:75:ed:54:6b:71:18:dc:aa:c0:c4:3f:44:93:66:
69:4c:20:e7:91:ab:ab:f1:09:46:30:94:3d:d2:7c:
b7:4e:55:5f:99:65:8d:e7:83:34:6d:5d:60:36:34:
49:f0:fa:23:02:69:76:ed:0c:32:73:90:d6:3e:15:
66:40:67:98:79:ee:15:c2:9c:07:1e:f2:de:e5:17:
15:05:4e:48:ad:49:d5:0b:79:72:3e:6f:97:3f:93:
47:98:ab:6e:c3:e9:7c:dc:bc:f5:58:98:90:64:80:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:21:98:24:ED:82:CD:DC:C9:07:E4:59:3C:36:26:7C:5C:4A:EF:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/da85478d-ef89-362a-bc55-53a1f37afca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:f3:ae:3f:93:9c:23:25:d6:83:8f:12:4b:41:d2:16:00:01:
ee:61:43:3e:3a:34:cc:9d:35:78:75:af:44:e8:a5:3f:75:f5:
b6:02:f4:64:72:dc:e7:9f:c2:27:0c:c8:06:1b:7c:8b:1b:2d:
9e:f4:3c:a2:40:10:4c:b9:c8:07:fb:7f:1c:b8:cc:90:25:10:
f7:ba:55:2b:12:06:c0:f8:4b:ba:cc:37:fb:74:d3:5f:75:a1:
99:b9:18:26:d9:82:ff:69:1c:94:d6:28:0e:9f:d1:c4:79:da:
53:96:11:85:f4:10:4f:af:f1:0d:45:9e:b1:f8:0e:d3:a3:0b:
ed:27:c6:b8:a2:4c:04:09:22:81:e6:04:29:1c:e6:88:90:72:
d2:23:1b:c3:16:b4:14:be:85:9f:e3:ec:59:f8:41:4e:8a:44:
1b:50:32:65:d4:19:b5:fb:89:5f:73:58:7b:d9:6a:a7:fc:42:
47:0a:1a:aa:19:7f:03:b9:c3:b9:ef:ae:8c:ea:34:d0:9e:b6:
02:56:54:f4:de:e8:b8:91:c3:47:0f:56:8d:cb:c7:3e:c4:d4:
06:b3:3c:16:e2:85:2a:3a:bb:4e:e2:5d:9c:e3:f9:86:7b:84:
2d:57:74:3b:f3:ff:1e:cf:6d:ee:92:12:d1:2d:e6:8b:24:6d:
e4:7d:00:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 22:50:10 2024 by rpki-client on console-ams.rpki-client.org