Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/73a0bc22-af98-332a-8d88-7fa8c6d26af2.roa
File: 73a0bc22-af98-332a-8d88-7fa8c6d26af2.roa (raw, json)
Hash identifier: 9Gt7FkpqrQfxx1QZ+9Xe9cIWUZfs/CCOj/9tOAZrM4g=
Subject key identifier: 8C:6D:CB:54:30:DC:C5:AB:EA:89:69:96:5B:13:B7:7C:80:66:B6:51
Certificate issuer: /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Certificate serial: 010D0C9F432858440588E440C3867E50ED0B3E80
Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/73a0bc22-af98-332a-8d88-7fa8c6d26af2.roa
Signing time: Mon 27 Nov 2023 00:34:00 +0000
ROA not before: Mon 27 Nov 2023 00:34:00 +0000
ROA not after: Sun 25 Feb 2024 00:34:00 +0000
asID: 36369
IP address blocks: 172.98.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:05:88:e4:40:c3:86:7e:50:ed:0b:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Validity
Not Before: Nov 27 00:34:00 2023 GMT
Not After : Feb 25 00:34:00 2024 GMT
Subject: CN=930116cc-93b1-4886-a68f-a82539ef73f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:59:2a:72:f0:21:5a:e4:17:27:6a:cf:f9:
25:99:64:ae:7a:62:68:71:cf:92:7b:99:5d:a2:f8:
eb:e3:f4:62:15:a5:8b:3d:84:48:5d:06:fe:67:54:
83:6c:92:fd:90:9e:f5:bd:b9:07:28:da:be:28:7e:
c4:91:7d:96:77:18:d0:82:65:54:63:c3:8b:c7:b1:
78:4b:dc:93:94:dc:b1:21:63:e7:1f:75:76:f0:34:
b2:44:0c:ef:71:27:9d:22:fc:b8:ee:a9:e8:6b:91:
dc:aa:55:98:09:90:7e:41:21:0b:40:11:d7:43:16:
44:7e:45:86:b0:55:0a:3c:7a:bf:24:4a:74:a9:0d:
27:bf:c3:05:27:0d:46:6d:68:19:3b:73:4c:2e:90:
cc:2b:e2:e0:75:f5:49:ca:12:65:3f:dc:a4:b1:46:
46:83:80:54:33:00:1e:f1:c0:eb:22:e2:15:99:4c:
bd:fb:17:ef:56:a2:ad:b6:ef:53:1d:e0:44:17:84:
49:5a:b4:04:c4:ec:e7:d8:6e:2a:eb:18:4c:6f:eb:
2a:0b:24:75:06:d4:56:ed:91:1a:f5:35:a3:bf:41:
82:ee:cc:e9:5b:06:02:ff:3b:b3:36:b3:4b:d9:b5:
cf:a8:28:71:53:a3:96:3a:ee:b3:94:89:fe:84:2c:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6D:CB:54:30:DC:C5:AB:EA:89:69:96:5B:13:B7:7C:80:66:B6:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/73a0bc22-af98-332a-8d88-7fa8c6d26af2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl
X509v3 Authority Key Identifier:
keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:cd:02:68:f2:0c:30:cc:e9:5b:89:ec:07:fd:68:a1:2f:4e:
c0:a6:39:c0:8b:ef:86:e6:09:da:85:11:67:01:f9:11:3a:4e:
87:46:8b:90:a3:5a:f6:a8:69:26:23:c2:02:56:56:a2:25:98:
df:9e:34:88:13:1d:5f:b9:bb:b0:51:1b:b7:e5:78:73:ec:90:
fe:53:25:05:d0:c4:02:bb:c9:05:b3:dd:72:8e:5d:c7:e8:c6:
c4:39:26:6f:9f:e3:2a:c9:99:b1:db:0b:9e:be:e8:2b:e6:4f:
a3:7a:fb:cc:4e:79:bb:e0:d4:64:4e:9a:2a:0e:02:6c:51:64:
55:49:e1:17:b4:bc:bf:ae:2d:b9:11:28:f6:e9:dd:7e:ac:9a:
3b:90:5e:d8:e5:c0:78:57:07:a1:46:a3:e9:3c:aa:f4:b9:bc:
b0:2c:23:c3:e6:84:35:98:4c:1e:c2:b5:2c:22:2c:48:b2:0c:
7f:24:6f:2d:8d:bf:f8:16:e6:92:0d:fe:74:72:39:28:1b:e6:
8f:ef:30:bc:09:5b:e7:68:2d:27:0f:d1:82:fe:6e:70:6f:63:
b6:6b:00:36:61:da:dc:8f:95:82:a2:7b:12:67:e3:bf:e9:c2:
53:d7:cc:53:f1:c5:6a:41:43:15:1a:0c:ac:27:fc:94:da:e6:
ca:2d:28:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 8 07:39:03 2023 by rpki-client on console-fra.rpki-client.org