Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/24fea508-a224-38b8-8254-deec2c4caa1f.roa
File: 24fea508-a224-38b8-8254-deec2c4caa1f.roa (raw, json)
Hash identifier: lKlRjd4r78peVjRDYV2cY5B1DZ2vS2NvzOCpAJIRYaE=
Subject key identifier: 31:63:C1:52:6F:34:BB:57:E6:F6:8B:BA:05:B1:09:B4:E9:48:61:32
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285843587F978F9BF79197A09F2C00
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/24fea508-a224-38b8-8254-deec2c4caa1f.roa
Signing time: Tue 26 Sep 2023 01:00:22 +0000
ROA not before: Tue 26 Sep 2023 01:00:22 +0000
ROA not after: Mon 25 Dec 2023 02:00:22 +0000
asID: 7018
IP address blocks: 141.140.4.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:58:7f:97:8f:9b:f7:91:97:a0:9f:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Sep 26 01:00:22 2023 GMT
Not After : Dec 25 02:00:22 2023 GMT
Subject: CN=8f053532-6fb9-4248-ac6e-4be841970a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:93:78:0d:70:6a:07:3b:04:de:f2:04:23:
44:32:66:b2:29:a6:fc:a1:13:c5:29:8d:9f:0f:c8:
94:5e:15:c6:89:87:01:f8:03:78:3b:45:91:37:f1:
17:c7:80:5a:50:85:cd:57:e8:27:4b:b9:0b:14:fd:
da:8c:46:da:2e:d2:60:b0:6c:c5:55:59:b6:a2:d5:
f5:e8:66:ae:db:bc:fc:da:5b:20:1c:12:6b:85:56:
aa:ab:2c:65:b9:1f:db:b5:90:3d:dd:f6:a1:28:93:
9b:5a:c2:44:d2:44:9d:ec:ee:a3:32:b7:fb:bb:88:
4d:1d:a1:62:91:d9:b1:fd:70:c2:62:da:f5:18:03:
47:4e:89:1e:e2:e4:ab:90:eb:37:d4:d0:64:34:78:
47:da:59:10:91:00:b6:69:83:d3:08:81:6a:62:57:
db:19:a8:0b:e3:2e:d4:5a:3e:16:2b:14:20:b5:ff:
e3:ed:8c:f4:8d:27:20:84:41:bd:13:13:0c:0d:32:
69:cb:b9:04:74:e3:26:be:77:20:34:da:4e:c8:d4:
41:d5:33:c8:12:b3:37:18:50:bf:45:8a:d3:61:79:
d1:87:42:06:b1:9c:3e:21:7b:a7:9d:83:12:5f:23:
41:22:c7:5a:f2:a3:8d:c1:e4:4a:06:7d:4d:fd:ab:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:63:C1:52:6F:34:BB:57:E6:F6:8B:BA:05:B1:09:B4:E9:48:61:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/24fea508-a224-38b8-8254-deec2c4caa1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
141.140.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:b2:b7:30:53:38:45:60:6a:d1:07:ed:c8:ba:a3:23:15:02:
1c:db:d0:b0:47:7f:07:7f:cf:b1:10:88:7e:ec:bf:0c:cc:df:
7d:0e:96:eb:6d:d7:a7:60:ce:93:cb:59:f8:64:9c:c5:45:b1:
fd:3a:d3:70:d1:f7:41:47:d2:fb:4f:cb:f0:e5:0f:d5:35:23:
37:47:20:82:c6:eb:44:f9:14:36:35:b4:27:b0:6f:0d:28:7a:
91:5d:95:11:75:6c:87:fc:23:d9:6a:80:6b:ac:29:4b:ef:62:
80:9a:04:22:ee:bf:c7:5e:31:66:e2:33:c2:f0:92:b3:58:70:
17:04:dd:0a:6f:e1:e3:a6:0d:cf:bb:3e:fc:e9:70:fb:0c:a5:
65:96:eb:de:dd:af:7a:09:ff:a8:0c:90:7c:7f:20:8d:24:5a:
8c:b7:91:02:df:b2:e0:2f:92:57:02:ac:db:e5:73:0a:e1:bd:
61:50:b7:9a:9f:c6:bc:a1:ac:5f:28:4e:db:a2:ef:9b:27:8c:
1a:3f:59:8f:24:fd:ed:a7:f8:2d:55:a1:f6:6b:04:57:a0:20:
7e:02:12:1c:3f:9d:80:94:68:25:85:5d:30:85:22:7c:a4:88:
97:0e:6f:77:48:5c:73:fd:e6:5e:c1:84:01:e3:b2:54:1c:5f:
92:18:c5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 14:55:58 2023 by rpki-client on console-fra.rpki-client.org