Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/447c2398-0c8b-3204-8cce-3f372230e1b9.roa
File: 447c2398-0c8b-3204-8cce-3f372230e1b9.roa (raw, json)
Hash identifier: XO/3UctYtGuJKqX+KbWPHKkuD679WMaf+kRacr1F0+s=
Subject key identifier: E3:4E:A5:DF:31:E0:60:2E:6E:A9:A6:29:06:0C:10:E2:F0:5E:CE:E5
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285844D380F7B6E162731E1D4BE380
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/447c2398-0c8b-3204-8cce-3f372230e1b9.roa
Signing time: Thu 08 Feb 2024 19:14:33 +0000
ROA not before: Thu 08 Feb 2024 19:14:33 +0000
ROA not after: Wed 08 May 2024 18:14:33 +0000
asID: 834
IP address blocks: 209.145.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 15:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d3:80:f7:b6:e1:62:73:1e:1d:4b:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Feb 8 19:14:33 2024 GMT
Not After : May 8 18:14:33 2024 GMT
Subject: CN=23f49b5c-ba5f-491d-8fec-857df97ba179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:00:7b:7c:fb:d2:8e:e1:66:26:e1:e3:e9:39:
8c:c4:b8:85:4c:8b:94:f8:bf:e2:39:9d:3e:a8:a9:
c3:8a:75:89:df:77:38:7d:b2:37:31:01:5d:46:0d:
35:82:a1:28:6e:1f:c3:16:44:b0:29:d5:09:9a:af:
70:d1:db:75:18:b7:a2:8d:de:0b:6f:64:f1:17:83:
42:6a:a1:74:4b:a1:e9:39:a1:c0:ff:1a:ab:aa:4a:
37:e4:29:e1:89:00:14:02:1c:68:f4:34:82:2d:7d:
c1:46:0c:82:98:fe:7a:bf:c5:69:ae:71:c7:dd:21:
05:43:9a:c4:4d:fc:f4:e8:09:19:cb:7e:3a:07:01:
af:ce:17:6c:c7:64:8d:d9:37:17:52:9c:7a:03:15:
be:eb:d7:38:e3:79:f6:00:dd:f6:b9:ec:a1:36:9f:
e9:5a:a3:c1:66:94:08:7a:38:75:63:22:74:47:a7:
42:d6:da:8b:91:23:37:32:3b:c2:e3:82:8e:dc:02:
79:c3:e2:b2:c1:26:b1:84:77:b7:cf:92:2e:d2:8e:
bf:d3:3f:e5:17:da:6f:99:03:a4:5c:5a:a1:a3:21:
09:ab:87:fc:c8:7d:b3:42:f2:9f:af:ab:3b:59:97:
33:86:3e:68:63:fb:db:4b:3a:82:6a:d6:f6:07:da:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4E:A5:DF:31:E0:60:2E:6E:A9:A6:29:06:0C:10:E2:F0:5E:CE:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/447c2398-0c8b-3204-8cce-3f372230e1b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
209.145.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:51:0c:01:aa:d8:86:c6:09:01:f9:23:22:50:73:c9:3d:0b:
8a:89:6a:4c:13:1f:4c:d0:a9:c4:30:22:05:e9:ed:08:4e:8f:
9e:8f:db:c2:fd:3a:03:56:48:04:2e:f7:7a:ee:a8:60:4e:95:
81:6a:56:04:65:c9:7f:ed:63:e8:30:ce:ac:25:6c:7e:8a:07:
d3:e7:a7:af:bf:ab:45:8e:c8:e9:34:fa:1d:fc:49:a5:fe:21:
fd:ea:e3:ad:5b:2e:5a:85:92:dd:9f:6c:5e:d1:03:3a:dc:e9:
b0:8e:1d:51:38:17:18:93:fd:cd:54:1b:eb:30:68:9f:42:95:
3f:95:63:1a:03:70:2c:4a:62:51:5d:c1:27:ab:53:71:b1:23:
fd:0a:72:83:52:63:66:0f:00:e6:46:94:8c:79:24:e2:b3:8d:
50:1b:00:09:c8:80:b2:25:77:c7:15:93:27:d0:d6:f9:ec:b1:
cb:36:e5:c3:ea:e7:cd:88:e5:7a:fe:bb:06:3e:bb:ad:24:92:
1b:ed:3a:5f:e0:82:a1:fc:6f:26:73:51:52:7a:89:1d:d9:38:
0e:76:93:6e:cc:20:56:b9:d6:e2:11:f9:18:40:59:fa:b1:6d:
a1:3e:5e:0c:8b:5d:7d:52:d5:03:af:56:3a:dd:7c:72:c6:ac:
c7:c7:e0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 20:24:00 2024 by rpki-client on console-fra.rpki-client.org