Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ed66d5d1-766a-3d3a-8962-fed12bf20dc3.roa
File: ed66d5d1-766a-3d3a-8962-fed12bf20dc3.roa (raw, json)
Hash identifier: Z0r9/De7EOEMHyovySuXxCinYSeX/3DzSPjlhCd8nt0=
Subject key identifier: A3:A8:82:F1:AA:70:0B:12:47:8B:AD:DE:21:2C:2C:B7:28:25:48:83
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F432858444CE435A2F4DEF16A65119CF0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ed66d5d1-766a-3d3a-8962-fed12bf20dc3.roa
Signing time: Fri 22 Dec 2023 14:00:21 +0000
ROA not before: Fri 22 Dec 2023 14:00:21 +0000
ROA not after: Thu 21 Mar 2024 13:00:21 +0000
asID: 21743
IP address blocks: 130.254.44.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:4c:e4:35:a2:f4:de:f1:6a:65:11:9c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Dec 22 14:00:21 2023 GMT
Not After : Mar 21 13:00:21 2024 GMT
Subject: CN=a385ac5a-7d20-4d0f-a54c-796bccd277a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:d4:a1:e1:3d:3b:ee:88:52:95:a0:37:f7:
8d:8b:b2:2c:90:b1:34:2d:8d:dd:39:c8:9d:0a:40:
0a:d2:64:de:1c:8c:bc:b5:19:a0:b7:01:f9:fb:4a:
d3:d7:9e:59:dd:e3:6f:16:18:d1:f6:b0:eb:9e:b6:
c4:93:18:3a:89:11:73:0e:ee:06:4a:d2:9a:12:39:
ab:0b:f8:54:c4:a6:27:d0:12:c3:d4:3b:5b:3e:98:
86:13:c9:24:dc:1c:35:a0:dd:57:3c:3a:64:1e:7a:
39:3e:b3:17:ad:1b:79:24:be:8b:6b:06:79:cd:1c:
20:1b:a7:43:0e:e9:f3:6c:a4:73:0b:b0:d3:c7:f2:
96:ce:47:17:c6:4e:ae:d1:5d:21:1d:d5:4d:51:ef:
c0:b0:e8:1c:03:29:c5:25:ae:5b:60:9b:56:bc:7a:
92:b7:2f:83:71:3b:5d:fb:fa:31:7e:e1:cf:1b:e8:
51:d5:35:c7:35:f2:de:0a:08:4e:2a:a5:7f:e4:c8:
64:93:dd:3b:90:1c:8b:d1:ee:89:38:c2:83:c5:7d:
b8:e4:b5:cc:a3:c7:cf:0f:11:fd:7c:61:3d:53:b5:
04:ad:ed:5b:73:fa:70:9e:cf:b9:1a:c8:73:bb:05:
eb:ab:a2:a7:83:33:16:f3:d6:01:9b:5a:bb:0c:d1:
b3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A8:82:F1:AA:70:0B:12:47:8B:AD:DE:21:2C:2C:B7:28:25:48:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ed66d5d1-766a-3d3a-8962-fed12bf20dc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
130.254.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:50:ac:7d:6d:4b:67:1f:8c:ab:d4:c1:9b:65:88:d9:c0:22:
ce:a5:30:5e:25:c7:e8:fa:63:98:f1:aa:28:a5:f5:18:03:95:
2a:71:95:28:85:8a:ee:86:d1:5a:61:1f:6c:c7:6c:69:7e:38:
4f:48:ad:94:d3:b9:c2:8c:26:ac:49:d0:62:d3:1d:f6:9e:f3:
22:92:2c:be:be:7b:fe:3c:8c:ae:1a:34:2d:41:36:55:5b:d8:
b2:c1:4a:bc:e3:d9:1b:4f:ce:68:77:4c:1a:88:c1:75:5b:97:
a2:8d:2d:f7:63:a9:96:f2:e0:72:55:9e:c5:9a:a2:fc:13:bc:
97:12:49:76:2f:06:9f:87:79:87:c8:63:c9:df:f8:1c:a3:00:
d2:3b:12:10:dd:00:5e:ae:f2:4f:b2:2b:03:6e:39:2d:41:99:
5a:7d:87:13:c4:97:b0:e8:ae:f2:4a:d4:2e:0f:17:09:b0:7a:
10:10:5e:13:58:41:a8:fc:61:00:65:18:06:bb:62:f0:65:aa:
a5:a6:41:3c:9b:0c:f0:13:04:6a:9c:db:4c:dd:26:b2:65:7d:
79:58:7d:8e:fd:f6:82:2a:16:63:80:a5:2d:98:11:83:00:48:
7d:28:a8:fe:52:b6:f4:e3:cb:bd:40:f2:49:bc:98:10:80:3f:
63:7f:87:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:19 2024 by rpki-client on console-fra.rpki-client.org