Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/14cdfd8f-edbc-3e04-87f1-bf8824be6f1e.roa
File: 14cdfd8f-edbc-3e04-87f1-bf8824be6f1e.roa (raw, json)
Hash identifier: hHtEqeCa1rvo2jVJFZR63cRz1DSMGLX82+hah08tmVQ=
Subject key identifier: 5A:9D:09:F1:87:53:6E:3F:DE:8C:D1:7F:0F:E0:21:A2:96:4B:E6:DE
Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial: 010D0C9F43285844D01A6A2112224263707EEE80
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/14cdfd8f-edbc-3e04-87f1-bf8824be6f1e.roa
Signing time: Wed 07 Feb 2024 14:00:29 +0000
ROA not before: Wed 07 Feb 2024 14:00:29 +0000
ROA not after: Tue 07 May 2024 13:00:29 +0000
asID: 200239
IP address blocks: 128.254.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 14:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d0:1a:6a:21:12:22:42:63:70:7e:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Validity
Not Before: Feb 7 14:00:29 2024 GMT
Not After : May 7 13:00:29 2024 GMT
Subject: CN=be418027-c504-41a2-a5c5-316d6d908c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:68:65:a5:4b:c0:58:4a:25:dc:69:22:19:
67:67:74:36:3a:0d:4d:5c:00:ae:dc:15:d4:02:d1:
ac:3e:3a:76:89:cf:da:51:d7:00:86:44:74:6e:fb:
3c:f3:37:82:a4:7e:d8:ba:2d:8b:80:0e:95:60:6f:
7f:f0:ad:45:0e:c3:4a:6a:2d:f1:15:60:b9:11:5e:
f2:24:ac:e4:7a:01:78:d3:36:27:42:85:37:9e:56:
12:6f:95:f2:93:27:d6:6a:6b:8d:5c:7e:ef:a6:27:
0d:3a:68:1d:30:00:d4:8b:b9:1c:7c:af:09:15:a6:
94:03:13:ff:c0:5f:3b:e9:6f:79:78:eb:4b:69:3f:
a8:3e:8c:37:7e:f0:05:b1:b4:e4:bd:36:50:82:32:
b8:e2:14:33:8e:b7:4f:5e:de:44:73:58:49:c6:76:
28:71:30:6c:82:22:f8:dd:c7:b1:3e:0e:44:0f:d8:
ac:fe:ae:35:5a:93:3e:aa:10:41:c1:d5:ab:da:db:
99:e3:f3:c5:47:02:17:59:02:06:5d:ae:66:a6:bc:
96:c6:ec:d7:64:66:89:63:d2:3e:4e:5d:47:d0:9f:
93:d3:66:26:72:18:e9:5d:2b:69:3e:1b:82:ae:fa:
aa:c8:b7:19:2f:c8:7b:84:25:0e:3c:8b:82:e3:33:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9D:09:F1:87:53:6E:3F:DE:8C:D1:7F:0F:E0:21:A2:96:4B:E6:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/14cdfd8f-edbc-3e04-87f1-bf8824be6f1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl
X509v3 Authority Key Identifier:
keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:b1:70:48:f6:ca:c6:f5:71:b8:08:df:6d:92:a0:d0:fc:57:
03:87:9e:53:14:06:50:1f:3b:d8:87:29:b6:3b:94:e5:21:db:
41:d4:23:dc:49:d0:b1:c9:bb:9e:ee:8d:b6:af:bb:f2:7b:62:
54:fc:a0:e2:87:ba:9e:48:f2:08:67:99:c5:c5:16:60:1f:2d:
ea:66:9a:24:7a:bd:d7:6d:05:57:85:08:9a:45:2b:cf:9f:0d:
67:bc:ba:ae:5d:e4:5a:9a:13:57:18:b5:68:12:a3:02:46:4d:
c4:45:78:03:4f:75:fa:f8:2a:da:4b:5e:4d:b6:90:50:5c:24:
58:a8:52:b8:49:77:37:87:7c:39:09:db:6c:c8:45:df:8e:87:
31:64:75:65:49:95:b0:6f:ab:38:16:4f:71:95:cd:ec:d8:75:
72:d6:ef:8e:89:25:18:bb:ee:01:28:05:67:11:8f:ec:de:28:
e7:cb:58:9e:11:23:14:ca:03:91:5a:c2:89:d2:0c:9d:64:c5:
b5:7a:19:cd:86:ef:7c:10:00:71:8a:c8:8a:75:aa:4e:25:0e:
64:3b:e0:bd:73:85:3c:38:52:38:1c:3d:cf:1e:ac:ea:c9:1b:
9f:16:93:1d:da:aa:51:e3:2a:0e:53:05:bb:98:36:f6:88:ef:
64:dc:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 19:36:56 2024 by rpki-client on console-ams.rpki-client.org